Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa
File:                     b1cee1c2-7b45-36d1-958e-f8797153afd7.roa (raw, json)
Hash identifier:          1j3WYDOhHDXFTqTzxMTLO5BTYzW5L8dt0v9LnuXDQRU=
Subject key identifier:   E9:A3:38:1C:C6:D3:99:44:C7:62:9A:97:55:27:2C:53:AF:F3:C9:F2
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F8F3DECECF00EB700ED7F9A80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     14618
IP address blocks:        170.85.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:ec:ec:f0:0e:b7:00:ed:7f:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=462de984-70d6-4c49-97e3-6869cfc97729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:51:cd:6a:8b:5c:22:4a:95:70:1a:c1:03:76:
                    af:83:02:f8:26:bb:b5:91:c5:2d:43:e6:9b:79:95:
                    ff:e7:6f:b9:f6:8a:2f:28:bb:41:d7:28:9c:8d:57:
                    fc:09:3b:4d:04:85:c7:4f:40:1f:ff:a0:60:91:c4:
                    c2:81:da:68:c6:6c:d3:d4:24:6a:e3:9c:fa:11:56:
                    6c:4f:37:a7:3a:88:a2:81:f5:e8:d7:e8:f4:82:fb:
                    58:0a:16:61:fe:5c:b8:14:47:bb:20:95:5d:92:af:
                    00:2a:9c:66:24:c6:1b:6f:c3:02:e0:96:8a:3c:4d:
                    f8:76:f3:8c:29:4d:b9:47:ad:82:35:d2:dc:dd:e8:
                    3e:15:ee:44:1a:09:51:0f:c9:b7:06:80:86:91:a4:
                    38:b5:3a:b4:55:7a:8e:e7:ca:bf:f4:cf:3c:fb:9e:
                    87:6f:31:94:19:2f:3a:cd:4b:f9:83:92:7c:5c:ea:
                    8c:89:19:84:13:18:44:b1:14:01:6a:a5:e2:e1:20:
                    ff:fd:16:3c:39:b4:fb:cf:64:a2:99:47:e1:81:cd:
                    50:37:79:6a:cc:ec:20:71:68:c4:2c:9b:5c:f0:e3:
                    a7:ca:c7:99:29:a0:e9:99:2d:43:1b:c5:e0:0d:44:
                    d0:d1:5a:c5:9c:c8:1f:8f:1a:ed:66:e8:5a:df:fa:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A3:38:1C:C6:D3:99:44:C7:62:9A:97:55:27:2C:53:AF:F3:C9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:4f:a2:84:a2:52:28:80:b7:02:13:a1:10:62:fa:30:7a:
         3f:85:a5:9e:ab:a8:ea:d0:b0:50:8f:5a:91:95:76:6c:23:9d:
         57:74:09:0e:9a:bd:18:cd:cf:4a:ef:f9:4d:82:77:26:a1:b9:
         a0:c6:9b:62:7a:21:d6:49:3f:bd:8e:4a:8f:80:d6:28:5c:d2:
         40:06:b8:9b:fd:2b:d5:6d:f5:20:14:d4:95:ae:fd:6e:41:4e:
         aa:0f:88:a8:75:a2:db:15:6b:b7:bf:0a:63:ae:f5:0a:34:4c:
         2c:0a:ef:ae:09:9e:ef:3b:70:07:30:30:00:c5:cc:d1:f8:78:
         a8:4d:18:34:b5:f4:a8:b1:95:2c:c1:e5:5e:e0:86:cc:1b:bf:
         b7:de:b5:f4:90:df:27:2a:3b:1a:24:61:b4:b3:e3:6b:26:a4:
         0a:17:45:d9:d5:cb:01:65:02:da:19:ce:fc:98:ae:40:16:c6:
         f6:3d:29:52:a8:78:52:86:ab:5c:1c:ed:26:d7:54:7f:15:8d:
         de:b2:ba:b2:11:c9:ef:10:15:df:33:9e:2c:a2:17:fd:bb:b8:
         07:63:a0:81:17:25:ba:eb:9b:d2:45:5a:91:0c:58:ec:4b:85:
         c9:4e:6f:3b:de:5e:78:7b:3b:21:78:82:3a:dc:53:c2:65:31:
         44:ae:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:49:45 2026 by rpki-client