Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa
File:                     35f69044-5811-389f-995a-dbb1f6465b9e.roa (raw, json)
Hash identifier:          4VR9SiC5tath0mfvOsjLsey2RlCFHFQi48FPLEbfEE0=
Subject key identifier:   8F:B7:4C:2D:8B:CA:39:27:F4:06:07:B0:2B:A3:D8:B5:E6:E2:B3:54
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EAD1C6678DCB0FB6005B12A00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     22616
IP address blocks:        170.85.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:66:78:dc:b0:fb:60:05:b1:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=a546b4a1-4154-428b-9530-eccca0a15529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:a5:3f:44:65:c5:1f:4c:57:d8:c2:07:a6:
                    64:66:06:4c:c1:9d:69:3f:1b:34:11:85:a5:ec:ee:
                    3a:54:a6:25:96:61:cb:c8:2f:31:e1:93:c0:ea:6b:
                    6e:7c:11:4e:c4:64:72:93:ef:24:f1:f9:b0:58:96:
                    f2:a9:61:d7:4e:99:9f:aa:f0:d8:a4:ed:a4:31:de:
                    79:ba:c0:37:eb:9b:c9:fb:12:c4:26:40:c2:e6:b3:
                    9f:6d:2f:e0:8d:05:2e:81:c4:f1:38:f5:c1:96:9e:
                    32:01:af:57:5c:f8:5c:ec:fe:d1:be:6b:72:24:07:
                    cd:54:10:53:41:72:83:fb:0e:31:1d:3d:c9:f8:10:
                    e4:5f:5c:6d:19:49:49:42:d6:30:a0:f1:8f:40:57:
                    30:50:b9:7a:da:8e:94:da:9d:94:c5:7d:0b:f6:d5:
                    bd:64:91:73:6e:27:e2:aa:2c:c3:bf:c6:55:33:1a:
                    9c:ff:6a:7a:79:ee:69:02:02:3e:43:cb:da:a8:2c:
                    70:62:83:ec:1b:20:23:ea:60:5a:6f:d7:7f:29:f8:
                    43:df:35:95:4d:b5:03:f3:72:24:e3:ae:4d:99:46:
                    9a:95:ef:56:b8:a4:d4:33:61:7b:0b:7e:df:fb:b8:
                    f5:ec:7d:21:f9:ea:62:27:c7:f2:83:44:d5:ce:74:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:4C:2D:8B:CA:39:27:F4:06:07:B0:2B:A3:D8:B5:E6:E2:B3:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:34:01:a0:45:16:72:3e:8c:1f:99:5f:1c:c7:b2:12:5d:aa:
         20:c3:7f:40:00:b1:75:b1:56:8b:0c:24:09:71:49:1c:f0:a5:
         ed:64:50:00:9a:02:63:24:1d:3e:94:02:8b:b5:14:df:15:e3:
         9d:3c:e7:17:5c:b4:9c:01:30:e4:a2:58:bf:f9:b0:2c:80:ec:
         14:b8:f5:2a:a5:87:36:ad:ca:8e:ff:8c:0c:73:3f:23:9e:db:
         59:a9:de:f3:7a:26:68:50:68:2f:9b:29:6a:dc:2e:61:d2:62:
         e4:8c:f0:c7:10:38:a7:ca:41:00:3b:2a:aa:03:ce:1b:0a:49:
         44:df:5b:e7:b5:a3:f8:44:cf:e8:e7:6d:ff:78:05:97:74:3d:
         28:66:5c:d0:93:5a:6c:09:20:e3:64:7f:34:b6:6b:49:ee:a6:
         08:0b:7d:83:aa:d8:19:ac:f7:28:06:4c:cc:79:f4:93:a2:a8:
         5a:9d:e0:d9:75:f0:7c:df:eb:e6:26:b7:c8:e6:98:c8:9f:59:
         b8:1a:c6:a4:80:d7:2d:52:a9:49:3a:ba:35:e9:3c:65:71:15:
         67:1b:71:99:3d:a7:2c:f6:27:fb:03:ff:97:4a:95:fa:c0:01:
         1a:f8:c9:fa:43:4c:cb:51:33:b6:0d:83:58:5d:a3:c3:bb:d6:
         33:51:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:40:21 2026 by rpki-client