Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/16a89f6d-ddab-3d57-ad69-20af93bae93a.roa
File:                     16a89f6d-ddab-3d57-ad69-20af93bae93a.roa (raw, json)
Hash identifier:          3ekFOqM8W46WrJzH2pfGj1XMzb6PsBj3IQYZT7UDROo=
Subject key identifier:   2D:B1:7E:B3:5C:76:9F:CF:3C:5E:DC:C8:FD:8F:00:FD:79:52:31:37
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EC4D715D67A77116D38878000
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/16a89f6d-ddab-3d57-ad69-20af93bae93a.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     21433
IP address blocks:        170.251.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:15:d6:7a:77:11:6d:38:87:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=3c1bdd0b-f0e9-4d58-97c7-0e3e602aec56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:04:ee:ca:c3:69:d6:52:9c:53:39:95:2a:
                    36:27:48:aa:b4:7d:c0:89:c6:d8:dc:8f:ee:51:8c:
                    52:fc:8c:86:73:30:8b:53:39:ef:5d:6a:1d:73:85:
                    7e:f1:f1:90:3c:82:6f:13:27:ad:26:70:41:ea:7c:
                    92:db:8c:47:9b:f0:2b:5f:40:b8:cb:90:fb:bc:9d:
                    be:6b:06:76:01:cb:c3:2a:cd:ef:48:41:7c:28:60:
                    a5:5e:97:34:cb:fe:55:5e:9d:b2:21:df:53:a6:2f:
                    75:68:0a:6d:22:e0:f4:c9:78:4a:4b:42:e6:67:83:
                    31:96:77:91:45:2f:fa:cf:f2:87:1c:20:69:3a:51:
                    63:b3:a8:e8:0a:57:52:f3:d8:a5:90:85:e1:95:f8:
                    d3:72:88:75:0f:74:60:18:3b:87:77:04:41:06:81:
                    07:b6:26:f5:fc:81:ae:a2:5e:1e:49:71:d6:09:a8:
                    33:44:e8:c2:28:ba:da:df:cd:29:b8:90:48:f9:fe:
                    ab:82:1a:a9:34:1a:87:60:2c:1f:7d:ba:33:67:cf:
                    4b:ee:64:59:9c:70:7a:1e:1a:4f:43:75:9c:f2:3b:
                    61:03:4c:5f:3e:5c:ff:3a:19:f0:89:41:43:31:c0:
                    5f:25:61:e7:7e:ac:dc:b0:92:9b:ee:67:36:1c:28:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B1:7E:B3:5C:76:9F:CF:3C:5E:DC:C8:FD:8F:00:FD:79:52:31:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/16a89f6d-ddab-3d57-ad69-20af93bae93a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:12:77:85:73:60:09:eb:97:8a:46:16:4b:0f:f4:7e:63:d7:
         f3:6e:25:44:fd:a2:16:b8:16:f7:34:75:35:e9:5d:8a:c6:9c:
         41:c7:5b:56:db:23:65:9f:44:ac:86:ac:1c:03:86:0b:5f:67:
         2f:7e:d9:51:aa:46:9b:7b:b9:ef:f3:d5:f0:3c:7e:42:63:a8:
         73:5f:83:ca:3c:39:c2:c4:b9:46:65:60:9c:56:57:5e:a6:35:
         f1:d6:0f:80:ff:20:de:ad:27:b9:d7:65:27:9a:1d:43:76:60:
         77:67:6b:0d:d3:06:8d:4b:10:11:45:58:19:f9:15:40:a0:45:
         77:2c:d5:8e:3a:f0:c0:83:84:73:81:67:bf:86:94:7a:c3:e2:
         d8:81:63:48:a8:16:be:6a:1d:55:50:43:35:fb:90:a1:e4:1f:
         c2:86:4b:4c:1b:13:a1:d7:4e:10:77:84:b6:9c:ae:77:00:4b:
         01:e5:82:90:fc:5d:a9:2c:a5:ac:c9:db:1c:b7:2b:f9:7a:47:
         1e:6c:07:67:62:24:a1:0d:dd:51:54:2b:be:7c:eb:65:fa:32:
         6a:1a:73:cd:05:5b:35:a8:56:a7:71:16:31:81:9d:53:96:b6:
         49:08:01:dd:2d:1d:22:98:d0:b7:56:b6:08:ff:76:df:18:d8:
         cc:00:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:15:50 2026 by rpki-client