Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/02ad4375-279c-3715-afda-9a076e793046.roa
File:                     02ad4375-279c-3715-afda-9a076e793046.roa (raw, json)
Hash identifier:          XiqM9hpk7pyFfteZibWOFrL7SmEnLi2kCjFYmApL3R8=
Subject key identifier:   29:F9:09:1C:E4:E4:06:F1:2E:47:39:C8:3B:20:4A:EC:41:80:74:47
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584E878D72FC70819278BC386100
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/02ad4375-279c-3715-afda-9a076e793046.roa
Signing time:             Fri 17 Jul 2026 14:07:39 +0000
ROA not before:           Fri 17 Jul 2026 14:07:39 +0000
ROA not after:            Thu 15 Oct 2026 14:07:39 +0000
asID:                     10279
IP address blocks:        164.153.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:8d:72:fc:70:81:92:78:bc:38:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Jul 17 14:07:39 2026 GMT
            Not After : Oct 15 14:07:39 2026 GMT
        Subject: CN=f12efa50-489d-47eb-b446-21fb3b4ce53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:11:ad:74:73:01:2a:52:7b:cc:19:7a:d7:
                    3a:6c:1b:25:c8:32:e8:17:da:b3:2f:f7:93:14:6e:
                    64:b8:dd:e3:c2:c0:32:de:f8:9a:d3:e2:fa:e8:95:
                    9e:7b:3b:b0:11:b7:d1:14:f0:24:95:b5:05:7e:82:
                    36:46:1b:73:ec:b8:4f:90:4c:69:04:05:84:f0:8d:
                    9a:bb:95:39:89:7d:93:02:b2:f3:ec:0e:21:c4:21:
                    2d:a8:e8:8d:e1:75:94:f8:0c:27:4c:8f:91:82:ac:
                    a1:fa:67:d2:75:2f:d2:37:5c:e0:ed:c6:1c:84:ca:
                    3b:76:8b:da:a8:49:6e:f0:87:57:95:70:d4:d1:2f:
                    63:9e:48:34:d1:e3:d0:86:11:87:35:6c:fe:36:0b:
                    4e:84:52:cd:17:18:77:38:41:0a:84:db:3a:4e:bf:
                    8c:7c:35:4e:11:33:cf:a0:1c:56:27:3d:9e:60:16:
                    3d:15:de:03:aa:2e:9a:f2:3c:54:2b:15:ed:30:16:
                    c6:3c:67:17:99:6d:96:3e:65:dc:36:c1:12:62:25:
                    5d:08:9b:2f:b3:85:a7:96:10:89:25:2e:95:4c:4a:
                    57:6b:2b:af:d1:f7:54:3e:2f:a2:d4:a7:0b:f9:ba:
                    5f:6b:92:de:b1:22:7d:8c:df:1e:20:38:d1:ae:ae:
                    f3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F9:09:1C:E4:E4:06:F1:2E:47:39:C8:3B:20:4A:EC:41:80:74:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/02ad4375-279c-3715-afda-9a076e793046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d2:81:80:b1:28:e5:55:49:69:64:66:9a:6d:79:b0:27:59:
         de:be:34:ab:66:1a:7d:4f:09:a8:30:68:45:4c:54:14:19:ff:
         48:94:20:9c:00:fd:93:02:49:03:71:eb:11:59:13:f0:54:81:
         11:6f:4e:26:dd:0b:52:30:27:92:a5:ed:c9:a6:28:4a:68:31:
         61:7a:b0:bb:f0:ad:7e:b3:f3:bb:10:f6:fa:0a:40:67:36:58:
         39:51:08:dd:0b:8d:8a:4e:ec:5c:e2:8d:bd:47:5e:5c:39:08:
         27:0d:03:f5:5f:d2:c5:04:2a:2d:85:09:16:10:93:5f:72:c6:
         ad:eb:0e:d2:67:87:5d:73:d0:aa:2d:16:b4:10:d7:26:13:ee:
         59:40:19:96:ba:b3:c6:51:f0:4c:28:2f:50:2d:42:7d:af:bb:
         46:f4:33:b4:0b:08:40:b5:7b:6b:ca:b1:6f:7d:dc:09:99:20:
         56:80:ad:62:d2:b6:4e:20:05:ef:49:0d:e0:19:57:27:6b:8b:
         38:41:bc:78:ac:b3:1a:02:1f:1e:a8:6b:80:57:26:e3:e9:92:
         ed:17:a2:99:74:e2:86:08:1e:4c:ed:5a:3b:ac:14:ec:62:dc:
         51:61:e5:81:06:7a:54:e9:c8:cd:57:8c:43:d1:0e:bf:ee:80:
         93:97:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:55 2026 by rpki-client