Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
File:                     4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa (raw, json)
Hash identifier:          xHlppEZSQcaJj6432R9WmjUMMnlg9h+IkOH8UPUiD1Q=
Subject key identifier:   C7:2C:44:F9:0F:B7:08:8A:FF:CD:0B:35:D2:90:8E:C6:F9:FE:D7:0F
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584DC6CB0F4FF9AD1B79DCC877C0
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     26342
IP address blocks:        170.194.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:0f:4f:f9:ad:1b:79:dc:c8:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=b6560cc4-2856-4639-9527-703f309d46aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:a8:73:9c:20:1b:52:4e:6d:95:fe:ec:05:
                    39:ae:12:03:5d:32:15:8f:20:7e:e5:39:03:8f:27:
                    73:6a:c5:53:83:19:ee:07:ea:af:b1:8c:85:f3:33:
                    fb:19:15:f8:b5:a5:71:40:d2:77:1d:3c:25:18:93:
                    36:08:e0:fd:d6:7c:68:10:44:dc:b8:7f:b1:ae:b4:
                    b0:2a:ad:b8:47:7f:1b:6d:a8:49:03:46:4a:da:c8:
                    1f:87:67:40:76:0c:88:b6:fa:38:57:70:29:3f:e6:
                    95:ef:0f:95:01:a5:c6:08:04:a9:0a:35:23:12:48:
                    82:8d:93:8c:ef:25:78:de:af:b8:4b:6c:bc:66:60:
                    45:0c:57:e7:26:ad:2a:76:75:62:11:ae:82:07:ab:
                    18:9e:10:8d:f1:4c:a8:95:55:f7:8b:37:96:1d:57:
                    0e:3a:7c:af:a5:01:88:18:fb:34:52:9a:07:13:67:
                    ea:a3:7f:06:a0:12:e0:6a:16:22:e7:76:9e:78:d4:
                    b8:0c:10:a0:86:25:26:e5:5d:53:e8:44:62:63:81:
                    64:bd:84:5c:7b:75:3c:84:67:04:d4:30:9f:7c:ad:
                    d9:5b:6b:43:6a:0c:57:16:e1:b0:a9:a5:ef:2f:73:
                    3f:e6:dd:e9:23:eb:e2:16:ec:cf:c3:83:3c:df:99:
                    8a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2C:44:F9:0F:B7:08:8A:FF:CD:0B:35:D2:90:8E:C6:F9:FE:D7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:9b:61:78:2f:26:7c:dc:75:2f:2c:66:45:e0:58:7f:b9:
         f9:7b:e8:ad:f2:51:5a:94:9a:55:f2:79:d1:39:65:e9:02:f9:
         6f:e2:9c:13:36:3d:98:be:63:c8:45:56:b3:a0:59:b2:a0:2a:
         b3:89:3a:7d:fd:83:64:86:2e:88:89:83:ba:35:77:ff:df:62:
         b6:62:6e:3f:6e:f0:36:58:7a:5c:ab:d8:eb:6c:51:f5:16:ca:
         29:5b:f7:cd:9d:8e:9a:cf:53:bd:8a:61:e7:e9:af:9a:6d:c9:
         c3:b2:59:63:c2:05:dc:25:08:57:ea:21:64:66:dd:d5:4b:68:
         56:de:9f:4e:96:c8:ab:a1:1c:b9:4b:10:30:b5:4c:0e:54:dd:
         ba:6b:83:bd:2f:44:6b:5a:3e:41:cc:00:f3:bc:92:a5:ef:96:
         49:76:59:41:86:29:c7:58:17:eb:9f:7c:43:17:74:cc:1b:f8:
         af:bc:89:53:3a:3c:c5:60:93:ea:39:52:46:a1:9b:a5:32:e5:
         1f:81:77:d0:73:56:55:05:1d:c4:35:6f:8e:e0:5c:07:b0:ea:
         6b:65:17:4f:db:30:44:f9:e9:e4:3c:8c:37:d5:bb:fe:4b:86:
         53:88:a3:d1:97:9e:79:45:90:35:09:85:26:af:c6:e6:09:3e:
         99:43:09:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:29 2026 by rpki-client