Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa
File:                     970fb05c-2346-393b-a7b7-10ed7f9bd285.roa (raw, json)
Hash identifier:          /yQb+B7MG39iTrqNTS2ztCcyeXrYCZyt7IhL/3/Twbw=
Subject key identifier:   DB:E0:C4:93:5B:B0:9B:F3:C0:15:B6:E2:48:8D:D1:70:22:04:14:DD
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EB6E1A9F9B312EE0926BAB600
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        170.85.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a9:f9:b3:12:ee:09:26:ba:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=86494a27-0de8-4ec3-b605-338cd3614f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c7:d6:9a:e7:2e:5d:13:31:9c:b4:11:f5:eb:
                    3e:ff:5f:91:17:31:bc:cd:f2:f7:4d:64:53:b3:2a:
                    a5:67:48:86:49:81:f7:ee:54:d6:de:8d:8f:2e:96:
                    73:fc:9c:07:ec:ac:0f:d5:8d:da:20:18:f3:26:13:
                    12:b9:74:7e:7f:22:b6:eb:a1:2a:f6:31:9c:df:f7:
                    8a:d8:1e:53:b4:44:56:55:7b:72:79:79:e4:e9:59:
                    7e:cd:e9:ee:cc:2f:7c:7f:7f:f5:cb:79:3f:ae:6b:
                    4c:53:57:83:cf:b1:bb:a5:8f:3a:9d:69:d4:1b:bf:
                    92:55:42:8e:f5:af:c9:83:84:03:6d:cb:c2:24:28:
                    a9:d7:c9:97:58:63:e9:41:4c:41:07:a4:2d:08:2d:
                    5c:99:d6:37:40:01:a4:73:3d:dc:3a:d7:d0:9e:b9:
                    e1:06:ec:8e:ec:a1:5e:58:b4:72:bc:97:47:fd:09:
                    f9:e8:25:7d:4d:c4:c9:58:25:fc:99:5a:78:47:f2:
                    75:d9:8a:ae:68:d0:e5:26:5a:c1:17:f4:a1:d9:60:
                    4b:e6:7c:07:59:40:74:b2:77:bc:c7:aa:a5:7d:38:
                    25:bc:a6:3e:9f:cb:41:1c:e2:a7:7b:33:88:c8:18:
                    03:92:a9:b3:e9:aa:5f:a1:38:c8:06:1a:d3:cd:18:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E0:C4:93:5B:B0:9B:F3:C0:15:B6:E2:48:8D:D1:70:22:04:14:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:43:da:3a:aa:60:73:45:3a:7b:65:eb:a1:81:83:2b:4f:9e:
         3c:9a:f3:6e:0f:1d:17:ef:50:f9:fe:a3:af:8d:64:34:18:29:
         19:c8:51:c4:3b:22:62:42:26:90:97:03:af:88:c3:e0:4b:1e:
         d4:7f:fd:78:ff:49:80:d9:66:9d:8c:8f:57:6a:66:ec:37:16:
         e5:0d:70:c7:c2:f4:28:98:35:7f:df:f4:72:13:be:b1:6e:74:
         ed:f6:46:4b:8f:f9:33:9d:f0:78:fe:da:d4:66:04:a1:7b:5c:
         5c:ee:54:4e:f1:a0:52:94:76:22:c8:58:65:24:26:88:80:4d:
         be:d1:d1:06:d6:51:04:78:e2:ad:e5:f8:fe:d0:a7:f7:94:c8:
         3d:2b:eb:a9:88:03:7f:41:67:7a:38:dc:0d:1d:81:a1:19:e0:
         8b:eb:d4:34:fb:ad:3e:27:d4:e6:75:82:e2:4e:cf:43:d5:12:
         db:84:74:92:45:f8:43:90:f9:ee:05:96:60:26:a1:f4:a5:07:
         bb:a7:4f:c0:8e:5c:e1:99:84:8a:02:27:5d:e7:a6:8d:29:ab:
         ed:dd:56:da:b7:30:ca:3d:03:90:b8:34:ab:bb:9b:44:3a:82:
         b9:04:ca:c9:4d:28:13:46:c8:71:23:0a:5d:c6:b6:fc:e7:79:
         49:c2:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:39:42 2026 by rpki-client