Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/45eb56dc-6d37-3a59-9c2d-c76ca633df2d.roa
File:                     45eb56dc-6d37-3a59-9c2d-c76ca633df2d.roa (raw, json)
Hash identifier:          9GauMbXSYBEz0r8NW8ib6Hip24v7tEL8h862kch2ZG0=
Subject key identifier:   88:32:19:60:51:9C:DE:75:2C:5D:F5:E6:25:97:55:69:25:08:BA:FF
Certificate issuer:       /CN=47ab474f-e86e-457c-8e4f-525e473f9e01
Certificate serial:       010D0C9F4328584FA59406C56B11E53B5E748868
Authority key identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/45eb56dc-6d37-3a59-9c2d-c76ca633df2d.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     33527
IP address blocks:        170.190.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:94:06:c5:6b:11:e5:3b:5e:74:88:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ab474f-e86e-457c-8e4f-525e473f9e01
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=f6b51fdd-3b60-4708-b8ff-5339c8784315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:64:b5:d5:0a:18:4a:5b:41:79:41:a5:a7:
                    55:4e:9f:0b:3a:8a:ae:3f:8b:55:0a:04:ac:5c:ef:
                    22:93:a9:5b:7d:cc:2b:ad:71:e0:a3:98:00:d8:7f:
                    2d:3d:18:3b:48:95:c3:af:1f:e0:cc:76:af:f3:34:
                    03:ea:86:c5:0b:2a:00:38:aa:41:69:4b:18:7a:79:
                    cc:b2:46:86:af:19:60:82:ca:71:e3:76:d4:5f:5c:
                    25:7c:5a:dd:c6:bd:e1:d7:9d:f0:d2:f8:fd:08:c2:
                    78:e4:65:79:9e:08:04:d0:57:7c:40:02:d0:44:4f:
                    ff:a7:b9:5f:94:98:b6:77:df:12:01:87:f3:66:ea:
                    be:01:84:b6:e1:03:e1:35:f8:68:c7:1f:50:be:00:
                    bc:eb:98:5b:31:76:6b:9a:65:32:ab:9f:81:fb:27:
                    f5:d7:61:4c:06:d9:2a:83:fe:52:42:88:73:44:97:
                    f2:90:7f:b0:87:9c:9b:64:9a:39:7b:7c:cf:66:4e:
                    4f:73:72:bd:87:2b:94:2c:3f:1d:1c:a5:5f:61:1f:
                    25:5e:75:0b:3f:91:c4:e1:3b:37:2e:14:bd:73:59:
                    82:41:db:f3:2b:8d:e4:65:44:52:64:48:c7:56:d2:
                    3c:42:3d:19:19:b9:bb:7c:e1:04:61:8f:c5:16:e2:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:32:19:60:51:9C:DE:75:2C:5D:F5:E6:25:97:55:69:25:08:BA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/45eb56dc-6d37-3a59-9c2d-c76ca633df2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl

            X509v3 Authority Key Identifier:
                keyid:98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:b2:5a:fe:38:d5:0b:1f:c6:2b:b9:bb:e0:47:77:ba:ce:
         24:f9:33:a5:7a:f4:2a:25:c0:3b:5a:21:36:e1:3e:ce:38:f6:
         15:02:93:f2:9d:3a:73:19:ce:68:79:16:b7:12:42:94:14:c5:
         93:16:0d:fb:9d:91:33:53:87:07:10:c5:a4:9b:c0:13:9a:63:
         97:cc:b7:13:7d:19:71:ed:aa:04:47:26:fe:91:b5:ca:be:62:
         35:79:65:1c:86:6d:c0:9f:73:ea:e1:dc:76:2b:a8:1d:6b:4e:
         fa:02:83:23:b6:fd:cf:aa:ab:ec:74:ad:e5:f6:10:05:de:fe:
         26:e6:a9:8e:f2:09:b9:cc:47:28:41:b5:74:ef:06:bb:a8:74:
         ca:72:24:3a:b4:18:db:7c:73:85:18:c1:d6:8b:59:16:f4:f5:
         d9:ef:fc:3e:33:66:55:74:33:ec:48:61:17:db:1f:db:af:48:
         c0:d3:6c:51:df:5e:37:d0:aa:57:13:46:4c:fe:01:1c:13:77:
         6f:e2:cf:f2:19:32:cc:3f:f4:ba:2e:d7:2a:0d:95:80:a7:e0:
         73:8e:22:df:3c:3d:e6:a0:57:83:77:fc:43:55:78:c9:53:c4:
         9d:b7:35:f5:cd:29:e2:a2:05:14:c0:97:89:7c:25:cf:ed:45:
         b3:b9:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:53:47 2026 by rpki-client