Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4636f33f-05e3-3b2e-9902-bc9797841cf0.roa
File:                     4636f33f-05e3-3b2e-9902-bc9797841cf0.roa (raw, json)
Hash identifier:          NTW5iAo7IAOSZAmnVhR4uErlO8eMSBasIYyet3Ic6ZY=
Subject key identifier:   86:E4:6B:C7:B4:07:B6:A0:01:61:1B:4F:A8:E5:C7:FF:82:AE:80:43
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA790984B9C8A136361218600
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4636f33f-05e3-3b2e-9902-bc9797841cf0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10794
IP address blocks:        171.161.160.0/19 maxlen: 19
                          171.161.160.0/24 maxlen: 24
                          171.161.161.0/24 maxlen: 24
                          171.161.162.0/24 maxlen: 24
                          171.161.163.0/24 maxlen: 24
                          171.161.164.0/24 maxlen: 24
                          171.161.165.0/24 maxlen: 24
                          171.161.166.0/23 maxlen: 23
                          171.161.166.0/24 maxlen: 24
                          171.161.167.0/24 maxlen: 24
                          171.161.168.0/24 maxlen: 24
                          171.161.169.0/24 maxlen: 24
                          171.161.170.0/23 maxlen: 23
                          171.161.170.0/24 maxlen: 24
                          171.161.171.0/24 maxlen: 24
                          171.161.172.0/24 maxlen: 24
                          171.161.173.0/24 maxlen: 24
                          171.161.174.0/23 maxlen: 23
                          171.161.174.0/24 maxlen: 24
                          171.161.175.0/24 maxlen: 24
                          171.161.176.0/24 maxlen: 24
                          171.161.177.0/24 maxlen: 24
                          171.161.178.0/23 maxlen: 23
                          171.161.178.0/24 maxlen: 24
                          171.161.179.0/24 maxlen: 24
                          171.161.180.0/22 maxlen: 22
                          171.161.180.0/24 maxlen: 24
                          171.161.181.0/24 maxlen: 24
                          171.161.182.0/24 maxlen: 24
                          171.161.183.0/24 maxlen: 24
                          171.161.184.0/22 maxlen: 22
                          171.161.184.0/24 maxlen: 24
                          171.161.185.0/24 maxlen: 24
                          171.161.186.0/24 maxlen: 24
                          171.161.187.0/24 maxlen: 24
                          171.161.188.0/24 maxlen: 24
                          171.161.189.0/24 maxlen: 24
                          171.161.190.0/23 maxlen: 23
                          171.161.190.0/24 maxlen: 24
                          171.161.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:98:4b:9c:8a:13:63:61:21:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a9f681e5-9a99-4fbf-958e-71272c96bf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:7e:d5:3a:ef:9b:9b:ef:68:83:52:e4:ea:
                    b4:2a:b1:fb:2e:08:68:19:e2:d5:20:f2:50:52:e6:
                    88:e6:9b:e6:e3:f2:9c:cc:6f:20:27:30:99:4c:f6:
                    d3:4f:c3:1e:af:2a:ea:b9:33:e5:43:f1:80:e3:ec:
                    d1:c7:22:c3:0e:12:64:5f:b2:be:90:dc:a9:3a:37:
                    21:06:c3:74:8c:27:0a:11:f4:ac:6b:7f:c8:6f:c7:
                    33:f6:11:9f:6c:3c:8f:d5:70:26:c3:6e:48:1f:cb:
                    77:ff:1b:66:ff:ab:39:57:7f:ba:56:47:2f:e6:b0:
                    86:f4:8f:34:05:f9:22:30:db:2b:48:47:fc:6e:14:
                    eb:12:3a:d0:d4:36:5e:a3:e6:de:65:03:04:98:9c:
                    50:ca:95:0f:5a:fe:41:ff:35:d7:8c:00:00:8d:b0:
                    59:a9:ee:f9:c5:94:a4:ac:64:0c:0a:9e:26:83:e4:
                    cc:6e:90:12:31:b5:16:21:9e:63:a5:ae:5a:4c:7c:
                    ee:8a:ee:ea:3b:4c:fe:61:63:43:90:0c:08:89:94:
                    02:10:fd:43:6b:7d:f6:c8:5b:f1:a5:ca:a0:46:97:
                    72:98:e8:f0:ed:0e:fd:df:d1:24:a5:ae:af:81:cb:
                    2b:24:fa:51:80:f0:e2:6d:42:70:70:f3:7a:e5:43:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E4:6B:C7:B4:07:B6:A0:01:61:1B:4F:A8:E5:C7:FF:82:AE:80:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4636f33f-05e3-3b2e-9902-bc9797841cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:25:ec:f2:4e:fe:00:a9:4b:79:2b:be:76:c6:1c:6b:35:82:
         c5:29:4e:06:71:ba:3a:bd:e4:39:9c:22:d8:d2:06:9c:96:62:
         f0:9f:36:58:02:ad:42:8d:54:2f:9b:27:65:bc:97:79:b0:86:
         6e:12:a7:a1:f5:01:54:49:eb:a7:91:a6:2b:c7:14:7a:39:cd:
         0d:92:9b:58:bd:ea:be:39:98:11:eb:bd:66:33:3a:80:35:f6:
         d6:5d:df:78:d1:75:1c:55:19:73:f5:6d:42:57:34:68:cc:12:
         f0:04:cc:f1:70:13:ee:24:c7:1e:44:f6:e8:03:9d:e3:7f:91:
         e7:79:09:a2:e7:6f:6f:e1:a7:d9:49:44:27:a7:f1:d3:96:d3:
         fe:fc:f8:7c:34:33:21:ff:78:a2:6d:e0:6a:93:14:6b:9a:d2:
         e6:00:7b:b0:94:6a:73:7c:4c:22:4f:3f:dd:97:f6:b9:27:24:
         fd:a8:38:b4:01:3b:ec:f6:fb:59:63:d4:9d:7d:41:dd:6f:e2:
         3d:83:f1:ce:48:f5:40:c1:a0:7d:e8:e9:17:0f:8b:15:11:55:
         9a:11:31:69:75:32:ca:b4:2a:b6:5f:a1:1c:93:e4:c9:ba:b0:
         3b:c9:15:2c:0d:ea:14:22:8a:43:f5:01:09:fc:9a:1c:af:fc:
         2e:ea:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:52:34 2026 by rpki-client