Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5182b0a2-de62-35b6-a24e-8825acc83d08.roa
File:                     5182b0a2-de62-35b6-a24e-8825acc83d08.roa (raw, json)
Hash identifier:          MsLg+2y7SJzdpNsx+kkWIk8OpkkDQ+/JSW6/Z7uKdYs=
Subject key identifier:   0B:DD:3A:DC:5F:90:9F:58:86:4A:CE:C2:B2:73:84:5E:87:8B:46:14
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E7BCA2C2DC8F09692E3A19BC0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5182b0a2-de62-35b6-a24e-8825acc83d08.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     54994
IP address blocks:        153.43.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2c:2d:c8:f0:96:92:e3:a1:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=02ef354f-d793-4ea4-af2a-ec10e9051302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:f5:9e:64:77:51:d4:11:0e:40:7b:d6:67:
                    e1:e6:6d:bb:6b:aa:db:4f:32:4d:af:b1:d5:ee:24:
                    d2:90:e1:33:c7:0e:54:ae:8a:f8:9d:41:23:73:b0:
                    64:6b:e2:bd:ad:f7:5b:93:1e:49:f8:ad:03:1e:cb:
                    28:ef:ef:f7:63:84:06:58:1b:5e:7b:56:d3:34:38:
                    17:b6:e6:9e:42:73:6d:4f:fa:0c:bc:8c:eb:8e:77:
                    6f:c9:49:3b:5e:64:45:c6:fa:82:90:2a:0a:2d:96:
                    e6:e6:91:3e:65:41:8c:8c:0d:f5:bc:b9:f9:e9:8d:
                    ec:02:4f:ee:d8:59:51:24:17:a7:9c:da:02:4b:93:
                    14:d2:1d:09:bd:21:db:61:7b:91:98:53:18:27:84:
                    f3:1f:91:4d:24:5e:94:c3:56:12:59:c8:b1:b9:b3:
                    b3:23:57:c4:53:58:a2:a2:23:53:3c:b9:4b:eb:60:
                    11:51:1a:d5:ef:b5:33:b0:e8:48:d2:27:01:b8:ee:
                    dc:dd:82:9a:dd:4d:43:34:83:5e:60:5b:24:c6:06:
                    5d:ed:7b:3d:70:5e:1e:b9:71:37:27:14:20:15:6f:
                    a1:8b:c1:d5:04:bc:17:af:f2:b0:16:1a:d7:8c:22:
                    7b:99:c5:6f:ac:ba:1f:1f:50:3a:95:44:06:e4:16:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:3A:DC:5F:90:9F:58:86:4A:CE:C2:B2:73:84:5E:87:8B:46:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5182b0a2-de62-35b6-a24e-8825acc83d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:48:e8:07:e1:cf:7c:de:af:e9:af:48:5c:15:ea:97:ed:69:
         43:57:ab:cd:d3:35:ba:68:d5:c0:dc:f3:cb:d9:dd:e0:69:e7:
         c0:b3:b9:0c:4a:9e:ce:97:21:92:46:27:d3:03:65:70:40:ba:
         2e:61:2f:1d:db:cc:c4:ed:ec:5d:5a:82:d6:cd:fe:6f:1f:2b:
         07:29:28:5c:6e:8d:60:ae:91:d9:b2:81:17:31:3b:36:42:52:
         69:4e:f5:db:6e:51:bd:c4:9c:ca:db:32:d4:8d:b7:2b:4a:f7:
         11:2a:e5:f9:7f:fb:76:ae:6c:ee:5d:35:81:f5:06:e6:01:1e:
         b2:44:cd:f4:65:63:f1:58:a0:58:2a:05:00:45:e1:44:71:ab:
         ed:76:82:c1:31:3d:24:27:4e:56:3f:65:53:6e:0f:7c:eb:b0:
         40:53:68:ab:bc:bd:a4:6b:f3:81:55:ee:06:cf:1a:12:74:30:
         8a:fe:95:18:6b:51:18:e3:5f:4b:c5:a1:fb:17:1f:d9:69:29:
         dc:8a:ad:63:79:c0:01:fe:0c:46:d2:3c:96:49:97:f5:68:5e:
         c0:d5:4a:07:ef:02:f3:cb:df:ce:59:ad:0a:a0:b7:f7:97:6f:
         04:29:13:64:17:81:f0:e6:91:65:18:64:d7:37:4c:a9:8a:f7:
         14:05:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:44:49 2026 by rpki-client