Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/d1953566-e44d-365b-b5b1-5d44e13e113b.roa
File:                     d1953566-e44d-365b-b5b1-5d44e13e113b.roa (raw, json)
Hash identifier:          GxEFSp8d7AsJTu/++1HgE+JI0fjI9ZtXzPjqUoFCE3Q=
Subject key identifier:   DB:11:06:3F:AB:18:26:F7:8B:AB:11:DD:71:4D:38:5E:91:CE:4D:E9
Certificate issuer:       /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Certificate serial:       010D0C9F4328584F7B2E8C80014FFC3783205880
Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/d1953566-e44d-365b-b5b1-5d44e13e113b.roa
Signing time:             Mon 12 Oct 2026 20:33:40 +0000
ROA not before:           Mon 12 Oct 2026 20:33:40 +0000
ROA not after:            Sun 10 Jan 2027 21:33:40 +0000
asID:                     19871
IP address blocks:        209.237.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:2e:8c:80:01:4f:fc:37:83:20:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
        Validity
            Not Before: Oct 12 20:33:40 2026 GMT
            Not After : Jan 10 21:33:40 2027 GMT
        Subject: CN=d54a8532-e9ee-4db1-b864-972ea622bd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:ad:af:fc:d3:58:bd:0a:ee:87:ef:47:7c:
                    a5:4d:e7:65:77:ec:04:0f:6f:01:7b:46:3c:4b:f1:
                    9d:8e:81:ba:3e:97:c9:a8:a9:d7:90:ac:0f:1f:9a:
                    0a:f4:20:e8:d3:fd:96:a9:b2:1b:82:4d:ef:c9:f1:
                    de:4d:31:42:7f:5d:ed:fa:59:b1:4e:29:7a:55:b4:
                    66:84:45:90:45:10:28:32:1f:b7:cc:29:27:67:03:
                    27:42:b3:3e:12:55:74:03:23:22:1d:62:b7:d7:5a:
                    f0:2a:82:6f:0f:44:da:98:94:b0:24:88:5c:c1:58:
                    f7:88:de:86:9a:7d:39:0a:cd:5c:de:dd:64:aa:ed:
                    04:7e:98:46:d8:16:77:e3:86:ac:3c:c0:3f:f2:cb:
                    64:36:c0:42:3e:37:bc:00:21:6e:a6:84:52:ef:42:
                    82:f0:c5:33:7c:f5:d5:48:23:a5:24:c1:47:46:0c:
                    83:e9:56:54:b2:a5:ff:7a:17:e2:32:59:1f:8f:b8:
                    66:52:82:5e:23:25:bf:a0:10:d9:e1:13:3f:66:78:
                    08:f5:9e:7a:11:f5:4b:fc:22:95:5c:6d:6a:06:5c:
                    d3:51:4d:93:dd:40:78:ff:ff:8e:37:51:22:27:5b:
                    38:1b:d0:39:ae:dc:26:57:aa:ab:60:48:8c:9b:b3:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:11:06:3F:AB:18:26:F7:8B:AB:11:DD:71:4D:38:5E:91:CE:4D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/d1953566-e44d-365b-b5b1-5d44e13e113b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl

            X509v3 Authority Key Identifier:
                keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:92:22:65:c9:83:97:d4:9a:ab:4e:2d:2d:09:ea:63:b4:
         2a:ea:dc:ec:ba:88:1a:c3:a9:75:10:f9:ee:5f:cd:67:20:8d:
         e4:94:01:ff:ee:b4:13:be:93:a6:e3:41:c6:43:ce:58:6c:26:
         8f:5d:2d:1d:2b:4a:c8:68:c9:e8:c6:49:5b:f2:80:b5:8c:d8:
         a6:83:f7:29:98:43:1f:e7:74:73:45:bc:9b:35:53:45:5b:26:
         68:6e:f5:e3:38:69:13:12:ef:9e:e5:a9:c7:03:25:73:b4:04:
         f4:73:f3:55:7c:51:ec:3d:d6:74:bf:45:e4:ed:40:1a:31:01:
         6d:d3:e7:39:0b:c8:8e:97:15:08:f4:91:c1:dc:1a:ad:89:3a:
         a8:1d:c0:a9:79:64:53:9f:7f:9d:19:a2:3f:84:bf:3b:5b:c9:
         72:33:3e:62:77:a7:5a:6e:15:15:1b:03:e5:32:93:54:e1:c0:
         98:b0:74:97:16:94:a2:42:61:cd:54:3e:a0:2d:5f:cc:76:fa:
         59:94:c3:fb:bb:10:c4:da:b5:60:43:c4:98:af:02:5f:6a:7f:
         84:e7:a9:0f:4c:7d:37:69:6d:97:d8:7c:9e:5b:24:3f:88:a6:
         8b:8c:fb:cf:42:58:d4:f6:73:7b:cd:40:5d:72:47:8b:db:a5:
         96:f5:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:45 2026 by rpki-client