Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4ef38ed-5090-3216-9c9a-753f622a7ceb.roa
File:                     f4ef38ed-5090-3216-9c9a-753f622a7ceb.roa (raw, json)
Hash identifier:          Agka1ao9j3HHlJX9wX5XtN/hqkK6Edi0JKhd8LCoJK4=
Subject key identifier:   FA:EC:9C:66:3E:5E:42:0C:CE:0D:CF:17:7D:C0:4C:E1:93:3E:5A:72
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE28515A64C5D4DB3F9E180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4ef38ed-5090-3216-9c9a-753f622a7ceb.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        170.199.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:85:15:a6:4c:5d:4d:b3:f9:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=5bef0efa-bee0-42e8-a3d0-6546b13e4e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:3d:a4:8e:15:80:1a:be:0a:0d:4a:26:79:
                    69:9d:da:cb:0c:cc:bf:3c:b6:d3:69:07:52:78:07:
                    70:ec:ba:f5:e5:d3:34:ac:b6:0b:b6:bf:c7:03:c9:
                    88:86:3c:04:87:d6:ef:51:e1:e2:e5:72:79:b7:f6:
                    11:aa:82:fc:69:39:94:53:64:38:f6:95:0d:11:58:
                    1e:58:2c:a9:34:a1:c9:66:65:c7:cd:79:d1:56:e4:
                    43:72:b2:5e:51:7e:80:76:f6:95:6a:63:cd:59:ac:
                    ed:97:fb:5a:52:a9:d1:85:7c:4d:30:81:7d:2f:f7:
                    2c:90:88:a7:ed:ef:b3:80:57:c1:4c:54:78:8f:77:
                    f6:8f:0d:e7:53:b7:12:b2:3c:23:77:5f:65:1f:8a:
                    97:d7:f6:a2:18:dd:ac:5a:db:e1:a9:f6:56:9a:82:
                    ba:cc:03:99:c9:c9:e9:ee:f3:33:27:90:04:a0:9e:
                    4c:25:7d:dc:c3:30:5f:0a:3e:58:fa:82:b0:ad:58:
                    02:38:9d:d7:0b:f5:02:57:31:af:c0:36:c2:4c:83:
                    80:58:6d:c4:ac:3a:69:9d:e6:66:13:e7:8b:a3:da:
                    ee:be:8b:2b:d1:9a:0c:e4:fb:ac:33:41:a5:4d:eb:
                    8f:b5:ce:ff:43:bb:88:44:00:88:b3:b2:8a:05:02:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EC:9C:66:3E:5E:42:0C:CE:0D:CF:17:7D:C0:4C:E1:93:3E:5A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4ef38ed-5090-3216-9c9a-753f622a7ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:05:78:3b:77:eb:f9:c1:eb:00:da:73:f3:8c:59:54:1d:b1:
         50:0c:a3:22:66:7a:c9:74:39:f1:a8:35:ba:53:a2:33:42:53:
         71:6d:b1:27:21:34:e4:96:9e:e7:be:90:e3:db:f3:8e:b7:c5:
         88:54:8f:7e:ec:5b:a7:98:67:d7:3a:d3:3a:d8:6b:25:d3:11:
         1c:97:c5:96:19:ce:2f:3f:0d:ab:46:3b:cd:3e:75:70:35:e6:
         9d:7d:c1:a3:66:1d:ec:ed:4a:b7:ff:71:f1:0d:57:9b:75:10:
         8e:f9:37:c8:54:10:11:42:a8:0f:6e:4c:22:2b:01:ee:56:14:
         9b:4a:47:c4:e8:b5:4f:e6:43:e5:6b:41:7c:f5:94:43:27:9c:
         15:8b:2f:65:8e:03:3a:8d:c5:58:90:09:11:14:f8:5d:ad:a6:
         2e:b2:89:e1:a7:a3:e4:d7:b6:92:fc:d6:43:f2:f1:ae:00:1c:
         0d:1f:e4:43:f1:93:5f:e5:4f:21:0a:84:f4:6b:1f:83:02:84:
         87:b3:8a:3b:6e:de:aa:fa:9e:5b:34:8e:51:2e:a2:42:1d:cb:
         20:f3:6d:2e:b7:28:c1:41:7a:91:4b:5c:38:ef:6e:28:65:ef:
         5a:9a:5c:09:e5:d9:67:a8:51:47:9d:d8:6f:13:d3:e3:a5:eb:
         f1:4a:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:37:35 2026 by rpki-client