Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e5b4c3b4-8392-3c96-b1fd-e61dcad1c147.roa
File:                     e5b4c3b4-8392-3c96-b1fd-e61dcad1c147.roa (raw, json)
Hash identifier:          zP6ZhPMZlGvVT+GpyLzmpRFyTpgIyUuEWjQkMYisDx4=
Subject key identifier:   A6:D2:29:97:62:1F:60:BD:06:12:68:1B:0A:61:AC:2D:C8:CC:08:B9
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2BC8D0EE92924D5358E18
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e5b4c3b4-8392-3c96-b1fd-e61dcad1c147.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        170.248.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:bc:8d:0e:e9:29:24:d5:35:8e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=ffda248c-e39f-4fc3-9d96-1b63d5463636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:6e:94:3e:34:63:46:50:da:e4:a6:96:d1:
                    04:05:bd:f4:bd:83:77:d8:0d:71:13:8b:ed:f3:69:
                    c6:79:a3:f7:19:5e:8e:39:91:f0:ca:a9:18:b7:14:
                    89:30:dc:41:4f:1d:c2:e0:8f:ee:d6:ae:e3:50:84:
                    9e:8a:59:7f:98:c0:b0:5d:b1:2a:54:cd:97:f8:35:
                    bb:0b:52:93:14:43:2f:f6:3e:99:33:72:88:1a:78:
                    17:54:1c:80:3f:21:50:62:d6:95:f0:48:87:47:aa:
                    d4:04:e8:b3:55:e9:58:04:67:b7:07:ef:47:c5:0e:
                    76:05:a9:63:73:d7:11:b6:21:c2:a2:8f:3f:94:0a:
                    56:df:d0:2f:b8:ed:2c:51:9f:09:13:4f:0d:85:ce:
                    72:92:2b:38:dc:64:9f:21:6f:25:c2:59:6f:bb:a2:
                    23:c8:6f:aa:91:a9:d0:ed:80:79:a5:dd:cf:58:2a:
                    6f:cb:ce:be:31:f2:68:53:f2:73:c6:9c:b6:bd:a1:
                    75:54:30:3f:6a:9d:79:ba:09:63:15:9b:57:6f:c9:
                    9a:33:b3:37:9d:76:65:f8:55:45:40:c5:06:d7:38:
                    b5:7e:a9:bf:ec:e7:5a:92:8f:ef:ad:6b:45:19:be:
                    55:01:90:22:31:5f:c1:62:13:20:64:3c:3a:20:6c:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D2:29:97:62:1F:60:BD:06:12:68:1B:0A:61:AC:2D:C8:CC:08:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e5b4c3b4-8392-3c96-b1fd-e61dcad1c147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:63:f3:e4:5f:15:4c:24:c7:12:78:9e:b0:60:75:64:8c:c0:
         39:20:e1:b4:73:cb:34:05:5d:32:e6:4c:0a:07:d5:6c:26:a3:
         8a:22:d7:d9:f0:70:cd:75:d9:b3:10:e6:ec:8d:b4:d2:6e:74:
         63:a6:f5:dc:8d:2d:91:c8:00:7d:10:a8:ac:17:69:4d:c5:ae:
         f2:6d:40:62:73:69:ee:79:58:61:6a:47:65:4d:2e:93:0d:a0:
         35:1a:b4:24:58:ab:bb:af:c1:76:9e:a4:f9:b7:4a:9c:3d:11:
         cb:7e:b4:f7:17:62:f0:9a:12:81:89:fe:ef:79:ad:dc:46:93:
         3c:6e:65:c1:ae:ef:06:f5:94:ba:90:91:69:60:5c:ea:5f:27:
         10:01:7b:6b:d3:ff:2c:fd:89:e8:0b:f7:36:95:ad:dc:68:bb:
         96:fa:c3:5f:c8:b5:54:56:50:39:ae:d4:70:cf:08:5a:bc:ca:
         89:f0:35:22:d4:20:59:3f:a3:5e:0c:32:a2:9f:47:6b:df:e1:
         d1:aa:81:72:c0:a7:c6:95:ba:59:5c:74:75:25:66:43:b3:3c:
         41:17:33:22:71:0b:6e:df:1c:73:bd:f5:be:25:08:0d:16:dd:
         7b:4e:6f:50:15:e7:4a:3f:69:6c:38:4a:4d:0a:91:d0:4e:85:
         11:01:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:52:44 2026 by rpki-client