Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/64f4a54c-0b73-31ab-a72e-3fefba1e06d2.roa
File:                     64f4a54c-0b73-31ab-a72e-3fefba1e06d2.roa (raw, json)
Hash identifier:          pJYIyOwKy7zaSlWkSQqip2Ad/wcfr3J6cVZ1zIeHq6I=
Subject key identifier:   12:2C:17:A3:01:AB:A9:60:E2:08:39:A5:9E:46:CE:84:0C:E5:E4:F6
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584D492A60FBF955B5A34491A700
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/64f4a54c-0b73-31ab-a72e-3fefba1e06d2.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        168.151.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:60:fb:f9:55:b5:a3:44:91:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=602754e2-6826-4f93-afd1-d0a49047c400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:e1:47:1a:9c:4d:7c:94:bd:d3:41:2e:0c:
                    cc:c0:6b:b7:56:3a:6e:75:c9:5d:0e:6e:e8:0f:79:
                    b3:ce:bf:b8:f7:43:09:7c:e2:37:01:62:97:43:d0:
                    63:30:b7:31:50:40:2e:34:9a:2c:f5:c0:50:41:5d:
                    6a:05:05:f8:b5:9f:73:d6:6b:04:81:63:5f:17:25:
                    2c:08:80:1f:c3:cb:af:3a:9f:ad:d4:97:d9:51:81:
                    dd:3e:54:ea:0b:b5:bd:bf:b1:fb:d7:fb:cb:45:18:
                    b4:1d:e7:40:0f:f4:36:02:2f:59:95:b0:b6:b0:3a:
                    91:41:e2:db:d5:68:00:ff:70:3e:ec:13:35:82:61:
                    47:e7:72:84:8c:44:08:f0:25:cc:d2:79:2b:9c:b1:
                    3e:00:c8:eb:50:5b:fd:33:74:93:01:34:dd:6b:fa:
                    a4:a7:1a:cd:77:7d:20:d1:6b:19:39:72:fd:66:e0:
                    a8:3c:d0:e9:47:15:da:ef:20:68:f3:99:b5:3e:17:
                    35:f6:99:e7:f3:55:b9:ff:e8:db:0d:e0:ac:13:b8:
                    be:9b:71:67:06:7b:7c:97:9f:36:5e:7d:c2:4d:54:
                    f4:b0:76:1f:52:df:00:6b:b1:c2:e0:08:a8:8d:2a:
                    1f:6a:00:e6:8b:1e:a9:0b:60:aa:2c:6c:03:f0:75:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2C:17:A3:01:AB:A9:60:E2:08:39:A5:9E:46:CE:84:0C:E5:E4:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/64f4a54c-0b73-31ab-a72e-3fefba1e06d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:3f:52:46:8f:49:e4:bb:74:28:b1:3a:74:c0:9c:88:7f:
         51:9c:0c:a2:50:7a:1f:19:3f:6d:f6:17:3c:48:8a:55:4b:d4:
         d5:e1:95:15:a4:e6:88:b9:47:e1:e2:e3:9e:1f:c4:9c:f3:17:
         5a:21:36:c6:fd:b3:e3:61:4e:6c:6d:ba:06:d7:96:a0:17:18:
         15:24:fe:3c:87:c1:0f:e9:18:fb:83:b8:53:e2:7f:a4:89:e5:
         e6:c2:63:da:6c:0a:1a:57:e4:42:3c:d6:0c:73:24:53:f5:87:
         2e:e7:43:df:3b:ad:58:9e:09:77:c2:3b:10:a8:4b:7a:fa:1e:
         91:53:f7:99:14:df:32:d5:03:d7:1b:91:d2:f2:36:90:d7:c4:
         fb:58:1d:70:16:67:00:f7:56:b5:04:3d:78:24:4b:3c:3c:a8:
         2e:90:50:92:cd:49:99:25:6d:9a:b6:e3:c0:f4:b5:95:bc:c9:
         d3:55:1f:b9:8a:74:b7:60:50:2d:17:39:90:d2:54:f8:ab:d4:
         fa:d0:18:0c:6d:f0:b1:b9:54:c7:cf:5e:27:de:ea:a2:e8:31:
         27:66:ff:dd:8e:f6:d5:46:92:ca:20:41:ea:b2:c3:4d:a5:d7:
         bf:da:2a:e5:48:f1:58:67:b0:df:26:eb:4d:85:7c:1c:ee:cb:
         16:e3:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:06 2026 by rpki-client