Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa
File:                     5bc88940-6061-3911-99db-8f1685160272.roa (raw, json)
Hash identifier:          fwok9cZYCnGGDiORiDewq8s8r7tpSdaMdyYfAQ01e5g=
Subject key identifier:   4B:0E:1A:03:10:FC:E4:E9:98:AF:F7:25:C8:7D:26:5B:E9:52:EF:D4
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E8F550366C6A992100E155020
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     63023
IP address blocks:        170.101.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:55:03:66:c6:a9:92:10:0e:15:50:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=8db06303-76b4-44a4-9e70-e6a3c862496f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:db:ae:c3:3f:69:72:48:34:5f:60:89:ae:
                    84:d3:ab:6c:e4:22:7f:9a:41:89:c0:e9:88:99:71:
                    2f:c1:45:03:5a:70:7d:01:6c:df:2e:6d:e3:18:95:
                    d4:23:e0:f1:eb:6d:cb:ec:13:a9:75:3e:79:9d:72:
                    ec:2d:7a:ff:fc:0a:52:c2:d9:a0:5f:c7:9a:43:b1:
                    84:f1:ce:d2:b3:17:9c:94:5b:63:fc:a8:10:74:d9:
                    34:ad:37:aa:16:ec:67:be:9a:54:00:32:47:0a:07:
                    21:0b:35:99:6c:da:82:27:fe:ba:3c:da:f0:37:ad:
                    3f:6d:1e:0d:69:1a:6f:af:fd:d3:f1:35:08:4b:8c:
                    44:fb:fd:63:30:63:b6:fe:10:a2:ba:47:06:a7:91:
                    99:4d:db:72:05:80:b4:0c:9b:2d:61:b5:c6:d4:30:
                    ab:25:fd:91:8f:30:88:04:23:47:c4:28:46:a2:ff:
                    f5:b2:35:e4:e9:ae:db:46:fb:39:6c:8a:5d:63:14:
                    ad:0f:33:67:58:a9:9d:83:d4:5d:92:85:c2:b4:f9:
                    e3:3e:98:3b:5c:49:45:99:ce:aa:da:ab:5e:39:5e:
                    6d:b4:fa:15:60:a4:fb:e9:c3:32:55:36:cd:32:64:
                    5a:1f:52:51:ee:7d:b1:91:9e:34:10:18:1b:03:d9:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0E:1A:03:10:FC:E4:E9:98:AF:F7:25:C8:7D:26:5B:E9:52:EF:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0f:00:3a:14:4d:93:d4:ad:72:bd:71:b5:42:e4:83:dd:a9:
         01:2c:a5:cc:e9:04:bb:5e:49:fa:0f:43:0a:3d:ce:e5:46:f8:
         f3:36:8b:36:a0:78:f6:b5:d3:c4:4a:ea:cd:ba:ce:de:0a:76:
         6b:9f:fc:fa:f8:e8:2b:9b:ad:ad:66:af:81:3d:79:3b:d5:1f:
         3f:58:4f:28:d5:03:15:22:fc:2f:6f:37:5d:7e:05:f8:08:a1:
         8d:d9:6e:17:dc:11:fe:22:09:7f:26:75:76:aa:09:67:a9:d1:
         1a:3d:82:9e:09:96:98:88:93:73:02:7a:c4:22:6a:ff:4a:9c:
         1a:a0:fa:5d:b1:5a:98:61:5c:a7:5f:42:7d:a1:93:f1:ae:bf:
         e6:29:3c:a5:09:52:9d:c3:0b:34:ab:c1:55:06:a0:1e:6b:d7:
         fa:9d:ee:72:94:31:55:61:fa:21:c1:98:61:9f:25:ea:2c:ef:
         93:b4:5c:02:f5:97:0e:57:d5:a9:45:d9:a7:05:21:80:ce:f8:
         fb:f4:4b:2c:02:58:b6:8d:4a:4f:4e:b6:c5:72:3a:49:69:3d:
         68:e0:0a:93:6e:3f:d5:23:e6:31:4a:24:24:ba:31:93:b3:45:
         3e:56:c6:45:1e:7c:d6:27:de:f8:54:e1:f0:36:16:25:6b:e5:
         6a:5d:f7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:24:18 2026 by rpki-client