Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/255a5d34-d708-3653-9e93-a407fa76a653.roa
File:                     255a5d34-d708-3653-9e93-a407fa76a653.roa (raw, json)
Hash identifier:          27F/X5SG3WlMx2z67JyV9kZaVcF0Z3eQ593MPhpzy8w=
Subject key identifier:   9C:BE:7B:9B:B0:3B:2C:7F:41:84:AB:18:22:8D:44:E6:80:75:25:87
Certificate issuer:       /CN=069a90ae-715f-499e-a4f2-06581ebf1247
Certificate serial:       010D0C9F4328584F9F8C6DF902F46B54F451B686
Authority key identifier: E4:23:D8:E4:F2:E0:CD:93:BF:B0:52:C1:13:C3:99:5F:E5:C1:77:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/255a5d34-d708-3653-9e93-a407fa76a653.roa
Signing time:             Sun 25 Oct 2026 21:11:56 +0000
ROA not before:           Sun 25 Oct 2026 21:11:56 +0000
ROA not after:            Sat 23 Jan 2027 22:11:56 +0000
asID:                     10753
IP address blocks:        104.153.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:8c:6d:f9:02:f4:6b:54:f4:51:b6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069a90ae-715f-499e-a4f2-06581ebf1247
        Validity
            Not Before: Oct 25 21:11:56 2026 GMT
            Not After : Jan 23 22:11:56 2027 GMT
        Subject: CN=9273b2a1-af2c-43c3-898e-bb3ce898933c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:f6:39:7d:91:e1:33:b6:6f:e0:cf:4f:ca:
                    be:3d:23:92:86:07:c0:07:96:5f:ae:d0:db:0e:60:
                    ab:34:95:23:40:e5:f3:74:95:87:64:f3:90:cc:1a:
                    ac:04:37:ea:cc:d3:3e:ff:00:03:94:d6:f7:ef:be:
                    4a:fa:8b:ee:93:c2:c7:ac:49:71:f2:d7:6b:ff:50:
                    64:9c:10:ce:d4:52:2a:43:19:bc:0b:58:28:72:a2:
                    27:2f:12:02:d7:09:4d:9e:0e:8b:6a:74:e5:d7:5f:
                    2e:9a:8e:19:93:c1:78:79:41:61:e3:0c:49:3d:3f:
                    3e:b3:64:12:33:6e:b6:d3:2e:73:86:5b:c1:2e:27:
                    9a:00:6c:79:e4:4d:db:78:46:c0:5f:d3:13:87:a4:
                    4d:46:93:bf:20:01:2c:d1:2d:9d:ec:34:18:36:cb:
                    c5:32:d8:9b:91:60:56:3b:c0:ae:17:c0:1e:4c:25:
                    f3:f2:6a:7a:74:3c:3b:bf:52:35:36:b2:ac:b5:a9:
                    8d:5e:75:d5:46:63:d6:9e:fc:d3:8f:05:49:2e:94:
                    25:ce:6d:fc:a7:40:04:30:7e:81:43:ef:d9:67:82:
                    db:0c:65:b8:9f:25:19:d5:29:ca:40:71:a9:ae:09:
                    60:c7:d2:1c:0f:9f:f3:75:5d:91:ff:1e:f8:65:f3:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BE:7B:9B:B0:3B:2C:7F:41:84:AB:18:22:8D:44:E6:80:75:25:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/255a5d34-d708-3653-9e93-a407fa76a653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.crl

            X509v3 Authority Key Identifier:
                keyid:E4:23:D8:E4:F2:E0:CD:93:BF:B0:52:C1:13:C3:99:5F:E5:C1:77:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:96:35:c0:f6:fc:71:1a:2b:82:54:50:39:9f:ff:75:6f:
         1f:2d:ca:51:b9:79:fb:c9:c1:eb:81:d9:80:22:31:ad:05:5d:
         fe:21:8b:4d:2e:b6:b2:27:c0:ff:8b:a3:8f:73:05:1e:e2:e7:
         45:1d:7e:3d:64:9c:27:af:2d:9c:19:89:5f:c7:08:d1:3b:67:
         37:0e:b8:5a:10:09:81:13:42:d7:dc:c2:33:78:f0:7f:5b:a3:
         58:23:9a:eb:cf:7a:30:63:8f:69:34:fe:11:2d:ca:65:41:8e:
         a8:f1:ed:e2:fd:a7:6a:94:46:71:2b:b5:2f:d6:fb:ab:9e:1a:
         13:8b:af:10:71:93:6f:b9:9a:36:40:d4:79:14:ca:ba:4c:53:
         ee:0f:d7:ca:52:3a:8f:ff:3c:ef:01:fe:dd:02:5e:99:a1:76:
         c0:b1:70:2e:b9:0e:74:c1:18:6d:63:a7:0f:16:a9:e0:83:20:
         bd:5e:47:be:7f:2e:0e:3c:4a:31:82:7f:ef:1f:7b:89:e2:57:
         f3:1b:bb:83:d7:98:4f:e5:7d:13:8f:06:9e:db:25:7e:84:b7:
         17:dd:d1:2b:39:76:72:93:43:2f:82:8f:e6:1b:f5:db:b5:4a:
         59:bd:d8:20:d1:a4:29:19:51:e4:11:32:7f:69:bf:ca:8a:c6:
         81:30:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:53 2026 by rpki-client