Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/f722401a-5fef-3cea-860b-5ff1810c5250.roa
File:                     f722401a-5fef-3cea-860b-5ff1810c5250.roa (raw, json)
Hash identifier:          lIE6iaTV/Anxba6LQ+zgD1lEun9ajlS3wIw52ydEjEY=
Subject key identifier:   49:E6:CF:25:63:BC:33:2F:7A:58:5D:0F:DB:A0:2A:E3:24:77:A7:B8
Certificate issuer:       /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Certificate serial:       010D0C9F4328584DA6B00F453BDBE0919FA97680
Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/f722401a-5fef-3cea-860b-5ff1810c5250.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     27425
IP address blocks:        213.170.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0f:45:3b:db:e0:91:9f:a9:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=cf0a0359-139a-4bfa-a271-953c95fc033f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:75:7c:e2:84:82:7a:03:16:77:64:23:40:
                    5c:5e:90:88:b0:9d:64:8e:d5:cf:af:75:0a:29:25:
                    b5:b0:2b:76:c8:0c:c2:00:88:5b:bc:00:8a:b1:eb:
                    3c:25:ce:37:b5:ea:b8:79:0a:ae:b4:a4:9d:7e:fc:
                    7d:95:69:7c:8d:a6:6b:e7:11:81:c6:e8:5f:16:30:
                    0a:54:bd:62:99:c2:7c:03:45:a0:56:c7:29:1c:b0:
                    fd:6e:b2:ab:62:5e:5d:8b:13:b2:5e:32:87:03:27:
                    d5:fc:ff:39:66:5d:44:57:d1:78:c1:35:16:e4:2f:
                    11:cd:1c:21:62:99:fb:14:27:c3:ba:30:0b:bd:03:
                    f6:09:3d:4b:42:6e:95:2e:bf:aa:d4:8d:b5:31:69:
                    aa:88:3f:3d:44:6e:b4:c3:f0:37:89:23:a5:4a:00:
                    10:31:58:92:9f:42:c5:a8:01:1e:f3:ec:d2:e6:0e:
                    69:e9:7a:4e:70:d6:1d:31:3e:3e:68:b2:94:75:16:
                    86:13:d7:63:b8:33:be:89:82:f1:cb:10:3d:33:96:
                    54:30:fc:81:4e:63:bc:74:b3:ba:d5:ab:77:b3:82:
                    2c:16:9b:a5:4a:7e:c8:84:98:95:72:bb:e9:46:20:
                    13:ff:5a:32:d0:86:c3:b8:d3:c2:55:e0:5f:26:b6:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E6:CF:25:63:BC:33:2F:7A:58:5D:0F:DB:A0:2A:E3:24:77:A7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/f722401a-5fef-3cea-860b-5ff1810c5250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl

            X509v3 Authority Key Identifier:
                keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.170.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:37:48:f7:ad:aa:80:c9:2a:0e:5f:65:16:1e:3b:9c:eb:
         7e:80:7e:57:51:42:f8:f3:28:25:bc:62:f2:68:7c:9c:cc:45:
         81:41:de:3b:f6:00:a7:50:31:ea:2e:e4:16:6b:1a:b2:2e:0e:
         74:e9:b8:25:4d:3e:53:c8:e7:96:f5:72:34:b8:15:7b:92:d8:
         ac:81:8a:ec:20:ba:9c:96:2f:3f:08:c1:6e:d2:02:a1:b8:9b:
         b9:96:ad:2d:47:5e:1c:8d:50:c9:92:0e:1e:59:2c:12:db:07:
         91:a2:7e:e1:4a:49:c9:be:5a:3f:99:74:da:02:4b:c9:3a:01:
         f9:79:7e:bf:00:30:5a:13:be:94:c8:49:00:1f:50:ce:f6:38:
         d5:19:f7:f9:b0:f7:27:df:32:3a:8a:70:65:d5:9e:16:8e:e5:
         fc:cf:37:5a:cb:21:26:4a:8c:6e:3c:0d:94:6a:31:6b:3b:55:
         9e:ad:62:a8:68:86:7f:22:9b:98:b3:a6:fc:10:3a:38:06:f7:
         82:18:e2:45:4d:cf:aa:b9:b9:dd:54:52:13:40:3d:71:28:ea:
         c2:22:9d:6b:46:67:e5:aa:fe:07:92:07:23:39:06:6f:3e:80:
         42:a1:2a:53:f7:49:22:c1:0d:00:20:5b:0c:a3:a5:9a:2a:dc:
         0b:bf:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:13:09 2026 by rpki-client