Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/1fc5c8f5-9dd2-3fc4-9783-205b12436e73.roa
File:                     1fc5c8f5-9dd2-3fc4-9783-205b12436e73.roa (raw, json)
Hash identifier:          Yqzi9d8PIaLG6i1FT3yPO9Y5X4uKcv/LF9XGLfU+fdI=
Subject key identifier:   B2:3D:34:45:7D:56:60:45:40:5C:E3:DF:E2:A4:21:BC:67:EC:6A:37
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F4328584ED16726B0BE114EFA65656340
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/1fc5c8f5-9dd2-3fc4-9783-205b12436e73.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     7029
IP address blocks:        170.39.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:26:b0:be:11:4e:fa:65:65:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=6aac3c0c-87f5-4f69-b3f2-868b33c7870b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:a8:be:19:2c:90:29:95:b8:e3:7d:60:a8:
                    45:5c:5d:25:67:13:8c:2f:4a:b4:4c:9d:bb:bc:3c:
                    5d:ca:fd:02:0d:08:a1:b2:4a:24:a3:0e:ca:ab:b0:
                    85:f5:68:cb:41:a7:d1:79:5d:15:70:2c:1f:59:94:
                    29:42:1a:b1:5a:17:36:e3:14:37:37:be:66:24:cf:
                    f0:77:47:41:00:97:04:71:4d:68:ce:dd:58:33:2e:
                    2d:6d:34:ca:a4:38:7f:aa:09:55:c8:74:3b:47:f6:
                    9a:c3:5a:75:e4:28:5b:bd:f7:05:d3:d9:69:99:0a:
                    c1:b1:ec:c8:ac:63:1b:6c:7e:8c:a3:5f:97:1b:9c:
                    70:88:78:82:3b:b1:8c:ce:60:a1:4a:b4:39:17:ae:
                    2e:e1:d0:cb:c4:3b:cc:8e:3f:f6:df:e1:e3:5f:44:
                    e7:21:84:de:1f:78:34:8e:fe:1a:1e:ce:06:18:e6:
                    11:88:59:e2:d4:e0:da:f0:31:cd:15:39:31:2b:cc:
                    4b:c0:4c:2e:7a:12:f2:11:cf:35:f9:5d:02:83:59:
                    76:95:63:06:f1:20:e6:c9:58:fa:94:d6:73:b7:d1:
                    fc:85:1f:d2:bf:6e:c8:25:64:79:64:e5:67:1e:43:
                    91:b4:92:08:55:c3:a1:4d:e9:84:15:ec:eb:7e:6f:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:34:45:7D:56:60:45:40:5C:E3:DF:E2:A4:21:BC:67:EC:6A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/1fc5c8f5-9dd2-3fc4-9783-205b12436e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2a:3a:0d:49:27:d8:b5:7f:77:17:2a:03:01:33:75:13:42:
         8a:36:e7:22:e1:59:9d:e3:58:6c:aa:54:26:63:fb:69:c1:3d:
         b0:62:77:e6:5d:86:81:8d:80:73:d8:c6:94:d4:47:c6:b9:04:
         a3:91:13:92:08:3d:a6:5b:3d:ec:63:90:68:03:48:7e:a7:e8:
         fc:e6:c6:20:1c:92:43:a4:d4:80:41:a0:78:fe:df:0d:3f:7e:
         75:c8:92:2d:6b:6d:d0:da:27:bd:bc:c5:e3:da:fb:74:59:4e:
         b3:a5:c7:6b:53:94:d2:b1:7f:d0:93:6a:d1:3a:94:ca:d3:e0:
         c8:b8:dd:46:cd:e6:b0:30:6d:c3:0a:1d:06:83:16:3b:5e:e4:
         bd:da:1e:d7:ff:a6:41:99:e6:05:ff:89:98:25:7e:5a:f1:88:
         14:2b:3b:8e:3f:c4:8e:72:6f:f2:4c:34:c5:94:42:f5:90:a7:
         cf:b1:bf:32:e1:52:11:82:b8:18:68:81:77:14:ac:d2:a4:d4:
         f2:8f:6f:49:82:44:41:ec:c0:9d:a6:62:4c:86:ea:75:97:bb:
         1d:d8:c1:90:43:3d:08:ad:8a:28:9e:b8:24:9a:96:0d:f5:7f:
         cb:a6:6b:07:7c:2b:f8:25:37:7f:66:ba:19:a6:d7:51:38:12:
         20:e8:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:05:55 2026 by rpki-client