Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/fee9841b-23ee-3fd1-a71f-891d5fac3b17.roa
File:                     fee9841b-23ee-3fd1-a71f-891d5fac3b17.roa (raw, json)
Hash identifier:          X3H4m9H4Rvy0tKcF/i++L2T4ku1LjuiFrWGFMT+ZB38=
Subject key identifier:   66:B8:69:D1:AE:CF:9F:40:AE:6F:D2:6E:FF:C9:25:5D:E4:13:53:86
Certificate issuer:       /CN=c13f4003-1e3d-4d8a-aba5-a85f793d9765
Certificate serial:       010D0C9F4328584EC63C7185F642C784BBA9C080
Authority key identifier: D3:7A:26:B8:A4:99:11:AA:3A:45:6A:53:D8:A7:C5:FE:58:45:19:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/fee9841b-23ee-3fd1-a71f-891d5fac3b17.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        167.232.176.0/24 maxlen: 24
                          167.232.192.0/24 maxlen: 24
                          167.232.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/c13f4003-1e3d-4d8a-aba5-a85f793d9765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/c13f4003-1e3d-4d8a-aba5-a85f793d9765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:71:85:f6:42:c7:84:bb:a9:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13f4003-1e3d-4d8a-aba5-a85f793d9765
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=d4f42d61-00fc-46be-9007-4e43080b16f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2b:95:98:86:fa:2e:b7:7e:8c:61:a1:52:9b:
                    21:dd:37:ed:15:97:fb:e1:8c:41:2e:d0:83:46:a4:
                    ff:9f:9a:73:91:3d:16:f9:a3:30:c0:fc:69:42:0f:
                    24:21:ba:b2:21:2d:6b:4b:d4:63:cd:42:90:01:50:
                    30:ed:ea:ec:df:4f:db:1a:cf:c2:ee:fc:42:29:ba:
                    52:d4:ed:e4:87:fb:45:53:0a:88:59:89:1d:1a:96:
                    eb:6b:b6:95:04:0a:03:c1:65:e6:4f:c7:8a:17:b4:
                    22:f9:e1:19:2d:99:98:ee:1e:ac:7f:40:2f:da:1b:
                    67:c1:79:c0:48:68:eb:d2:d9:ef:01:2c:7e:e9:aa:
                    b1:85:53:02:0d:f7:16:21:75:f2:ca:c1:c1:bc:fb:
                    d8:9e:c1:a3:75:8e:96:65:a7:c4:7d:41:62:46:58:
                    4e:79:52:8f:37:6a:5a:0e:ae:bf:48:33:91:ef:68:
                    7c:88:43:8f:ff:c9:8c:fc:c7:aa:7b:77:7d:1a:af:
                    55:e0:4d:9c:e4:62:74:f2:fb:90:55:2f:46:29:5b:
                    9c:48:e5:e6:02:1c:61:96:8c:6f:ed:33:bd:f6:e6:
                    ff:ba:db:1f:34:98:28:3f:e1:30:af:99:a5:96:3b:
                    b8:bf:2b:6b:df:86:e3:71:8e:45:2f:5f:60:02:3e:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:69:D1:AE:CF:9F:40:AE:6F:D2:6E:FF:C9:25:5D:E4:13:53:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/fee9841b-23ee-3fd1-a71f-891d5fac3b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765/c13f4003-1e3d-4d8a-aba5-a85f793d9765.crl

            X509v3 Authority Key Identifier:
                keyid:D3:7A:26:B8:A4:99:11:AA:3A:45:6A:53:D8:A7:C5:FE:58:45:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c13f4003-1e3d-4d8a-aba5-a85f793d9765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.232.176.0/24
                  167.232.192.0/24
                  167.232.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:b0:9e:b8:3c:d6:6c:bf:ed:6a:80:4d:65:be:8c:1e:50:
         94:aa:e2:9f:d5:13:2d:cb:4f:c3:69:a3:5a:cd:68:3e:8c:98:
         11:d1:35:95:c9:5a:fd:b8:3a:a0:61:0e:1c:67:b2:08:3b:23:
         fe:2f:e3:ef:96:22:1d:c7:7f:e9:94:7a:a0:c2:cf:eb:86:80:
         4c:37:79:20:ac:80:a0:ef:73:02:d1:06:7f:5b:36:5f:26:be:
         64:1a:d5:1d:34:5c:c6:74:0b:b5:4c:57:ea:b8:87:dd:02:5a:
         00:a7:cf:88:a8:40:f8:33:64:45:b0:1c:b1:be:3b:34:70:b5:
         5e:99:01:47:1a:ef:30:97:a8:f2:47:5e:49:ba:f7:9c:5e:52:
         2c:d1:b6:6a:29:a4:ab:08:04:2e:20:39:62:11:93:0f:f1:cb:
         7a:39:7a:a0:b2:5f:d1:e6:61:e1:d2:33:07:93:b3:33:63:4e:
         66:63:7a:c7:f3:6b:b1:54:bc:ea:79:3a:3b:8e:88:0a:9a:30:
         51:bf:b8:c0:f2:41:52:71:25:26:23:06:65:25:07:2d:ae:45:
         51:76:7e:5a:9e:38:df:4f:ac:58:7e:78:45:76:ae:40:33:d2:
         54:7b:98:19:dd:c2:c9:b9:e4:af:c1:65:b6:c5:88:0a:14:58:
         db:03:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:36 2026 by rpki-client