Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/9e908481-e959-31bf-9196-914b2d9a342c.roa
File:                     9e908481-e959-31bf-9196-914b2d9a342c.roa (raw, json)
Hash identifier:          auvv2AvOVy+qa0qUKwtqODLKoLCSjXufB7H7iyfdB5U=
Subject key identifier:   B4:18:9F:CA:0D:3E:55:B9:69:5D:01:91:4A:37:DA:F7:6A:D4:E9:08
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584D297DC4F8699FCCFA5EAD1570
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/9e908481-e959-31bf-9196-914b2d9a342c.roa
Signing time:             Sat 14 Mar 2026 04:43:08 +0000
ROA not before:           Sat 14 Mar 2026 04:43:08 +0000
ROA not after:            Fri 12 Jun 2026 04:43:08 +0000
asID:                     11911
IP address blocks:        160.254.126.0/24 maxlen: 24
                          167.113.164.0/23 maxlen: 23
                          167.113.166.0/23 maxlen: 23
                          167.113.176.0/23 maxlen: 23
                          167.113.178.0/23 maxlen: 23
                          167.113.196.0/23 maxlen: 23
                          167.113.198.0/23 maxlen: 23
                          167.222.253.0/24 maxlen: 24
                          170.61.40.0/24 maxlen: 24
                          170.61.41.0/24 maxlen: 24
                          170.61.42.0/24 maxlen: 24
                          170.61.43.0/24 maxlen: 24
                          170.61.71.0/24 maxlen: 24
                          170.61.72.0/23 maxlen: 23
                          170.61.74.0/24 maxlen: 24
                          170.61.76.0/23 maxlen: 23
                          170.61.132.0/23 maxlen: 23
                          170.61.139.0/24 maxlen: 24
                          170.61.160.0/23 maxlen: 23
                          170.61.170.0/24 maxlen: 24
                          170.61.171.0/24 maxlen: 24
                          170.61.173.0/24 maxlen: 24
                          170.61.174.0/24 maxlen: 24
                          170.61.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:7d:c4:f8:69:9f:cc:fa:5e:ad:15:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Mar 14 04:43:08 2026 GMT
            Not After : Jun 12 04:43:08 2026 GMT
        Subject: CN=0fece951-1d5f-4ad6-b69b-a7f7cee87432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:11:50:5c:6c:dd:96:56:ab:a4:6b:8a:03:
                    58:9d:c3:80:b4:9f:43:61:e4:bf:47:34:28:03:01:
                    6e:74:41:6e:2d:f3:72:d7:b6:60:15:71:25:f6:a7:
                    f3:4b:88:4b:f9:01:b5:87:69:2c:a7:7e:3b:76:61:
                    6d:81:2d:6d:95:94:37:17:a4:0b:41:e7:e4:63:52:
                    52:cc:67:ba:bf:24:6c:0b:f9:f4:8b:18:9f:52:d1:
                    7e:e2:97:c0:89:77:dc:f3:ee:51:10:41:a9:4a:4a:
                    84:bf:45:2c:30:94:45:9b:0e:33:b8:54:96:40:8d:
                    61:16:9f:3e:3d:76:14:af:8c:d3:87:59:ce:05:5b:
                    c0:a6:72:59:9d:7e:a3:b6:52:e7:80:69:c9:cd:44:
                    ad:08:0d:23:b0:17:6a:e9:04:56:ed:0d:25:2c:1f:
                    c8:31:d9:ad:f7:eb:fb:3d:c0:66:cf:4f:2a:b9:fe:
                    25:6e:b8:39:b3:7e:b4:bd:e5:4e:4e:6a:38:aa:54:
                    7f:fc:e0:36:0c:34:c5:e3:90:55:a6:12:08:3d:5b:
                    03:f6:89:71:a6:f0:c1:c3:aa:a0:6a:f3:dc:a9:97:
                    dc:d8:bc:9b:fd:1a:70:9e:f6:66:98:d0:c3:02:0c:
                    90:f0:25:8b:8b:29:53:9b:fb:80:7f:31:dd:e3:08:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:18:9F:CA:0D:3E:55:B9:69:5D:01:91:4A:37:DA:F7:6A:D4:E9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/9e908481-e959-31bf-9196-914b2d9a342c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.254.126.0/24
                  167.113.164.0/22
                  167.113.176.0/22
                  167.113.196.0/22
                  167.222.253.0/24
                  170.61.40.0/22
                  170.61.71.0-170.61.74.255
                  170.61.76.0/23
                  170.61.132.0/23
                  170.61.139.0/24
                  170.61.160.0/23
                  170.61.170.0/23
                  170.61.173.0-170.61.174.255
                  170.61.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5a:83:ea:4f:e0:79:42:e2:f9:da:e3:b3:b1:95:04:41:44:
         fb:ef:c2:b0:f9:0d:c1:36:f4:a0:26:42:8b:f6:03:6e:b3:5b:
         e7:76:9b:f1:1e:46:72:26:46:9f:82:55:ad:cb:51:50:ff:0b:
         52:48:f5:c4:f2:cd:0f:86:bd:c7:41:b9:f7:63:6f:7b:96:17:
         18:6a:a9:a1:b0:34:1b:9a:2e:3e:fa:cf:6d:cc:70:2a:95:e6:
         d4:81:5c:2c:22:23:94:59:13:c5:eb:ec:6c:87:60:60:e8:91:
         16:a2:9f:27:d6:81:8f:fc:c5:cf:df:86:72:1a:8e:fd:d3:61:
         ee:cd:47:30:0b:5a:16:2b:4c:98:d3:85:30:13:dd:7d:3e:d5:
         3e:f0:a9:84:44:da:ed:dd:83:0a:68:ae:76:fd:3d:95:bc:c7:
         c8:dd:ad:58:f9:f1:84:af:1c:9d:31:08:9d:14:09:8c:7e:d9:
         44:92:00:eb:c9:36:20:6c:91:9b:5b:38:64:66:af:f3:40:38:
         03:d3:d3:c9:1e:bd:ba:01:49:22:b1:bb:f3:df:70:e2:b4:f2:
         6c:05:5f:d7:23:29:46:8d:0a:48:08:ab:f5:01:2a:92:d0:4b:
         ce:a3:c2:ad:36:64:80:02:18:b8:b2:9e:f5:d3:fe:36:fb:b6:
         2b:15:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:11 2026 by rpki-client