Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/14921937-255e-3145-b92e-f880d5397803.roa
File:                     14921937-255e-3145-b92e-f880d5397803.roa (raw, json)
Hash identifier:          nPZTaJR0+/78EJvV7hjACpOpuaGjxlnX69q2cxrv1ls=
Subject key identifier:   33:DB:EA:AA:18:B8:75:A1:A9:2E:76:31:43:96:A3:E0:EC:BA:5C:28
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EB689D5D3A298E3265C834A00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/14921937-255e-3145-b92e-f880d5397803.roa
Signing time:             Mon 03 Aug 2026 10:03:21 +0000
ROA not before:           Mon 03 Aug 2026 10:03:21 +0000
ROA not after:            Sun 01 Nov 2026 11:03:21 +0000
asID:                     21433
IP address blocks:        170.248.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:89:d5:d3:a2:98:e3:26:5c:83:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  3 10:03:21 2026 GMT
            Not After : Nov  1 11:03:21 2026 GMT
        Subject: CN=e33415cc-c6ff-45c3-9a18-dab5d768903f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:90:f6:21:48:fe:87:d7:32:b5:85:5c:c9:
                    81:29:d5:45:ae:76:0d:bf:47:a9:9c:08:74:0f:50:
                    76:7d:36:71:d6:44:44:0a:57:bc:2e:73:3d:b2:f5:
                    31:a1:87:72:8c:c0:be:c2:b3:4e:8e:09:44:3a:37:
                    2b:8c:f2:c6:ce:ab:78:82:ff:13:25:0b:f9:90:29:
                    14:f9:93:a0:61:22:1d:24:85:a5:f7:26:02:8d:b7:
                    08:02:50:42:2a:37:a5:54:22:9b:2c:1a:cf:cf:a0:
                    06:f2:3f:19:88:7e:79:f7:69:cc:bf:e8:31:d6:3e:
                    df:ba:b2:c4:fc:fa:ac:d2:e0:90:bf:55:16:2e:28:
                    07:ea:ee:36:13:42:40:61:7d:5b:e2:a1:b6:96:32:
                    1d:6d:41:8b:e8:72:b9:dc:ac:c9:65:ed:a1:66:80:
                    71:d2:15:ac:cd:0f:e4:88:cf:e1:2a:e6:b5:4a:0c:
                    cf:74:c6:2a:bc:02:3b:9b:fe:6c:bc:a4:26:0c:40:
                    cf:2c:4a:9e:d6:b5:3e:43:99:0f:92:2e:d4:7c:67:
                    d1:f1:dc:e8:60:2c:0a:09:4a:18:84:e1:c2:e1:f8:
                    3a:5a:c1:5b:71:92:4f:56:29:aa:1f:fe:9c:d0:bd:
                    2e:88:bb:d0:95:39:75:03:2b:9e:ae:8e:2c:f9:05:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:EA:AA:18:B8:75:A1:A9:2E:76:31:43:96:A3:E0:EC:BA:5C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/14921937-255e-3145-b92e-f880d5397803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:00:31:cc:db:be:c0:d7:14:99:23:bf:35:a2:ca:0b:e6:a4:
         70:53:ba:27:b6:2b:3d:4e:59:04:77:d0:81:ac:1d:b1:bd:1c:
         f8:2c:28:f8:f6:3e:59:75:87:99:01:8d:db:81:dd:eb:f4:ff:
         cb:d7:91:90:36:dd:ff:90:7b:a7:46:13:b4:31:84:17:68:15:
         25:dd:96:d5:68:0e:80:eb:72:d9:d7:55:84:f4:3a:bc:e7:4f:
         07:c6:35:f3:16:c2:0b:6e:ce:63:75:1a:d0:fe:bc:93:29:17:
         07:a6:3f:95:c0:16:fc:56:53:ef:1a:68:2f:5a:62:1b:63:1f:
         00:18:67:f9:92:cb:fe:d0:48:8a:a4:12:6f:1c:17:ed:30:9a:
         0b:70:62:48:db:5b:7f:e0:3b:11:ce:0d:f3:8b:8c:ca:5e:aa:
         6c:63:43:27:be:27:2b:80:9b:f7:2f:d5:6b:76:1e:5a:a5:a5:
         1c:d9:40:48:6e:56:78:b7:f9:3a:02:b9:c3:1a:f2:9e:af:21:
         df:bf:5e:57:39:2e:cb:22:af:a6:c4:4b:e6:24:40:b9:93:b2:
         98:45:f0:8e:40:d0:3b:92:33:7f:bc:38:c6:00:6b:45:4a:54:
         5f:11:81:ac:91:33:b9:a2:a2:fb:82:55:7c:d1:59:c2:af:33:
         2f:dc:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:11:31 2026 by rpki-client