Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/03ef2665-d99b-374b-81dd-2857c5403f72.roa
File:                     03ef2665-d99b-374b-81dd-2857c5403f72.roa (raw, json)
Hash identifier:          Yx/hL8RijuPAxZsBIct105sCQPDYOky1raaI+ABLfck=
Subject key identifier:   17:61:5D:9A:FC:89:87:1E:BB:E8:38:80:FD:A2:B7:78:69:B2:87:AD
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584DAF1ADAB7D7613167AAA68100
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/03ef2665-d99b-374b-81dd-2857c5403f72.roa
Signing time:             Fri 01 May 2026 01:22:09 +0000
ROA not before:           Fri 01 May 2026 01:22:09 +0000
ROA not after:            Thu 30 Jul 2026 01:22:09 +0000
asID:                     63023
IP address blocks:        170.101.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:1a:da:b7:d7:61:31:67:aa:a6:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: May  1 01:22:09 2026 GMT
            Not After : Jul 30 01:22:09 2026 GMT
        Subject: CN=7a0c6c68-83c3-4b04-b115-f0020a7c3f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:13:22:3e:af:c1:26:a7:aa:7b:62:3d:07:
                    30:c8:49:b5:38:b6:c6:01:db:0d:8e:48:71:df:5c:
                    28:cc:63:55:22:9f:87:1b:c7:9a:be:ba:d3:51:de:
                    00:5d:21:a2:45:74:eb:55:c6:e1:41:10:dc:12:3a:
                    26:f7:30:e0:84:9c:7e:3c:12:e3:10:0f:8e:f5:7a:
                    65:57:5e:9d:52:4f:b0:39:4a:c7:2d:1e:d2:0d:ae:
                    73:e4:3a:52:9d:69:58:d1:69:d1:fe:86:30:49:63:
                    8a:ff:9c:e4:b7:2f:3a:11:3d:8f:49:91:c6:75:0c:
                    00:f7:aa:91:a4:4f:43:d1:73:d8:7f:c2:a8:62:b5:
                    15:67:d4:26:4c:88:f9:ba:70:06:e7:5a:8c:d7:f5:
                    43:3f:0b:e0:17:b9:a2:3f:62:ef:46:38:d4:8f:f9:
                    fd:6b:1d:1c:e4:5c:9d:79:f5:a2:ef:1e:22:2e:74:
                    58:9b:ec:22:c5:2c:1f:d7:91:55:52:44:df:34:5b:
                    bd:e5:20:69:68:a6:7c:89:42:27:29:3d:ce:79:fa:
                    de:01:dd:1c:fb:a4:ca:04:12:b9:95:ee:14:e7:df:
                    0f:ab:b1:4d:84:20:1f:81:4a:45:8b:00:eb:f4:64:
                    9f:e0:58:b0:53:34:0d:c9:54:bb:43:c9:f2:87:2e:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:5D:9A:FC:89:87:1E:BB:E8:38:80:FD:A2:B7:78:69:B2:87:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/03ef2665-d99b-374b-81dd-2857c5403f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a9:10:d4:01:d1:13:aa:ac:7f:55:7d:4b:72:f2:ca:1a:f4:
         3a:0f:7b:29:fc:94:f1:15:91:29:03:b4:7e:87:d5:9e:a5:03:
         2e:12:06:f9:62:b4:c4:6b:96:c4:5b:e8:13:c7:5c:98:24:ea:
         8a:b2:70:1e:4e:0b:3d:ec:cd:d5:77:e5:59:19:67:db:a8:a6:
         e9:de:2d:a4:d1:f7:a9:2b:97:d1:2f:d9:4c:d4:76:33:2b:a9:
         df:b5:13:c2:66:17:41:fe:d2:27:0c:d1:59:38:60:db:20:a7:
         a3:33:c3:ae:0d:74:66:60:7d:ab:5d:27:16:38:77:ee:05:9a:
         0e:5a:64:41:3b:7b:06:44:4d:22:04:b4:34:f5:fc:0c:dd:be:
         24:41:ec:40:f5:8f:7d:86:0f:cf:86:06:16:44:ff:98:a3:ea:
         86:da:e6:98:b1:88:99:49:be:54:e7:08:d7:d3:d7:44:1d:95:
         9e:7d:e7:a1:c3:3b:e2:f6:50:6c:87:7a:4a:3f:66:f0:f0:0d:
         22:5c:41:e3:c8:e5:9a:60:4a:4b:ed:6b:02:f7:1f:2b:c8:5b:
         e0:1f:60:21:86:18:3a:25:18:dd:88:c2:ff:2a:f0:cc:b6:df:
         41:5b:a3:10:a5:eb:6f:74:50:8b:39:1a:9c:fe:0d:90:e1:1f:
         f7:8e:6e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:17 2026 by rpki-client