Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/27cd812a-efbe-3ee6-a50b-0c2c8746a89e.roa
File:                     27cd812a-efbe-3ee6-a50b-0c2c8746a89e.roa (raw, json)
Hash identifier:          XgZSnrjkSRN57bEzAK64ak8zEEe7GjRyUS1DmKNJQIY=
Subject key identifier:   A6:C9:86:16:B1:F5:E9:C7:EF:41:EE:46:0F:75:E1:F9:45:6F:E8:62
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E8F55031600A13B629942ED90
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/27cd812a-efbe-3ee6-a50b-0c2c8746a89e.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     63023
IP address blocks:        170.101.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:55:03:16:00:a1:3b:62:99:42:ed:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=619ae267-81d3-4115-964c-6ffd7e10f68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:15:b0:a7:4c:18:46:bc:d1:89:75:eb:e7:
                    85:76:b6:07:aa:d7:d9:bc:4d:47:b0:bd:12:f4:5d:
                    09:bc:95:40:17:b2:40:f2:2b:11:33:e7:13:c6:ee:
                    c6:92:a3:6b:45:2f:e4:d4:15:1f:6f:d3:36:cb:b0:
                    e6:ec:59:f3:c2:35:2d:e1:68:bf:a7:4a:31:2f:e8:
                    b6:c6:bb:8c:f3:40:bf:13:d5:22:c1:ed:13:de:e7:
                    82:59:05:62:bc:48:94:25:8b:e2:b2:4a:17:7d:a7:
                    ba:f3:2e:25:1b:35:a3:6f:c5:4b:bf:c9:55:b5:fa:
                    32:78:b3:f6:27:4b:0b:96:5f:56:b0:49:65:37:27:
                    54:f0:f2:63:66:ee:3f:90:f9:ac:12:c6:48:dc:1c:
                    ae:7e:31:df:89:4d:c8:3f:1f:61:9a:5e:cc:9e:86:
                    67:9f:23:d6:64:24:ff:ef:37:e1:85:0f:c6:9d:c0:
                    28:b6:0a:85:54:cc:49:7b:aa:01:9a:31:fe:04:ee:
                    d0:97:86:b1:1f:ec:c1:e5:22:9f:6c:5d:af:2b:70:
                    a3:8d:ae:6a:2d:ac:54:f5:23:cf:27:fd:dd:2c:df:
                    9c:ce:0a:33:be:56:45:35:73:9a:7e:2d:b2:76:d5:
                    3d:6b:f8:67:2b:27:7c:f3:14:9d:3d:1c:df:16:0c:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:86:16:B1:F5:E9:C7:EF:41:EE:46:0F:75:E1:F9:45:6F:E8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/27cd812a-efbe-3ee6-a50b-0c2c8746a89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:77:bc:36:3d:6a:2c:37:dc:89:2a:e7:3b:51:d7:54:a3:
         53:29:cf:7f:e1:61:57:76:53:a6:da:43:17:f0:33:58:28:56:
         7b:e9:a0:e8:7c:4d:cd:87:88:cc:8e:a0:94:bd:86:c1:c3:32:
         f3:d2:f7:16:94:15:bb:56:92:0e:46:29:c7:7f:32:ba:6c:30:
         b1:51:0c:bf:01:a1:be:9e:75:3c:11:3a:ed:5d:46:0a:49:0a:
         a5:53:14:61:a0:f0:f9:f1:d7:77:f3:3e:c9:86:d0:c2:5d:c9:
         a1:f4:4b:25:49:8b:fe:30:94:ed:31:a7:79:01:21:4d:ff:8f:
         e1:87:be:3c:de:4d:b8:0c:c8:e7:03:16:b2:f4:90:5c:6a:43:
         b0:95:75:84:f7:14:17:2a:a3:35:03:0a:58:b8:75:2b:d6:6d:
         c5:d9:18:ca:d3:a6:a5:4b:f4:fb:bd:6f:b1:d4:c0:78:3b:70:
         ba:40:0a:ef:ad:d8:fe:26:04:8a:e0:66:a9:18:bd:b7:cb:9a:
         3d:04:a4:eb:f6:fe:cc:80:15:95:42:96:71:e0:66:d7:a4:10:
         d9:a7:4b:77:6f:12:35:d0:09:2a:56:77:cb:91:cc:0a:3b:c6:
         7a:5c:44:08:e2:df:a6:03:c9:2e:ab:e4:c2:1f:b1:65:55:89:
         4c:43:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:22:37 2026 by rpki-client