Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/478c7be5-04a9-3f84-9c80-1d44c5d74046.roa
File:                     478c7be5-04a9-3f84-9c80-1d44c5d74046.roa (raw, json)
Hash identifier:          6+ggjbsMEyz/eZgxqU7hsqzQoG0scYI5Ia72tbbEzhU=
Subject key identifier:   FB:B7:84:35:D1:84:CF:49:B4:AB:E5:1E:41:5F:BA:35:15:C0:82:E6
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9E502C0414BBDAC6C6796C80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/478c7be5-04a9-3f84-9c80-1d44c5d74046.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        160.34.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:2c:04:14:bb:da:c6:c6:79:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=2a519d18-49d0-4a30-8155-f95ef2849353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:db:d8:ea:5a:cb:1b:0e:60:33:32:e3:6f:
                    0f:6f:06:24:a0:48:df:80:1d:92:db:f1:2d:d3:1e:
                    8b:6a:d7:3b:de:5f:3a:ff:c7:3b:33:02:fb:c8:65:
                    07:3e:a5:10:9b:03:1b:c9:47:f0:b4:19:89:c9:99:
                    0d:b8:b5:76:e9:d7:90:98:58:b6:e3:d0:8f:1e:c1:
                    c9:c2:1a:8b:f4:a6:45:5a:21:ff:26:da:f1:6a:fb:
                    ea:e6:99:1e:cf:e6:bf:a0:3f:5d:61:15:2b:07:63:
                    0b:af:01:4b:28:fa:54:49:2d:a6:b8:83:80:57:a1:
                    cd:87:3a:8d:60:68:50:32:2a:8f:92:26:64:23:e2:
                    cb:d0:86:d4:89:7c:f9:87:fb:2f:94:cd:cc:53:23:
                    59:31:bf:28:6a:bb:1e:c5:4b:5c:5c:e2:44:91:96:
                    75:f4:c9:0c:45:fd:c1:28:57:bd:ff:1f:37:ea:bd:
                    c9:ab:6c:df:60:d3:1a:a0:dd:51:fe:72:63:00:0f:
                    cf:c5:21:e7:66:dc:5c:eb:f1:c8:2e:d4:b4:08:9a:
                    63:87:f0:6c:af:40:5e:54:fe:9b:3f:b3:73:d7:3a:
                    85:23:66:4b:14:6f:73:9c:31:5d:5d:0d:a9:1b:f4:
                    e6:3d:c6:23:ce:69:60:ce:10:de:7d:7d:7e:8a:5c:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B7:84:35:D1:84:CF:49:B4:AB:E5:1E:41:5F:BA:35:15:C0:82:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/478c7be5-04a9-3f84-9c80-1d44c5d74046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.34.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:fd:03:a8:0d:bd:dc:de:09:32:46:5b:df:a8:d2:54:e9:
         ec:a4:6e:08:f8:20:9c:40:11:2a:29:e4:e4:32:ae:2e:69:46:
         8c:5b:d5:8f:66:b7:10:d3:d1:da:ec:7b:54:af:c0:36:cd:c7:
         1e:c7:d7:63:06:52:5b:ae:f0:c6:95:d8:db:5f:18:7b:75:03:
         4e:83:b0:e5:8c:d3:08:bf:f9:18:3f:e7:ff:d5:f3:d8:a9:f3:
         9f:eb:e5:b5:39:46:20:a0:10:8a:36:23:08:f5:89:0b:e5:e0:
         4a:0a:49:98:29:b3:80:d7:02:e5:82:5f:0e:a5:41:11:a1:be:
         f2:33:46:db:91:c2:b6:30:88:8c:7d:cf:e6:a0:0f:db:95:ea:
         bb:eb:46:20:08:c6:b0:e4:50:12:44:74:4c:55:7f:b4:f3:71:
         a1:bd:59:21:0c:23:f9:c2:26:45:82:8e:42:ca:81:11:5f:4c:
         5b:5b:7b:e4:33:62:17:93:c4:1f:c4:bf:4d:0c:03:3d:00:64:
         e1:f3:47:39:e0:ff:21:f7:b8:5b:ab:69:d6:46:4e:9d:62:be:
         9a:c6:e8:c4:cf:d5:1c:63:f5:3a:32:b0:8e:96:e4:c6:7e:ce:
         a5:6f:1a:44:b6:48:77:76:b8:51:ba:31:29:42:1a:b3:37:26:
         b8:8a:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:15:04 2026 by rpki-client