Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa
File:                     f39188b9-36fa-3da1-b751-9158b3ac9d67.roa (raw, json)
Hash identifier:          x+jCW42YamMri7MOT8Ksxa9AZ2u6FHtNY09kXXljjKU=
Subject key identifier:   F8:14:9A:07:47:0E:26:CB:90:24:28:C9:6D:38:D1:C4:0C:77:46:4B
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584DE84B42C73BB65540C39FDDE0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     16072
IP address blocks:        170.186.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:42:c7:3b:b6:55:40:c3:9f:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=38c16c99-937b-4d42-a9d8-20aa78a9721d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4c:70:63:f4:ce:1c:c2:20:8a:f9:67:a1:da:
                    fc:e0:d4:9d:b4:16:59:79:23:d1:27:45:e6:41:dc:
                    8f:15:48:bf:5a:df:a4:aa:29:8f:c9:ae:e3:c1:96:
                    4e:b4:e5:26:a4:6e:e0:87:16:d8:d2:20:6b:8f:a9:
                    2c:20:76:53:b5:df:84:4c:d5:10:29:58:cb:78:49:
                    2c:6b:16:a0:8c:00:d3:21:19:f0:e1:fb:5e:f6:a2:
                    cc:ec:84:df:27:32:ec:3f:f8:2c:2d:57:2b:8e:4b:
                    35:e2:77:cb:45:b7:0d:03:81:21:42:58:c0:60:9a:
                    72:cf:2f:06:55:d1:43:e1:e6:de:74:db:c4:55:4f:
                    f3:ff:b8:d0:7d:43:fc:2c:b7:be:fe:74:1b:78:63:
                    38:31:e7:14:33:91:18:d3:75:75:17:2f:4a:81:92:
                    55:0e:f5:0b:17:2b:4a:f7:14:79:94:8b:4c:b5:bb:
                    d8:df:50:ef:4c:22:58:14:a5:c8:31:46:0b:c6:d8:
                    d2:c9:38:ec:40:96:15:78:c5:73:f1:cc:ee:5c:2a:
                    41:db:0f:ce:43:76:fe:b2:c7:83:c0:f9:13:0e:ed:
                    58:70:4d:53:b9:47:d3:80:a9:6e:77:18:34:4d:72:
                    b9:98:0b:e0:0d:67:74:6a:69:8a:ef:de:ec:e7:31:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:14:9A:07:47:0E:26:CB:90:24:28:C9:6D:38:D1:C4:0C:77:46:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:e8:24:4e:7b:72:10:7e:6a:8a:69:fa:f6:97:56:3a:54:
         2f:b7:e8:30:64:1e:25:87:d6:8b:97:7b:e0:8a:28:ce:01:dd:
         67:8b:3d:40:23:29:e8:7b:8e:9a:0e:21:e2:8d:dd:62:cb:9a:
         2b:62:bb:6d:1f:50:96:cc:b9:4b:42:3f:1f:0e:45:10:26:b8:
         16:53:a3:52:37:fa:91:ed:87:f4:18:e2:47:1b:fa:e1:52:b1:
         88:35:e7:d5:9e:ba:3c:9c:3d:a5:3f:b6:c7:0b:97:be:28:a0:
         65:cc:e1:8d:8f:66:42:cc:ea:67:95:98:4d:ce:52:59:a9:3a:
         b6:6d:1e:2d:25:74:d4:9c:2a:96:bf:c1:84:ba:f8:40:c0:2a:
         18:65:74:bd:3c:33:b6:e6:23:57:45:27:c2:bd:a2:21:1f:70:
         71:1e:8c:22:ae:57:41:8a:02:1f:8f:a4:97:b9:c9:d7:88:71:
         35:00:93:16:24:aa:99:16:8b:1a:70:df:f5:2e:95:1f:b6:ba:
         64:d7:ab:61:9d:ea:87:75:8a:7c:84:f8:f3:50:9a:3d:43:75:
         27:7b:54:54:3b:7f:b2:f5:9c:a3:18:a6:de:fd:d1:6a:77:05:
         59:58:54:b1:a2:40:15:e0:ee:b9:2d:ec:04:2e:d5:09:13:c9:
         52:08:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:30:50 2026 by rpki-client