Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8dd43141-ba8b-3af3-a7de-55bcd30512aa.roa
File:                     8dd43141-ba8b-3af3-a7de-55bcd30512aa.roa (raw, json)
Hash identifier:          u3Du8sHyWkQy38WHuhj9m+BB5WfY4sy7fbAzhY/oh20=
Subject key identifier:   30:B4:61:F1:B1:31:32:7B:82:A3:7F:2A:1B:63:2A:C9:02:50:22:F7
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F9638602E309A09F114658C80
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8dd43141-ba8b-3af3-a7de-55bcd30512aa.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     54994
IP address blocks:        153.43.133.0/24 maxlen: 24
                          153.43.134.0/24 maxlen: 24
                          153.43.135.0/24 maxlen: 24
                          153.43.136.0/24 maxlen: 24
                          153.43.137.0/24 maxlen: 24
                          153.43.138.0/24 maxlen: 24
                          153.43.139.0/24 maxlen: 24
                          153.43.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:60:2e:30:9a:09:f1:14:65:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=d2026146-32ef-440a-a77c-70bf2378b135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:56:70:3c:5a:27:ee:b1:3d:52:79:01:80:
                    9a:85:92:d2:de:e1:c6:89:d3:74:29:98:70:b9:d0:
                    f5:8c:1a:c2:6e:b6:e3:37:31:27:ad:79:8c:88:5b:
                    34:41:83:4f:f6:bf:33:e4:9a:f3:32:d0:64:8b:e9:
                    74:35:11:9a:22:2d:14:d0:dc:5d:26:4d:68:3e:84:
                    27:d6:5a:02:27:c6:df:af:b1:3d:a5:eb:97:3b:c5:
                    7b:af:69:03:ca:bc:e2:15:01:dc:a4:9c:85:e0:94:
                    2f:68:4a:50:29:1e:ba:4f:27:43:21:ff:2c:29:7d:
                    47:6d:c8:4b:d2:5e:b2:ed:e9:50:0d:eb:bb:1c:e2:
                    e2:a9:f8:34:48:42:c1:69:91:11:1f:40:b2:11:3b:
                    61:0c:cc:4a:20:d9:e2:b2:dd:54:dc:38:d4:88:50:
                    7e:c1:08:11:6e:ed:ad:06:69:b8:a8:b1:99:5a:28:
                    46:70:44:10:9f:55:df:ad:d0:9c:10:a2:63:bd:0e:
                    fe:84:52:7f:e5:da:22:9f:d1:5e:7d:e2:ed:57:ab:
                    4f:de:d7:70:5c:06:e0:0d:84:1f:f1:58:0b:21:2a:
                    d1:2f:17:56:b3:98:ce:ed:27:e9:4d:c0:98:19:0e:
                    65:46:3a:f0:70:00:8f:e6:6e:13:77:ae:6a:b3:4c:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B4:61:F1:B1:31:32:7B:82:A3:7F:2A:1B:63:2A:C9:02:50:22:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8dd43141-ba8b-3af3-a7de-55bcd30512aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.133.0-153.43.140.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:fc:71:6e:ab:13:3e:79:dc:13:d8:73:9d:cd:38:ec:7d:
         75:7a:b3:44:47:f5:8d:dd:fa:2c:6e:79:fe:75:4d:7a:b3:09:
         79:52:a3:7c:0a:db:39:f7:46:35:cc:d4:de:1c:cb:38:22:1e:
         c7:92:9f:dc:c8:50:5a:85:41:0c:72:36:18:3e:e7:a9:11:ba:
         60:b7:5c:ab:1e:bb:37:90:5e:67:18:16:db:f9:58:cb:ee:f9:
         d3:58:54:60:82:a6:54:3e:1f:c9:99:60:89:6b:14:58:46:3c:
         d7:d6:ed:91:e8:3b:0c:fd:ec:26:ae:7d:65:47:6f:a0:71:4b:
         5b:9c:54:77:7c:21:7a:5f:16:2b:0d:0c:99:d6:86:2f:41:d1:
         f2:90:d5:e9:7c:eb:65:34:3d:7a:b3:00:ab:44:6e:4b:5e:06:
         29:b7:c8:4e:a2:ba:21:08:22:0a:41:23:8d:38:ff:48:5c:e3:
         41:d6:65:80:2d:f5:85:ad:d2:b3:6c:a4:a6:35:e4:b8:80:f0:
         6d:45:16:68:c3:76:e8:0c:ec:96:ed:25:8d:ae:52:e8:c7:d6:
         c9:aa:40:ce:d0:a8:8b:8c:98:4f:a4:0d:82:39:3e:85:cb:32:
         98:fa:1e:74:d1:d2:5e:3e:78:07:ce:39:d4:b1:e1:2e:ef:b3:
         03:79:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:45:57 2026 by rpki-client