Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106/500371ab-b3c5-3acc-9886-3ade884fc01b.roa
File:                     500371ab-b3c5-3acc-9886-3ade884fc01b.roa (raw, json)
Hash identifier:          w6++5PP8T2L4y6F1LhzF+c54H+htcHc1kinozrqLhv4=
Subject key identifier:   64:75:D5:D8:D1:52:93:D5:3F:95:4E:48:83:2F:46:11:FB:77:C9:FD
Certificate issuer:       /CN=e911a92f-bd28-4e12-b63c-c6708ac1d106
Certificate serial:       010D0C9F4328584D33090E9031AD993F2E8991D8
Authority key identifier: 44:50:BF:DC:70:D8:7B:8C:58:57:59:E4:A0:F3:01:A3:E2:33:19:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106/500371ab-b3c5-3acc-9886-3ade884fc01b.roa
Signing time:             Tue 17 Mar 2026 14:46:03 +0000
ROA not before:           Tue 17 Mar 2026 14:46:03 +0000
ROA not after:            Mon 15 Jun 2026 14:46:03 +0000
asID:                     16509
IP address blocks:        162.117.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106/e911a92f-bd28-4e12-b63c-c6708ac1d106.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106/e911a92f-bd28-4e12-b63c-c6708ac1d106.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:09:0e:90:31:ad:99:3f:2e:89:91:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e911a92f-bd28-4e12-b63c-c6708ac1d106
        Validity
            Not Before: Mar 17 14:46:03 2026 GMT
            Not After : Jun 15 14:46:03 2026 GMT
        Subject: CN=c6d47e26-c6df-497e-8b13-96534d491269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:79:f5:6f:2b:6d:44:dc:69:4a:d4:0e:4a:
                    2f:85:16:bb:0d:d8:f1:49:62:6b:33:dd:0f:97:62:
                    40:c0:1f:96:c3:e1:56:e2:ed:35:6f:75:b4:38:08:
                    a3:7e:62:8c:57:50:80:8a:a1:db:3c:36:20:f8:fa:
                    03:d4:a9:19:61:27:97:34:c5:c7:da:5c:59:bb:e2:
                    39:ae:7f:bb:f8:5d:23:60:81:dd:76:47:b0:2d:dc:
                    15:ef:b8:f1:a1:11:32:34:1c:5f:f3:03:a4:de:93:
                    e9:f8:a6:f2:f1:3f:17:a0:ad:93:e0:d5:15:77:73:
                    58:be:a3:4e:80:86:5a:40:69:95:ee:17:a1:42:db:
                    fd:b5:09:ae:cb:ad:c5:d2:7d:a9:2a:a2:d5:f0:4f:
                    5d:0d:74:c4:7a:18:cf:d7:76:e5:f2:b0:b5:02:13:
                    27:62:b6:e3:28:55:d5:7d:92:c8:65:fc:59:a5:c3:
                    6f:e7:dd:98:59:0e:cb:91:de:1f:ab:16:c0:62:9e:
                    c3:ba:0b:dc:00:80:ce:b1:fd:cc:3e:55:d3:b6:d6:
                    f1:6f:cb:61:c2:7f:fa:ba:63:ae:10:77:f3:76:32:
                    2b:15:66:c5:9b:80:4e:5a:87:fc:73:74:41:a6:6f:
                    e7:da:c0:25:7e:e0:b6:de:8f:dc:a8:be:b8:f6:4b:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:75:D5:D8:D1:52:93:D5:3F:95:4E:48:83:2F:46:11:FB:77:C9:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106/500371ab-b3c5-3acc-9886-3ade884fc01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106/e911a92f-bd28-4e12-b63c-c6708ac1d106.crl

            X509v3 Authority Key Identifier:
                keyid:44:50:BF:DC:70:D8:7B:8C:58:57:59:E4:A0:F3:01:A3:E2:33:19:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e911a92f-bd28-4e12-b63c-c6708ac1d106.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.117.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:ed:ca:2c:6e:69:66:d5:c8:aa:ae:9a:41:65:a2:b7:21:
         31:a1:37:95:7f:e6:df:4b:2f:95:6f:25:37:cd:c0:fe:8f:fc:
         d8:d8:7c:c2:9c:19:3f:aa:cb:db:3e:4f:63:37:cb:90:e3:e1:
         4b:53:42:9a:f0:84:3a:2a:b7:27:36:53:1d:c4:eb:8f:d6:39:
         2d:05:28:94:37:33:eb:96:55:e3:a5:46:21:71:eb:59:c0:e4:
         92:8c:17:d1:25:b6:40:35:94:e0:70:84:b0:b6:a4:dc:c2:3a:
         d0:9a:09:e5:e1:07:a3:28:81:79:65:53:88:6e:6e:70:0e:c7:
         2a:33:58:66:4b:c5:da:a3:8f:1f:ec:bb:72:49:ac:55:c4:1b:
         44:58:2e:e8:44:65:4d:89:79:42:1a:1f:1c:20:51:25:8c:06:
         18:5f:89:22:d5:50:4e:cf:9c:5d:c7:51:11:16:1b:57:bd:64:
         08:7d:96:2d:70:db:66:31:8f:1e:bd:73:40:fc:22:48:d3:60:
         ed:ab:3f:a0:bc:b6:f1:16:af:34:3c:e8:76:ff:41:7d:03:b3:
         5d:84:0f:64:38:50:e3:f1:ac:40:57:52:be:a7:ce:64:67:85:
         39:03:f0:69:fc:76:53:03:24:d9:30:91:6f:82:be:41:64:26:
         4a:b8:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:09 2026 by rpki-client