Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/14b6647d-4657-383f-a687-569838c4716b.roa
File:                     14b6647d-4657-383f-a687-569838c4716b.roa (raw, json)
Hash identifier:          bc/lTaVWqFztwZFUIMLnuFecW3ACfuvO2ttarin3pQc=
Subject key identifier:   BB:03:3F:3C:8E:AD:7D:04:44:0A:2D:9A:EE:B7:71:C1:0A:5A:D8:5A
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584D3F64D4F6E9EDFC08BFB78200
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/14b6647d-4657-383f-a687-569838c4716b.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     8075
IP address blocks:        170.176.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d4:f6:e9:ed:fc:08:bf:b7:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=94281233-776d-4727-81ff-2d73011afa9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:d7:f7:cc:a1:08:9b:7e:9f:03:6f:60:ba:
                    a8:9a:b0:bc:0e:96:52:b6:fa:6e:0f:77:cb:39:cf:
                    ca:a6:07:a9:10:66:0d:82:07:11:bc:e7:9e:85:49:
                    99:5e:1f:42:b4:e5:61:e6:88:6d:77:52:44:33:45:
                    79:7d:5b:b8:4d:3f:72:de:b0:f9:27:12:13:76:94:
                    16:39:31:c0:43:23:d1:e1:55:b7:6b:95:79:2e:4a:
                    80:8b:1e:39:f2:93:3a:12:7f:b8:53:da:17:8a:e4:
                    a9:f0:36:1e:dc:f7:69:1a:f4:c7:e0:a1:16:37:3b:
                    a2:d3:e2:2f:df:51:d9:98:ce:99:5b:ab:30:34:22:
                    5e:b7:9b:ba:f1:39:54:16:5d:2d:47:79:65:bc:76:
                    3d:1a:3f:77:c4:a6:6b:c9:2a:7e:dd:83:28:ee:51:
                    c6:15:7b:d0:69:53:be:52:4c:09:95:6f:0b:58:21:
                    8b:51:77:77:a0:0b:74:c3:5f:7d:e7:f5:d9:59:34:
                    9b:fb:70:10:ad:ff:e3:11:1e:ba:62:36:98:17:40:
                    31:c6:fe:09:9d:24:d9:0d:c9:89:f6:57:44:32:be:
                    f1:83:77:da:5b:7f:1c:a3:39:5b:c0:26:37:7b:52:
                    12:5a:42:ff:71:58:cf:bc:1e:db:3c:4e:67:2c:b2:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:03:3F:3C:8E:AD:7D:04:44:0A:2D:9A:EE:B7:71:C1:0A:5A:D8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/14b6647d-4657-383f-a687-569838c4716b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:47:f7:35:d9:ed:0d:67:4f:dd:f7:fb:ea:1b:93:03:c1:
         98:3d:08:56:b2:a7:fd:be:35:f8:67:67:5a:a3:f4:4f:01:ab:
         43:bc:90:5d:be:58:c1:61:f9:e0:b3:88:c4:8c:04:4f:fc:7f:
         ae:f1:32:84:aa:f6:5e:c7:b7:82:31:34:f8:5a:ca:6d:d5:a6:
         f4:33:00:24:70:be:a5:e3:36:9d:de:b3:89:26:3a:67:d1:72:
         83:7b:65:b0:33:dc:fb:06:ad:60:5a:d2:9f:44:3f:d2:3b:02:
         b8:63:57:5f:9c:08:0e:35:60:38:d8:dd:a0:56:73:08:51:de:
         d2:24:cd:e0:4d:58:f1:c9:53:b0:dc:fd:fd:a5:77:f3:9f:cf:
         0e:d6:b3:ff:45:b5:37:c5:af:b9:46:1b:e8:c1:96:1b:65:13:
         ca:dd:f3:39:13:f0:65:40:b6:60:2e:05:67:d3:8b:93:7a:ae:
         ec:2a:e3:98:88:a2:74:e2:4a:f8:ac:35:a6:e7:b1:23:a9:1e:
         b6:75:f8:3b:c3:23:61:a9:f6:96:70:0f:de:5f:a0:e4:c0:96:
         c8:0b:e9:86:a0:3b:bf:62:03:81:69:61:78:24:be:bd:2f:03:
         4e:c7:17:b1:bc:6c:cd:2a:72:dd:60:4d:3c:a3:23:f8:37:15:
         d8:b2:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:04 2026 by rpki-client