Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa
File:                     a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa (raw, json)
Hash identifier:          PQu0BcuU0/mgY5PdKm0VF0za7e/53zF/lmSRvDpwWFE=
Subject key identifier:   86:D8:B3:2A:1F:FB:50:02:6C:73:84:64:10:A8:1C:6F:C6:C7:0E:30
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EC4D71741AF3C7EC4902CB0C0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     21433
IP address blocks:        170.251.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:17:41:af:3c:7e:c4:90:2c:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=44106c25-4699-4f46-ad33-d01e7ee2aa02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:0e:0b:7e:13:60:6e:61:20:37:12:60:3a:
                    f9:e9:4f:7c:9b:a6:03:4e:e8:df:fb:27:91:6f:33:
                    e8:88:6a:6e:a0:89:8d:ba:c7:b4:11:a7:dc:71:ff:
                    08:4d:0d:90:3d:b0:b9:be:3c:54:32:46:6c:6e:bb:
                    60:5d:c8:28:f2:7d:a8:c0:8a:7d:69:bf:60:f0:2b:
                    16:16:80:81:19:77:9c:15:73:3b:a3:4e:8f:7a:32:
                    77:80:bf:27:65:31:8b:a7:06:b1:be:b1:2b:4d:0f:
                    1d:75:54:3c:34:26:c4:d7:da:df:64:7b:31:b3:03:
                    7c:52:f6:5b:d6:7d:5c:2f:f5:15:98:49:fa:f4:98:
                    87:1f:4d:8c:64:78:8b:a3:bd:a4:df:78:27:ba:32:
                    67:e1:37:a3:8d:c2:e4:5f:09:8a:27:73:be:27:fe:
                    98:d2:29:9f:29:fe:c2:11:28:77:9f:2e:6d:a7:8e:
                    f9:f5:0d:1a:b4:45:09:91:5b:a1:b5:95:2d:82:38:
                    24:5a:07:3c:2b:98:3b:9d:ee:cb:34:63:32:1b:39:
                    8f:39:83:24:46:0b:48:2d:2c:8e:98:28:5b:a8:a6:
                    74:79:4a:05:3f:98:3d:bc:fe:0a:ec:cd:a0:57:31:
                    0c:b4:be:fd:95:29:9e:c4:9d:df:f5:eb:d9:a5:7c:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:B3:2A:1F:FB:50:02:6C:73:84:64:10:A8:1C:6F:C6:C7:0E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2e:4a:01:f6:05:a0:88:24:c8:15:c6:14:34:86:bc:57:ad:
         2b:a6:b7:df:d1:6c:46:0c:a7:dc:20:13:47:7e:72:98:4d:a2:
         89:e5:cd:59:75:c6:5c:bb:50:8c:c2:e3:0a:fd:75:6f:99:53:
         07:dd:1c:86:14:ee:d3:e2:c2:55:bb:99:43:37:a3:ec:74:4a:
         9f:db:bf:32:54:06:aa:32:19:ec:0a:03:21:94:f5:bc:1d:5e:
         01:29:62:b5:37:4d:7a:f1:5c:46:ba:d6:69:ec:d2:4b:af:d7:
         6a:19:58:4a:81:3b:32:79:a0:54:a1:30:24:d4:3b:76:5e:41:
         ea:f2:83:3a:fb:e4:a2:d5:3a:49:15:68:0c:c8:26:00:fb:7d:
         72:e4:2b:dc:89:8e:6b:34:6d:40:8f:b5:b7:1a:7a:e3:fb:db:
         c8:a1:0e:15:75:b7:0f:d9:ee:0b:bf:09:4e:d4:0f:19:52:05:
         5f:73:28:e3:45:b1:ac:6f:09:27:29:15:c1:e7:83:67:c8:fd:
         0f:7b:d6:81:41:1d:ed:56:c4:fb:93:c3:21:da:77:86:aa:c8:
         8d:7e:eb:92:af:24:c8:af:94:77:54:45:fc:e9:17:53:7b:05:
         52:56:5f:04:d8:c1:24:c9:cf:3d:01:14:d7:e2:60:f8:ac:1b:
         f2:4f:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:15:51 2026 by rpki-client