Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/288770cd-6ea7-311e-b5de-cb0d7ebef592.roa
File:                     288770cd-6ea7-311e-b5de-cb0d7ebef592.roa (raw, json)
Hash identifier:          bL3ri70TDtnSYY4yUQ+xlCwwM2VoyezzALyC04PgmW4=
Subject key identifier:   37:CC:04:9F:F0:E6:82:7B:FD:73:45:9D:62:7D:40:39:68:F2:41:07
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584EBC771AB300C404BA177C3640
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/288770cd-6ea7-311e-b5de-cb0d7ebef592.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     11776
IP address blocks:        170.103.32.0/23 maxlen: 23
                          170.103.34.0/24 maxlen: 24
                          170.103.36.0/23 maxlen: 23
                          170.103.38.0/23 maxlen: 23
                          170.103.40.0/23 maxlen: 23
                          170.103.42.0/23 maxlen: 23
                          170.103.50.0/23 maxlen: 23
                          170.103.52.0/23 maxlen: 23
                          170.103.54.0/23 maxlen: 23
                          170.103.56.0/23 maxlen: 23
                          170.103.58.0/23 maxlen: 23
                          170.103.60.0/23 maxlen: 23
                          170.103.62.0/24 maxlen: 24
                          172.85.8.0/23 maxlen: 23
                          172.85.14.0/24 maxlen: 24
                          174.140.104.0/23 maxlen: 23
                          174.140.106.0/23 maxlen: 23
                          184.164.170.0/23 maxlen: 23
                          204.11.84.0/23 maxlen: 23
                          204.195.150.0/23 maxlen: 23
                          207.244.174.0/23 maxlen: 23
                          216.189.162.0/23 maxlen: 23
                          216.189.168.0/23 maxlen: 23
                          216.189.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:1a:b3:00:c4:04:ba:17:7c:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=bf195d2f-9b90-4a45-94b8-d0fea6f421d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a5:ac:16:91:08:54:9c:6a:bb:ac:0a:27:50:
                    65:b5:9e:3d:d7:ff:ec:63:96:76:e7:e9:5e:67:ee:
                    fe:ce:17:61:12:b4:ca:dc:7a:1c:9e:ee:11:55:4b:
                    88:a2:f1:8c:f4:a9:32:4d:35:f8:02:d8:ee:9b:ef:
                    68:09:05:19:b2:d1:1e:dc:41:41:d2:4d:80:1e:ee:
                    76:84:e3:af:55:df:49:aa:96:18:33:a1:bf:46:79:
                    88:45:f6:b0:e0:22:d8:96:17:71:79:d4:5e:46:f0:
                    35:c1:8c:64:06:c2:07:99:c7:9c:38:24:b3:85:de:
                    d5:9c:db:95:4d:91:5c:96:6d:ae:37:d5:ce:6f:ea:
                    75:dd:4b:04:41:eb:f7:35:b9:5e:56:62:97:26:6f:
                    70:5f:b0:77:00:bd:ef:90:6b:a0:10:c6:18:b5:f8:
                    85:17:79:05:57:42:e7:49:1f:5b:6b:81:87:c9:40:
                    0a:5f:4e:b2:91:88:93:4b:c9:82:08:0e:87:74:d5:
                    83:dc:ad:1b:09:2b:ee:43:39:37:06:e2:a2:06:47:
                    f0:5a:88:58:86:f5:03:ab:a3:8b:c4:69:e9:70:bd:
                    06:eb:41:6c:0c:51:c1:d7:16:b5:9b:40:7f:70:cb:
                    bb:36:9a:d2:b2:16:9d:60:44:9e:84:e7:ee:17:fd:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CC:04:9F:F0:E6:82:7B:FD:73:45:9D:62:7D:40:39:68:F2:41:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/288770cd-6ea7-311e-b5de-cb0d7ebef592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.103.32.0-170.103.34.255
                  170.103.36.0-170.103.43.255
                  170.103.50.0-170.103.62.255
                  172.85.8.0/23
                  172.85.14.0/24
                  174.140.104.0/22
                  184.164.170.0/23
                  204.11.84.0/23
                  204.195.150.0/23
                  207.244.174.0/23
                  216.189.162.0/23
                  216.189.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:8f:bb:58:bd:2d:6f:ac:a8:a4:ae:ba:f6:77:1e:e6:a8:
         27:b3:6c:4a:31:3d:12:13:4e:14:68:28:37:95:e1:60:9f:c9:
         e5:78:9a:dd:a5:28:0a:94:35:c9:74:37:ee:29:6c:8f:9d:76:
         43:dc:ef:45:87:fa:cf:e4:4e:78:9a:df:8b:94:12:ec:1d:5b:
         25:a6:db:82:5a:74:df:22:d3:f5:0c:ed:2e:2d:22:8d:7c:b9:
         9e:e0:03:a3:e3:70:e8:96:fa:5a:4f:93:e3:97:f5:75:12:be:
         d3:24:5c:4a:0c:dc:44:60:fa:10:4d:0c:b9:e1:ec:47:80:c8:
         2a:6f:83:14:7e:b3:1c:2f:a3:dd:45:f9:e7:6f:09:1e:9c:2a:
         c3:a1:20:57:6d:e4:8e:54:41:48:dc:33:f0:e1:62:77:9b:3c:
         b1:ce:3c:21:cb:2f:60:82:cd:78:b8:bb:b2:25:af:8c:b0:ea:
         d4:e6:44:22:58:9d:fe:b9:fc:35:98:ff:ca:34:5b:9d:97:2a:
         f2:1a:f3:3c:24:70:46:42:16:8d:a4:90:e7:53:66:3f:7b:2d:
         a0:2a:3d:4f:3a:32:c8:9a:17:7f:f9:99:3b:07:3f:70:a1:4a:
         d3:54:da:a7:10:86:8a:75:e9:cd:fd:c8:62:5c:73:05:d9:63:
         f5:a3:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:23:45 2026 by rpki-client