Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/219376ab-fa5c-31b1-ae6a-b08dcd0c68bf.roa
File:                     219376ab-fa5c-31b1-ae6a-b08dcd0c68bf.roa (raw, json)
Hash identifier:          SyCZ9zBowdglRbBpv9MoWuKuKfeyZIqvWTBp3BsTQWk=
Subject key identifier:   8A:B7:8B:CF:4B:1B:B2:E1:D6:E4:1B:A2:1B:5C:EE:DE:56:85:B2:56
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F4328584F7352D0F69DA0CBB6ACB46540
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/219376ab-fa5c-31b1-ae6a-b08dcd0c68bf.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     7029
IP address blocks:        170.39.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:d0:f6:9d:a0:cb:b6:ac:b4:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=1a7f007c-9aa7-4796-ad9f-0b336361add2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:1b:6b:04:a6:20:8e:e5:4d:60:95:be:25:
                    47:3e:f1:77:35:ac:f4:e9:bd:7a:29:44:89:a2:a7:
                    14:30:73:8e:b5:27:85:99:98:b8:04:0f:ef:23:cd:
                    44:e6:32:25:69:e7:7d:01:65:54:b2:b9:d5:5d:e4:
                    3d:f2:af:03:b1:7e:51:09:20:4b:c5:3c:1c:ca:13:
                    8f:f3:64:f2:45:d4:7c:93:2d:8c:67:8c:90:ea:64:
                    9a:42:23:cd:2f:3b:9a:fd:9f:6d:f4:92:f3:61:df:
                    60:03:da:9a:6a:ea:76:c2:45:32:ca:9d:dc:98:33:
                    a1:21:24:e7:6a:99:d8:52:64:43:d7:eb:fd:68:2a:
                    dc:9e:f8:c5:89:69:92:67:f0:ee:58:85:2c:dd:69:
                    40:1b:3d:ca:a0:7f:04:af:3d:78:73:bb:f4:2d:8c:
                    f7:08:17:25:5e:b6:81:ed:e3:11:a5:01:e5:10:b8:
                    5d:10:14:ec:8b:48:9b:a4:24:1b:fe:27:b5:1f:e6:
                    91:fc:43:22:38:0d:d5:7d:29:ad:2b:33:76:12:eb:
                    7d:11:05:08:06:a5:ac:f3:e6:ea:3b:1f:6b:5a:f9:
                    b1:d6:a8:53:05:95:56:31:eb:3e:42:75:8f:c1:7c:
                    e2:27:0a:6e:3a:7a:ca:fb:0b:22:32:b8:cf:29:91:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B7:8B:CF:4B:1B:B2:E1:D6:E4:1B:A2:1B:5C:EE:DE:56:85:B2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/219376ab-fa5c-31b1-ae6a-b08dcd0c68bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:39:fb:37:f1:a2:6c:e7:a3:7f:ae:9f:8c:8b:36:b9:43:
         58:58:a9:68:fc:22:5e:ed:14:73:9a:db:bb:cb:26:e3:2b:5d:
         1a:62:3b:24:8d:d3:52:40:8c:9a:0f:51:a4:b5:c2:9d:85:72:
         2e:c9:88:a9:05:14:52:b0:03:c2:e3:c3:da:91:15:9b:3a:fe:
         1b:be:b7:76:80:6c:57:1e:51:80:bb:53:63:8a:9c:a1:0f:d4:
         94:96:02:22:56:40:9a:06:c7:9c:f2:af:59:10:09:57:74:0a:
         87:d5:48:0d:97:3d:2b:00:61:5f:0f:23:d2:ee:f3:f9:61:24:
         cf:ee:40:06:36:e2:75:d8:55:c1:4c:ce:a8:57:f0:09:31:63:
         de:99:c3:d6:6b:d9:b4:b4:e8:72:00:8f:52:01:52:b0:79:88:
         74:c0:38:21:de:d3:31:5c:0a:34:a0:80:b2:f8:ec:cd:7a:9e:
         30:2c:9b:88:38:f7:33:9b:17:27:78:2c:2e:7a:39:37:e2:b7:
         63:69:ae:49:cd:b4:df:24:ed:15:de:47:6d:88:ab:cb:5c:da:
         38:99:03:19:70:a5:dc:1f:98:0e:f8:7f:a0:8b:25:bc:38:a1:
         8b:a3:75:37:09:dd:89:4a:36:07:0a:a2:ea:c6:e1:c7:51:cb:
         ff:34:11:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:18:54 2026 by rpki-client