Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/1ccdc629-e47e-3315-a4f3-b03978f398ba.roa
File:                     1ccdc629-e47e-3315-a4f3-b03978f398ba.roa (raw, json)
Hash identifier:          +qyOL3JI3rVOgZux2OipAoKUtXvIBIJoSUJIIzpMUEE=
Subject key identifier:   9B:82:ED:30:CD:F3:55:FE:2C:37:96:92:F5:43:FC:DE:16:DE:FB:26
Certificate issuer:       /CN=770e3eb7-a110-4c5f-ac71-41397fe16cac
Certificate serial:       010D0C9F4328584D143D455EF3AF38BF404FCEB6
Authority key identifier: E3:0D:DB:6E:F8:F7:03:76:59:71:90:CF:59:61:6E:82:50:4E:A4:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/1ccdc629-e47e-3315-a4f3-b03978f398ba.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        163.47.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:45:5e:f3:af:38:bf:40:4f:ce:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770e3eb7-a110-4c5f-ac71-41397fe16cac
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=b778badd-5621-4364-9e62-e26b2e547b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:c1:4c:de:26:f6:e7:81:f5:58:ed:1f:18:
                    3f:38:ab:f4:46:b7:c6:85:3e:1e:ab:f8:2d:e3:7d:
                    34:a5:93:b7:69:09:e3:0e:3c:31:7a:20:d7:3f:55:
                    28:36:53:d6:d3:5f:47:56:e1:95:d0:62:10:78:7d:
                    64:bd:42:9c:bf:93:ab:30:a0:1d:ab:32:4d:23:3a:
                    e8:1a:d1:db:ba:49:9e:09:be:f2:ac:ac:af:3f:4f:
                    3b:2b:af:fc:af:15:37:cd:14:57:f5:0d:94:c3:e3:
                    1f:4d:9b:cc:4c:45:60:76:30:db:7f:c8:ed:ce:29:
                    83:e3:a8:ad:8d:4c:da:8b:a6:95:1e:64:96:95:7b:
                    24:9f:9a:67:a5:89:44:15:05:9a:0f:68:aa:1d:c2:
                    41:e0:47:f8:57:dc:2a:7a:97:c4:05:86:cd:6d:3b:
                    01:38:6e:7c:92:c1:24:46:ba:01:59:1d:0c:57:25:
                    ae:bd:d6:2b:60:7b:36:17:4e:66:38:95:0e:6f:f6:
                    16:e1:87:24:49:00:38:ba:02:1a:28:2a:55:e4:18:
                    2e:94:11:0c:4d:2d:8b:af:cc:a5:dc:da:69:9e:26:
                    42:f1:ee:c7:b2:69:f2:67:9b:a8:78:cb:e1:65:a1:
                    3e:05:8d:1b:37:88:0f:74:06:31:ba:b2:64:2c:b0:
                    69:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:82:ED:30:CD:F3:55:FE:2C:37:96:92:F5:43:FC:DE:16:DE:FB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/1ccdc629-e47e-3315-a4f3-b03978f398ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.crl

            X509v3 Authority Key Identifier:
                keyid:E3:0D:DB:6E:F8:F7:03:76:59:71:90:CF:59:61:6E:82:50:4E:A4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:4b:35:bb:ca:f4:11:6b:0f:fb:24:2c:91:a6:0b:67:cb:
         90:7b:ca:e3:9d:5f:d6:e6:09:5f:dd:ba:94:78:47:f3:f0:67:
         e4:e6:24:66:ac:38:4d:3e:f2:fc:7b:c7:a1:b9:4b:0b:ff:31:
         9d:17:e8:81:01:28:04:a1:f1:5d:87:d2:ae:9c:ae:08:27:d4:
         59:8b:dc:32:2c:d0:3c:db:76:5d:eb:ea:df:70:a2:24:57:5a:
         25:81:ef:b5:ec:4a:03:b0:c3:9a:f1:cd:36:85:0a:ac:57:82:
         81:ec:b9:c0:08:15:0b:a5:c3:4f:7a:5a:40:3f:26:60:cc:1f:
         12:2f:63:f2:9a:21:c4:e0:c3:a5:de:32:15:05:77:43:1e:cd:
         ba:3e:77:9e:e0:7f:05:5e:c2:0a:fc:7f:8f:24:9b:b1:ab:fd:
         14:e2:0b:5f:ea:4c:2b:76:b5:32:78:5d:67:ba:62:21:ff:e5:
         9a:ed:70:e6:46:69:d9:9d:e1:2b:67:b6:d4:99:30:ca:22:79:
         d6:5d:33:36:01:2d:35:8e:54:ef:9b:52:25:51:38:e8:82:1e:
         76:fd:4b:27:a0:72:15:1c:6a:56:7f:0a:7c:e4:9e:5f:fc:19:
         3d:cc:d0:93:dc:55:3b:35:7f:4c:7c:f7:cf:25:24:f2:7f:2e:
         56:7b:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:44 2026 by rpki-client