Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6b8a4b46-999d-3924-9651-2afb3e65732e.roa
File:                     6b8a4b46-999d-3924-9651-2afb3e65732e.roa (raw, json)
Hash identifier:          af/zI3EYaPdpnE8rcE4n7SLyOg3tplM+d8zt+Oa0uWM=
Subject key identifier:   1D:0A:74:08:13:A8:0A:8F:7F:6E:1C:DC:CA:59:D2:7A:5E:BF:AF:24
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2C44B01CBC7DED2C66A80
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6b8a4b46-999d-3924-9651-2afb3e65732e.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        170.251.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c4:4b:01:cb:c7:de:d2:c6:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=24d1e2f1-60b9-451e-abbc-9464f36baf6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:a5:87:c6:e5:b0:f7:d1:e1:1b:5b:18:d1:
                    59:5b:97:fc:86:f9:db:a9:15:2e:e5:7c:09:b4:09:
                    73:09:8b:4c:64:55:fb:e1:b7:87:36:8b:a1:23:fe:
                    c6:2f:3e:e6:d6:02:57:9b:f5:42:ba:ce:85:4d:32:
                    2d:90:02:41:53:1c:9e:e2:69:7b:8b:62:28:30:42:
                    b0:ae:74:84:87:0a:8b:b1:e2:64:09:d5:d9:9e:81:
                    ce:1c:07:60:9c:73:a7:bb:2c:d7:7c:40:67:26:db:
                    bd:2b:d5:78:e5:5a:0e:ce:01:41:66:3e:68:60:5b:
                    57:24:4f:71:12:dc:c7:f3:d1:c7:dd:6d:42:03:88:
                    1a:0e:d5:ff:b9:3e:72:1c:c2:42:2e:d0:c8:f9:f1:
                    83:10:a6:37:13:4c:78:b9:85:cf:51:a8:02:e0:0a:
                    b5:bc:88:0a:4c:e6:08:67:e2:03:b2:07:b1:fd:0c:
                    8d:46:74:84:60:fc:f7:7a:01:c9:e4:79:23:be:a9:
                    53:0f:01:49:21:2e:a5:b1:bb:4e:47:0c:c2:74:fa:
                    70:3a:ee:2f:0b:41:aa:60:20:e6:7d:e9:9a:20:5b:
                    a9:81:24:d4:60:68:43:dd:20:8b:8f:c3:f1:8f:44:
                    cb:1e:ba:c4:c3:8c:22:62:9e:b3:2f:47:8b:a7:58:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:74:08:13:A8:0A:8F:7F:6E:1C:DC:CA:59:D2:7A:5E:BF:AF:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6b8a4b46-999d-3924-9651-2afb3e65732e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2f:84:35:bb:9b:e3:eb:ed:9a:05:48:82:90:0d:e2:5d:c2:
         ea:2e:13:d5:11:ad:3f:2f:0a:7d:45:6b:72:77:a7:cd:54:0c:
         d7:5c:ab:08:cf:a9:f1:2a:f1:7a:21:e4:c8:fe:48:77:75:89:
         e2:57:64:19:cf:c0:74:ff:8d:cb:fc:93:89:d1:2e:02:d8:bd:
         70:74:17:9e:63:50:6e:94:f3:9c:2b:78:c8:0d:ce:af:52:72:
         bc:63:e8:5c:47:2c:4b:a7:32:99:3d:9f:6d:79:c2:4b:c7:f3:
         22:f2:62:75:4c:c9:65:32:8b:ab:19:4d:27:e4:9e:b7:7d:8b:
         13:db:20:5a:bf:4e:66:db:3d:8a:50:18:cb:3a:75:3d:6e:d3:
         58:35:8b:a5:14:4e:48:23:05:fc:52:ee:1a:89:9a:0f:30:0d:
         f7:3f:59:10:c9:d2:91:e3:d4:20:a0:3c:f5:12:57:8c:55:1a:
         c1:c9:7a:2e:c0:b0:aa:c5:64:ec:61:ea:fc:5a:7c:1b:3a:13:
         07:60:cc:5f:cb:a4:e9:e9:68:5e:33:f2:38:d6:a3:ba:08:a0:
         79:af:bf:29:10:9b:46:27:a7:ac:62:a7:1a:b6:7d:df:03:3e:
         30:3d:a2:a9:fe:f9:cc:2a:b8:68:55:ae:dd:8c:75:3d:b4:cb:
         06:0a:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:57:15 2026 by rpki-client