Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/569b0d84-5d83-351a-8330-2ccbe7d030a0.roa
File:                     569b0d84-5d83-351a-8330-2ccbe7d030a0.roa (raw, json)
Hash identifier:          X+8dP7DzDUJq1N+KNm/WN1Hv+eoqipMDP1PTLgofaV8=
Subject key identifier:   10:70:C7:C9:11:01:56:C5:18:44:55:44:71:E0:06:FB:B5:02:63:77
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F4328584D8EF55C79611C9CE41AA98480
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/569b0d84-5d83-351a-8330-2ccbe7d030a0.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     17151
IP address blocks:        216.147.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5c:79:61:1c:9c:e4:1a:a9:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b647684c-6103-4cef-aafa-9eb4f654156d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:49:a8:1e:97:9d:c9:2d:f4:5e:fc:83:c4:
                    36:81:78:34:65:a2:d2:ac:8e:ae:6e:be:70:d6:79:
                    18:67:d9:59:01:0d:6d:13:f4:fc:a8:51:01:c3:57:
                    30:09:60:01:63:dd:57:a5:3d:26:8f:b3:95:73:a3:
                    5f:25:2e:21:e8:3f:0f:06:ca:6b:21:38:2a:ca:35:
                    68:c9:f2:9e:40:5b:8f:ba:eb:53:7f:42:48:cd:d5:
                    67:9b:bf:e2:4d:b6:2d:0e:bb:6c:6a:8b:ca:d0:71:
                    a2:fd:c6:68:bb:e0:e3:6f:ea:80:7f:98:0a:b5:96:
                    df:12:be:f0:2c:9b:c0:55:5d:96:a9:5e:5b:13:b1:
                    84:48:85:18:96:f2:3c:36:c9:5f:9b:92:58:3a:b0:
                    e8:8c:a7:dc:2d:3f:6c:ac:4a:a0:7e:09:7a:96:0f:
                    82:8b:0c:64:9c:82:14:dc:3b:0a:6e:ae:87:7e:4a:
                    3b:87:ec:45:8a:e0:4a:c8:ef:c2:3f:fb:3f:da:34:
                    e2:06:9e:b3:56:cb:0a:7f:3a:d5:19:8c:93:48:f7:
                    5e:e6:cc:a5:38:6f:0e:62:ec:be:72:da:0b:df:c0:
                    23:e5:62:8e:7a:6f:c5:ee:e1:3f:0f:f7:8d:e7:c4:
                    96:ab:ea:dc:84:02:70:dd:29:f2:47:c2:01:05:1a:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:C7:C9:11:01:56:C5:18:44:55:44:71:E0:06:FB:B5:02:63:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/569b0d84-5d83-351a-8330-2ccbe7d030a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:99:53:95:a9:d2:24:97:59:26:a0:74:78:ae:37:a3:fe:
         30:eb:b8:2d:9d:49:24:58:1f:f4:72:3f:c6:a9:d3:44:ed:89:
         aa:b6:98:3d:d0:fd:6a:d1:9b:ef:21:1a:ae:dd:5a:70:58:95:
         d2:71:1e:ea:8f:6a:0c:dd:2f:be:c2:6d:d1:f3:3a:ac:d4:8b:
         fd:26:f4:b9:43:a2:1f:01:6a:d9:d4:79:89:f5:be:e5:da:02:
         51:86:e7:df:6a:2e:7e:5c:9a:87:ef:d5:6e:c6:54:3a:bc:b2:
         3b:60:c0:5e:2c:46:7c:57:ba:14:82:2c:3b:33:3b:44:6f:ce:
         4c:88:3c:2e:8d:84:c4:0b:b9:67:0b:05:c9:ef:b1:b3:02:0d:
         86:07:b8:8e:a2:05:00:9d:4a:df:ec:49:34:03:5b:4f:92:32:
         9c:db:f2:86:d7:5b:ae:f5:83:f5:a1:42:43:28:a3:70:d8:81:
         ad:26:57:b8:8d:85:58:c2:97:25:58:37:79:d7:4c:a7:b9:66:
         d3:f4:9d:a5:5c:ec:3d:41:7f:a8:83:2c:5b:ff:87:11:7f:67:
         aa:13:e4:b3:58:89:a8:e1:de:f0:88:4c:45:31:a0:1e:fe:dd:
         28:ef:1a:0b:e9:ff:38:c5:7a:34:33:09:96:7c:20:66:37:43:
         31:07:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:51 2026 by rpki-client