Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa
File:                     f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa (raw, json)
Hash identifier:          0GCAKNDOLusV8Z/7ByMP4snJviglrKbIC3510jmrYmE=
Subject key identifier:   CA:EE:8E:A4:67:BA:A7:C7:78:6D:5F:71:0A:94:FF:72:6E:D7:9A:69
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E8F5502F2C75EF281E67E2600
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     63023
IP address blocks:        170.101.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:55:02:f2:c7:5e:f2:81:e6:7e:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=7529838f-afcf-4781-8f6e-f91a552c8a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:51:95:76:e9:34:ef:bd:bc:45:b2:f0:9f:
                    1b:6b:5a:f7:2b:37:e3:89:0a:f8:92:e8:89:cd:28:
                    a3:60:ab:e1:ab:0c:61:d2:16:bf:d5:cc:7b:d5:81:
                    81:ee:2e:03:d9:40:68:45:da:57:b9:29:1e:c0:f6:
                    1b:0f:3b:94:9a:b2:48:41:bf:24:dc:4b:c7:a0:d7:
                    ff:70:98:85:2c:fa:45:73:65:6c:69:c2:58:1b:53:
                    dc:00:44:0c:26:bd:11:e6:ed:3f:d1:78:ab:0f:87:
                    db:9a:b3:ae:9c:f5:2a:cb:11:8a:ac:65:fe:0e:9a:
                    5f:e4:a9:f0:c2:c6:69:13:65:e8:8c:f1:c6:86:c1:
                    db:de:64:5d:3d:ab:bf:dd:2f:09:a2:d7:b8:9d:fd:
                    78:b8:a3:ee:4d:ab:f3:4a:39:8e:b0:ac:51:ed:15:
                    74:cc:1b:cc:3f:49:4d:e6:50:ef:f1:29:fb:8e:44:
                    0f:1e:82:bc:e3:01:1a:77:37:fd:ff:77:83:4a:d1:
                    36:2c:43:71:20:6e:2a:6d:e5:7a:95:65:70:99:2a:
                    3b:a9:9e:45:c2:ce:d6:63:ff:ae:e0:3c:c4:4f:8b:
                    d2:a4:58:a8:b0:36:9c:ec:71:b4:61:c2:67:1d:d2:
                    67:72:70:6d:49:25:8f:6b:ba:0a:8a:80:5f:83:7b:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EE:8E:A4:67:BA:A7:C7:78:6D:5F:71:0A:94:FF:72:6E:D7:9A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:63:77:d5:7d:b6:8a:77:4f:e0:a1:f4:bd:c8:3b:6a:c2:2a:
         53:af:df:3f:42:b6:55:1e:62:c3:ab:70:12:91:9b:5b:b4:70:
         59:56:f3:e5:23:b5:ba:d2:30:09:a8:36:d0:af:d4:eb:44:be:
         4e:d9:da:ff:d1:6f:7a:c7:10:9c:57:d1:c8:c9:10:e4:92:18:
         30:2f:41:ec:aa:f5:96:05:f9:7d:b2:77:3a:7f:27:cf:7a:e3:
         c6:cc:cd:f3:12:d3:32:36:09:74:a0:36:4c:ed:39:02:53:50:
         c3:d2:70:c2:67:34:b4:2d:ed:71:db:b1:37:5d:9c:b3:1a:3a:
         d4:6e:0f:dd:c3:2b:ba:ad:12:8d:6a:fe:c2:99:72:e4:13:f6:
         c1:d5:71:0b:b7:05:1c:28:e2:1c:0a:6f:4a:97:a6:d3:6f:d5:
         a4:29:8d:38:86:53:4a:08:94:60:5b:bb:50:03:3f:86:fd:ed:
         ae:06:6d:e4:7a:e6:07:56:e3:69:e8:19:73:05:d0:69:43:0b:
         4b:af:15:aa:2c:3f:34:ab:1b:49:cb:4d:5e:b9:da:bb:f0:50:
         6d:7f:e4:59:28:f6:27:9e:80:8d:80:ab:a7:ad:f2:7e:2d:a0:
         aa:47:60:e3:fa:98:7a:6b:a8:4a:9a:20:34:87:f8:8b:30:dc:
         40:01:32:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:23:05 2026 by rpki-client