Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/aceea0cb-5fc5-3e99-bad3-7c37c89bc7d0.roa
File:                     aceea0cb-5fc5-3e99-bad3-7c37c89bc7d0.roa (raw, json)
Hash identifier:          A1LWSucuc6O96z9nrcRvbfmgi/sglYVwlDC7wJTTTag=
Subject key identifier:   BC:8C:45:CE:E6:9B:B7:BD:0C:62:96:39:F3:D3:BA:61:07:2F:16:8B
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584DB07591FB370D26513798A5C0
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/aceea0cb-5fc5-3e99-bad3-7c37c89bc7d0.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        162.210.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:91:fb:37:0d:26:51:37:98:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=1682ac4d-5655-45b8-a4ec-2732774c3c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3d:9f:80:af:17:89:6b:8c:ea:24:fb:c2:5b:
                    9f:44:e5:15:0f:02:05:4e:f7:26:e2:b6:b1:16:01:
                    ae:df:fb:53:0c:87:68:d2:f4:a1:be:6b:78:91:92:
                    06:05:c7:5d:04:58:61:88:9d:e0:13:0e:1a:34:ca:
                    27:c1:ea:ec:4b:67:80:de:0d:5f:61:59:1c:d8:a8:
                    96:be:ba:49:e1:b9:d1:93:4f:84:20:88:8f:45:9d:
                    37:33:d6:b7:41:12:84:62:fe:ac:86:68:31:b5:6d:
                    c7:0c:40:60:d8:67:fa:6f:04:bd:20:0e:f7:9d:1a:
                    cd:6e:b1:9b:b5:0b:e8:61:94:c4:82:83:f1:5e:58:
                    3e:08:1d:7e:ed:ff:c7:73:a6:da:e3:0c:21:1b:4f:
                    65:e9:d6:a1:92:5f:a2:7c:23:3a:e1:0d:9b:80:05:
                    59:b0:e4:9d:8c:da:6f:f7:50:b3:9b:75:10:af:4a:
                    6c:6b:50:79:3b:98:27:99:1b:4d:cb:45:b5:9c:a7:
                    a2:0f:54:a8:c1:87:07:7d:09:19:38:d8:9c:6a:35:
                    aa:bb:34:79:35:54:50:0d:8c:fe:16:9a:1c:2b:99:
                    dd:d5:58:09:c0:f5:03:3a:9a:94:64:38:4a:52:3b:
                    8f:ba:7b:09:65:62:76:2d:f6:5f:e7:cd:9f:ab:d4:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:45:CE:E6:9B:B7:BD:0C:62:96:39:F3:D3:BA:61:07:2F:16:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/aceea0cb-5fc5-3e99-bad3-7c37c89bc7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:6f:ea:82:a0:ea:45:92:91:23:be:e1:93:0d:a9:ee:56:
         7d:d6:4a:8b:af:69:04:5a:ec:9d:a0:52:e2:ca:a3:9f:c0:bb:
         32:e7:e6:d3:e3:1f:f5:af:08:32:ca:90:44:48:36:de:6f:95:
         5d:93:a5:aa:b0:41:a1:f7:76:2d:79:88:65:46:20:00:19:77:
         de:53:cb:3c:92:f1:b1:da:d5:67:6b:46:62:33:6a:a6:61:ce:
         76:6a:e4:4a:a2:a1:52:ef:4a:8a:55:1f:1f:07:f2:05:08:3e:
         0f:57:6f:be:fb:6e:08:03:78:8c:ed:2a:27:68:71:60:08:eb:
         20:cc:f7:9b:e8:2b:88:06:7c:cc:2b:6a:12:8b:df:d2:ac:82:
         15:e6:7e:24:a5:ca:f6:10:6d:07:28:05:2d:57:38:95:b2:7c:
         1b:01:25:49:de:9a:f1:68:ef:89:10:a9:99:4b:a5:3e:b3:b8:
         36:01:32:f8:7a:29:d7:8f:ca:39:28:9d:10:07:15:89:26:fc:
         09:4e:5a:9f:08:5b:8a:2e:94:2a:77:13:d8:b3:90:c8:68:05:
         87:74:39:fb:b2:af:96:28:a3:10:da:f5:f3:e1:65:be:fc:fb:
         ab:17:1c:a5:07:8e:c3:17:34:76:b8:eb:60:1c:17:aa:fa:fa:
         bd:2c:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:16 2026 by rpki-client