Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/11a34b76-748f-3912-9a1d-5a4242816489.roa
File:                     11a34b76-748f-3912-9a1d-5a4242816489.roa (raw, json)
Hash identifier:          029D0VHO3e+AyXowmsLT4hFcVvehHpkZfcwcu+K+0hY=
Subject key identifier:   E0:C1:E9:14:CA:F4:E5:18:23:4C:0B:D1:5B:63:60:E6:8F:64:D4:C0
Certificate issuer:       /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial:       010D0C9F4328584D8EF55B822B5B24870D2AE300
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/11a34b76-748f-3912-9a1d-5a4242816489.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     18780
IP address blocks:        173.0.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5b:82:2b:5b:24:87:0d:2a:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=fd603618-78fb-477a-92e7-2a580ea0af17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:f4:2e:7d:e1:26:30:c7:d2:b9:18:f2:ea:
                    5f:95:cb:45:5d:de:10:05:d6:d3:f9:20:c8:f6:b4:
                    10:3c:54:2d:29:7e:98:18:7f:81:69:7f:b3:f6:19:
                    74:9e:67:1e:93:ef:90:b7:e7:8e:14:fa:ea:08:43:
                    66:84:1e:e1:68:60:ca:a8:1b:ec:bc:5d:cd:ff:5d:
                    c9:b2:a8:ce:5b:24:cb:d7:07:1b:86:d0:62:3e:18:
                    d5:1b:66:68:db:bc:c8:92:8e:3e:d1:9d:d0:75:79:
                    cf:d5:9d:03:22:d3:8b:d1:a7:3d:01:b7:da:03:60:
                    b5:80:b3:08:9e:c9:52:78:6d:bd:b5:7d:2b:77:f2:
                    5e:43:ab:fd:09:71:34:7d:af:94:c5:f8:cd:c8:81:
                    14:1f:bf:88:62:28:70:9b:27:fc:35:09:16:d1:8a:
                    9b:a8:7e:1f:7c:1c:52:88:71:49:98:3f:36:2c:e1:
                    c1:53:5e:24:6c:68:ca:a8:1e:22:82:64:6a:a5:fe:
                    85:31:0c:b6:e3:22:34:40:d9:00:aa:2d:cb:98:e0:
                    5b:e1:32:c5:d5:0c:8e:36:2d:63:97:cb:34:b1:0e:
                    60:d2:93:c4:d1:6e:4d:24:54:df:ec:08:aa:5b:67:
                    a2:3b:4c:a4:22:98:af:15:0e:5d:f2:ba:32:65:4e:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C1:E9:14:CA:F4:E5:18:23:4C:0B:D1:5B:63:60:E6:8F:64:D4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/11a34b76-748f-3912-9a1d-5a4242816489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:06:b6:2b:92:d1:9f:f2:75:6a:41:59:37:e7:a4:4a:47:
         58:27:9f:1e:b3:33:ff:58:00:8c:01:e9:0f:65:a4:73:14:bd:
         56:86:10:de:a2:a2:c4:9d:31:b2:cd:3d:67:ee:5b:a3:40:ba:
         65:9d:52:5f:ea:fe:c4:b3:bd:58:ed:24:00:e2:8d:5e:61:cf:
         31:39:cb:ee:10:cb:51:89:93:7b:00:28:24:42:0e:12:62:ac:
         88:07:14:3f:23:f4:67:13:f0:cd:ab:3a:73:b7:b6:8b:c4:4e:
         e2:eb:a1:9d:f1:ca:21:3d:8b:da:9e:cc:80:20:4d:53:ab:c0:
         cc:c6:9f:25:24:e2:a9:84:19:e2:e4:c4:47:69:9f:6e:7a:f5:
         08:44:c9:f4:17:d9:1b:22:37:62:fe:54:1a:60:0c:25:2f:cf:
         cc:6a:1e:5d:f3:cf:3c:b9:f0:57:06:c0:76:16:2c:ac:f9:fb:
         c1:55:dd:45:f0:50:78:6c:ac:e3:87:85:04:60:7f:10:6c:b3:
         f3:03:89:a2:b5:47:1b:f3:49:4e:58:7c:0d:71:1a:c0:3b:08:
         07:0d:b7:24:62:1d:98:d9:23:61:a9:71:06:9e:2f:3d:df:43:
         02:2e:13:f2:86:23:35:e1:b0:18:42:c3:52:21:29:db:72:41:
         7a:13:8f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:49 2026 by rpki-client