Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/8171864b-94d0-3131-bf13-2f13372e9abb.roa
File:                     8171864b-94d0-3131-bf13-2f13372e9abb.roa (raw, json)
Hash identifier:          0BiIcjK1YTrrhv2FD86lInbvlA7SEyRVcuzWdumCwik=
Subject key identifier:   97:DD:74:05:3E:F7:C8:77:A4:97:BC:2B:9F:A3:72:F7:FB:59:3C:D8
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584D422F8F3BF95ECDE50EA449C0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/8171864b-94d0-3131-bf13-2f13372e9abb.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     21433
IP address blocks:        170.251.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8f:3b:f9:5e:cd:e5:0e:a4:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=793af3da-4348-4370-bfb4-fd35bf2e913a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:48:c8:9c:e1:a9:54:94:24:ed:a2:1c:1d:
                    f9:51:5d:ea:f9:d7:4d:70:c5:0b:7c:1f:17:f7:5b:
                    88:98:37:77:6b:91:db:21:e6:d7:76:43:bf:a7:e8:
                    d9:3f:1e:94:aa:61:a2:4b:ef:f6:60:f1:ca:b4:a6:
                    e5:ef:cb:bd:1b:e0:3b:e3:d6:db:d6:74:8f:4c:51:
                    9e:b6:2c:b7:6c:d7:5f:79:48:aa:23:67:d1:84:39:
                    17:85:9f:99:d1:f9:5f:43:0d:70:a5:6e:ba:62:fe:
                    f3:b7:c2:6a:0c:1d:83:61:33:de:5c:e0:db:f9:68:
                    21:cc:28:ee:1c:ba:41:f6:25:a7:da:c8:53:4b:5c:
                    17:82:76:07:05:1a:b7:36:b5:27:28:11:31:cc:d8:
                    be:6d:c5:14:86:c7:fc:89:76:b1:f8:b3:22:50:1e:
                    ba:9d:31:e6:fe:cf:c8:22:8d:ac:d4:c2:d4:55:d8:
                    19:a5:9e:95:73:66:e9:36:de:d1:d4:ad:82:c6:a7:
                    01:6f:f8:80:30:80:d1:24:cd:e9:e7:f5:27:ad:1f:
                    33:1c:9c:04:d8:64:4d:1d:ff:4a:c9:39:41:d5:a0:
                    b0:18:d9:e3:c3:35:9c:80:03:64:45:46:08:7f:cf:
                    6c:0e:0a:cd:39:52:fb:cf:b8:48:df:dd:86:87:de:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DD:74:05:3E:F7:C8:77:A4:97:BC:2B:9F:A3:72:F7:FB:59:3C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/8171864b-94d0-3131-bf13-2f13372e9abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:31:be:bc:07:75:f3:3a:b6:79:7e:1f:86:e6:a8:9d:b0:
         a5:49:2c:72:1a:53:e2:3c:d9:b3:15:cc:87:04:d4:63:50:96:
         62:1d:76:ae:ad:46:c4:a0:3f:82:87:d3:ef:0c:95:c9:08:b3:
         63:13:d6:9e:e3:51:05:48:33:a1:c6:80:5d:61:79:7b:8f:38:
         58:f3:82:41:59:40:30:e0:89:5e:5b:da:77:5a:43:ca:52:99:
         9a:76:4d:4f:98:12:84:75:c6:d8:e1:bd:21:20:32:30:9b:55:
         58:aa:a2:ef:4d:69:54:12:17:bd:c9:12:ae:0c:a5:27:31:f0:
         dd:0a:21:6f:d1:82:de:dc:04:16:73:58:56:be:97:03:2c:09:
         af:97:75:a2:89:31:21:57:26:47:57:8e:ce:03:d1:44:23:26:
         a0:ff:32:1b:fc:4a:e8:08:b0:dc:a8:32:b6:6a:f1:05:91:55:
         b1:a7:ae:35:2e:75:03:eb:4c:ce:0b:04:37:02:1c:ae:46:36:
         0a:e7:cc:45:05:06:6a:c9:ef:d5:84:c4:d9:20:9f:7a:39:da:
         c5:82:f7:1a:23:8e:49:43:c6:fb:e0:21:05:77:e4:f3:c9:49:
         7c:a6:70:84:2a:0a:5e:d1:a5:11:16:db:9a:53:46:80:c2:40:
         df:25:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:32 2026 by rpki-client