Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/47c3afe5-ce9b-35e4-a54a-64386d1f55d1.roa
File:                     47c3afe5-ce9b-35e4-a54a-64386d1f55d1.roa (raw, json)
Hash identifier:          dt07UyS71NcdnsS0uv/oTBttWAeo7kJTstJUn4MFNVc=
Subject key identifier:   91:13:5E:40:4C:25:CB:79:8E:08:BD:76:1D:6D:4D:93:4C:9B:75:77
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584ECBD1EDB38889BE231B3DDA00
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/47c3afe5-ce9b-35e4-a54a-64386d1f55d1.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     14555
IP address blocks:        170.10.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:ed:b3:88:89:be:23:1b:3d:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=a24ac3e1-05a0-4bdf-88bf-dcd18affff6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:ff:b1:da:e5:ef:3b:8b:26:43:89:1d:e9:
                    bd:4d:86:7b:a0:78:d8:7f:84:e8:98:e1:95:2d:50:
                    a7:a8:16:8f:9c:7f:42:6b:11:49:c8:8d:c1:29:2b:
                    d5:1a:24:f4:a7:e8:45:19:f6:1b:9e:f4:0c:85:6d:
                    a3:d1:7d:24:a4:51:0c:28:69:36:25:6e:f4:82:38:
                    55:7d:e5:f7:08:da:2e:f4:0f:b8:50:86:34:56:14:
                    bd:c9:25:3a:57:3e:f1:9a:00:5f:28:3e:82:86:ca:
                    24:59:13:f4:ba:d4:92:c6:2b:ea:02:e2:41:57:41:
                    3d:45:73:8c:de:44:21:8a:2b:05:c9:7e:1f:bd:8c:
                    11:65:06:11:24:ce:f1:22:30:15:38:e5:87:b2:c3:
                    11:48:2c:cc:63:19:74:fc:01:2a:5d:c4:53:d2:00:
                    5d:6c:02:51:3d:f3:f8:12:7e:3d:d2:5e:b9:a5:26:
                    1f:a4:56:46:c3:94:78:0e:16:53:9a:39:a1:ea:bf:
                    97:5d:cf:9e:29:d8:d7:b5:16:93:a7:fe:39:05:8b:
                    bb:a8:b8:77:89:c4:4c:32:b8:b5:6f:06:41:69:b9:
                    bd:63:20:2f:72:b8:e5:f9:fe:89:0c:4e:64:10:4f:
                    68:c5:ac:32:50:fd:6b:cd:d4:a4:2f:d3:61:0b:95:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:13:5E:40:4C:25:CB:79:8E:08:BD:76:1D:6D:4D:93:4C:9B:75:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/47c3afe5-ce9b-35e4-a54a-64386d1f55d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:b3:5e:4d:89:ea:3a:03:29:8c:c0:b6:96:ae:8d:1d:c1:
         6a:52:0c:24:13:3f:82:45:70:0a:a3:a6:9a:3e:1f:69:d4:bb:
         4f:fa:2e:80:58:5e:0e:61:73:db:69:df:8d:b8:57:94:d8:30:
         1b:7d:33:02:37:c2:a8:52:12:b1:8d:f0:c0:a6:ab:61:b7:0d:
         7a:31:1b:6c:aa:84:2d:46:10:0a:7a:82:46:2b:da:eb:13:15:
         af:1f:11:11:cf:22:18:6c:fc:f2:ec:e0:8a:df:fb:48:ea:3b:
         46:35:8a:3b:85:cc:e3:df:58:06:ef:b8:43:35:55:23:c0:88:
         f0:f8:84:4f:34:46:57:c6:92:2c:07:33:7c:43:bc:cb:3e:19:
         28:86:df:09:ea:3a:91:18:1f:87:67:b2:f1:9f:3d:c2:76:c2:
         f7:0e:4c:2a:a2:34:81:b8:a0:61:b5:c4:6f:a5:9a:fc:74:76:
         5d:9d:0e:20:10:12:c7:ec:5d:74:8f:1f:64:01:95:cf:63:9a:
         1b:e1:95:35:9b:8f:72:25:9a:ec:9d:93:66:b9:80:c6:77:ff:
         61:2c:90:e7:a1:56:72:c4:0d:32:5b:db:bd:7a:1b:71:87:ba:
         4f:90:70:1f:d1:0e:b4:1d:fd:f7:6a:50:2c:ea:23:bf:bb:50:
         a1:98:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:23:28 2026 by rpki-client