Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/e6479c60-8b63-3eb3-947f-628003239ed4.roa
File:                     e6479c60-8b63-3eb3-947f-628003239ed4.roa (raw, json)
Hash identifier:          HNTck5Q8xGwBREpQ9osJIkIycHO8WCsuHsI2ppIj84E=
Subject key identifier:   9B:B9:05:DE:5F:99:FC:72:56:00:61:E0:C1:01:A1:DD:56:7E:92:93
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F4328584E51E9E5D618F6E979F2747B80
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/e6479c60-8b63-3eb3-947f-628003239ed4.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     17161
IP address blocks:        167.245.3.0/24 maxlen: 24
                          167.245.8.0/22 maxlen: 22
                          167.245.12.0/22 maxlen: 22
                          167.245.16.0/22 maxlen: 22
                          167.245.20.0/22 maxlen: 22
                          167.245.24.0/22 maxlen: 22
                          167.245.28.0/22 maxlen: 22
                          167.245.32.0/22 maxlen: 22
                          167.245.36.0/22 maxlen: 22
                          167.245.40.0/22 maxlen: 22
                          167.245.104.0/22 maxlen: 22
                          167.245.108.0/23 maxlen: 23
                          167.245.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e5:d6:18:f6:e9:79:f2:74:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=99db0213-9e5c-4cf1-94b8-47069c0f1609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:96:1f:32:60:d8:77:47:4a:b6:af:f5:bc:
                    6b:8c:c3:c0:57:95:d7:9d:96:9b:c6:48:35:89:23:
                    08:f5:bd:c6:e9:c1:ea:96:05:34:48:9b:39:18:2a:
                    04:77:3a:00:83:92:92:79:2f:2a:fb:fb:3a:e0:66:
                    c7:14:b5:04:56:fd:c9:07:19:9a:22:13:79:0c:7e:
                    e6:d8:50:ce:c1:fa:d0:4e:87:57:5f:f3:e6:a4:8c:
                    4b:f2:f9:60:95:3b:94:07:5e:18:e0:54:1f:2c:50:
                    4f:e9:b2:fa:88:32:ba:85:47:46:e4:7d:79:d3:f0:
                    2c:c1:ca:64:7d:74:91:30:d3:a8:2d:1f:d0:00:75:
                    9b:85:e9:58:b9:a3:0b:31:fc:02:e8:49:0b:7e:da:
                    e6:ec:79:8b:d5:02:b1:82:13:21:e6:ba:42:2b:4b:
                    d7:a1:8c:aa:81:8d:80:d9:35:c8:cd:64:ae:e7:ee:
                    eb:11:01:78:57:12:4a:3a:63:ef:0f:f2:69:34:93:
                    87:95:63:a2:a7:0b:92:b9:ae:ae:01:50:19:ce:75:
                    19:2c:3f:84:a3:0a:e0:88:3d:cd:50:93:59:ce:aa:
                    e8:98:40:dc:ea:cf:db:fa:6f:99:5e:60:80:bf:65:
                    0a:34:10:89:3d:24:9d:37:45:1e:c6:ba:6a:c9:86:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B9:05:DE:5F:99:FC:72:56:00:61:E0:C1:01:A1:DD:56:7E:92:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/e6479c60-8b63-3eb3-947f-628003239ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.3.0/24
                  167.245.8.0-167.245.43.255
                  167.245.104.0-167.245.109.255
                  167.245.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:01:2a:ea:23:68:f8:c6:c7:bf:bd:77:7d:08:56:6f:8e:a2:
         8e:b2:ff:8b:3e:82:d7:18:8e:72:f3:1c:83:ab:e3:67:1f:aa:
         a0:7c:8b:ed:19:4c:eb:11:dd:a6:25:f6:d1:b6:6e:11:12:45:
         5d:98:08:3a:9f:fa:76:ca:fb:11:2b:56:a1:63:14:90:a3:33:
         44:ef:6c:6f:a0:2b:96:0b:76:15:e0:ca:d2:4d:2e:27:e2:9c:
         fe:72:91:0e:8a:b6:9f:f5:c6:cd:35:ee:45:f9:dd:4a:db:d6:
         32:87:5f:bc:37:10:71:05:98:3d:23:f5:6d:f0:ba:d3:67:17:
         25:20:99:6e:bb:a1:0e:a9:2f:b5:22:e6:7a:36:f6:1a:dd:f4:
         15:ec:32:df:96:df:e9:7a:07:57:91:b7:18:63:db:3d:71:69:
         45:63:d8:34:92:5d:55:cf:7c:35:2a:6f:a6:ae:d6:04:82:46:
         47:fb:2f:d6:ed:ff:ad:ce:ab:40:0f:3d:c0:8f:d2:80:8b:ac:
         27:6d:39:bd:4f:25:92:b6:30:b7:a7:d1:dc:09:44:5f:0b:d8:
         f5:62:83:ff:d3:14:b7:6c:e5:5d:05:bd:51:bb:79:91:fa:f7:
         29:31:af:fb:2a:66:52:3c:92:3d:bd:83:28:80:96:d9:57:f3:
         6d:9b:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 14:50:15 2026 by rpki-client