Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/deb393b9-72f4-35d8-85b6-8dfc566c768c.roa
File:                     deb393b9-72f4-35d8-85b6-8dfc566c768c.roa (raw, json)
Hash identifier:          QVWVsapmjzCTG/QotvL5TZf1ZNjic5mJyl8doJVtAqI=
Subject key identifier:   CC:35:D5:68:F0:9A:69:09:CC:DE:F2:E2:B0:73:A0:37:95:ED:AD:D5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D148F3F59EF462D03A95649C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/deb393b9-72f4-35d8-85b6-8dfc566c768c.roa
Signing time:             Fri 06 Mar 2026 16:46:22 +0000
ROA not before:           Fri 06 Mar 2026 16:46:22 +0000
ROA not after:            Thu 04 Jun 2026 15:46:22 +0000
asID:                     201907
IP address blocks:        170.62.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:8f:3f:59:ef:46:2d:03:a9:56:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  6 16:46:22 2026 GMT
            Not After : Jun  4 15:46:22 2026 GMT
        Subject: CN=2d98c881-6f1b-423b-bf23-2c8a08114eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:60:1e:f1:9a:6c:59:75:92:9d:a1:12:c2:18:
                    76:13:5a:25:c6:7e:34:8c:74:1d:18:6f:ec:36:76:
                    ed:68:db:ff:83:0a:e6:31:dc:2e:5a:29:c7:07:13:
                    18:fb:7c:91:20:e4:73:0c:bb:f4:35:5f:c2:3b:1e:
                    f1:7d:ea:0d:46:65:84:a7:63:18:e3:e5:48:93:46:
                    50:c6:09:b7:76:69:b7:d8:91:1f:7c:00:b9:97:dd:
                    30:76:2c:50:53:ab:b1:b1:0b:be:a1:f4:29:cc:e7:
                    69:79:7b:44:59:b7:bc:c1:5f:7e:48:09:a8:5f:e8:
                    e6:13:24:fe:b3:a2:a5:64:fb:ab:e8:ea:7a:db:ab:
                    a6:7f:cd:a3:18:d6:be:ad:35:2b:2b:b9:e8:61:ab:
                    6f:e3:7d:2e:63:71:02:08:1f:00:1f:51:04:05:ad:
                    e8:c6:c0:3f:45:97:13:3a:a6:37:6b:cd:e3:f9:f8:
                    69:78:94:12:ca:04:c8:42:49:fe:62:17:9d:1e:92:
                    ee:16:0f:c8:71:9c:10:28:ca:a7:b4:c5:7a:32:33:
                    e0:61:5e:d4:94:85:cc:ca:54:a2:ac:38:0a:04:b1:
                    2c:da:a1:59:dc:bf:c7:26:c5:12:d5:19:34:4d:bf:
                    bf:e2:06:8b:3f:35:71:0b:18:9b:74:03:a5:57:dd:
                    7c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:D5:68:F0:9A:69:09:CC:DE:F2:E2:B0:73:A0:37:95:ED:AD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/deb393b9-72f4-35d8-85b6-8dfc566c768c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:60:8b:5c:f1:78:8a:a2:8d:00:3b:55:33:75:82:ad:df:da:
         de:a3:e1:d0:57:ce:99:8c:a9:8d:b0:f1:5e:d2:36:fd:df:ac:
         f6:1e:24:8e:c5:03:9d:4f:ae:f1:88:f8:db:7d:a9:5a:9d:dd:
         61:81:fe:7d:3a:c8:e9:8f:19:28:67:18:e8:84:b9:2f:18:0b:
         71:b9:0b:c6:53:20:bb:38:6d:7b:87:9a:9a:11:ab:de:ca:87:
         36:b8:07:0a:da:79:68:d5:41:73:1d:64:ec:e4:5c:02:0a:60:
         97:b6:a6:ba:ba:8b:88:33:20:4b:b0:9b:56:cb:80:b8:b0:5f:
         96:18:55:18:98:ba:dc:a6:c0:f8:3d:43:b8:83:ce:d6:d5:b3:
         e9:1a:a8:b1:12:60:f2:46:0a:6c:c8:6c:ca:99:5b:e1:15:1e:
         70:f2:3a:03:bf:0c:cb:9a:27:78:48:3f:64:e4:2d:bd:37:38:
         6f:60:d6:69:93:a4:2a:fc:d3:fd:91:f2:59:42:60:81:d8:48:
         7a:00:7f:86:54:b5:11:0f:f0:17:2a:f7:e9:3d:73:0c:ef:23:
         7a:f9:7a:60:61:1f:6b:f8:7a:7a:cd:22:b8:6b:2f:50:e1:8d:
         eb:db:8d:6f:7a:93:c1:15:0d:0b:63:cf:8b:5b:5d:96:c4:b6:
         c9:30:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:18:11 2026 by rpki-client