Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/453f3634-3390-3a9b-bb57-4876078f1e27.roa
File:                     453f3634-3390-3a9b-bb57-4876078f1e27.roa (raw, json)
Hash identifier:          gYU1YOOq0GNKwGmXCI4Shh+C8RtQb6FqFmRRtCStQWk=
Subject key identifier:   7D:97:4E:66:08:10:A7:E6:63:45:4A:9C:54:52:82:DD:11:F8:91:E0
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EC7A1C4BD93E921A656AF9500
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/453f3634-3390-3a9b-bb57-4876078f1e27.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     3573
IP address blocks:        144.36.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c4:bd:93:e9:21:a6:56:af:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=3d6cb8c9-6236-4c0f-a463-45d2a2787a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:fe:6b:7b:17:76:19:e6:0b:e6:9b:96:a5:
                    b8:da:e8:40:26:7a:77:2b:62:fc:e5:84:f9:d0:7e:
                    1a:13:00:41:ca:4e:85:c3:e0:af:da:44:04:22:84:
                    21:2b:4f:ec:0d:c6:a7:58:d4:df:15:4a:0d:4c:75:
                    2b:ca:ec:ff:67:a8:ec:f7:83:50:d6:05:da:1a:35:
                    96:36:82:b5:35:7c:e8:9d:b8:4e:a5:87:92:c6:5e:
                    77:ed:69:0a:cf:1d:f3:35:c1:b9:9e:f5:5f:8b:0c:
                    7e:64:22:48:b3:9c:ec:01:74:12:aa:04:88:e9:a7:
                    1c:58:e3:64:60:01:13:e4:cb:c3:96:ae:ea:b1:10:
                    0f:c2:24:1a:ab:4d:46:0f:c2:b1:b5:b3:a7:c2:91:
                    c0:6d:cd:de:96:80:51:8f:90:b7:a0:ee:27:2c:2f:
                    b1:3a:2d:4b:e9:80:a8:70:02:44:5c:c3:20:fb:7f:
                    ba:6d:2b:60:bd:16:c5:bb:aa:42:4b:87:f6:df:6a:
                    54:9c:0c:c3:c2:f6:b4:a2:14:59:ce:2d:e6:2a:1f:
                    f2:72:da:29:a6:52:75:88:17:34:91:f2:89:d2:ba:
                    58:80:87:6f:34:e5:ef:b8:36:4d:61:ef:14:5a:a1:
                    01:e6:db:38:3c:56:b9:11:b5:18:da:e2:70:e3:75:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:97:4E:66:08:10:A7:E6:63:45:4A:9C:54:52:82:DD:11:F8:91:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/453f3634-3390-3a9b-bb57-4876078f1e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:83:a2:c7:1f:f7:5d:d7:38:73:f7:45:0d:f7:e4:d1:98:94:
         7b:06:38:ff:23:dc:c0:86:d7:b3:98:c9:cd:cc:20:b2:4a:27:
         87:53:ef:26:90:d0:d3:04:43:48:7c:94:cc:5a:ae:d7:39:ad:
         a5:73:bc:44:6a:d5:84:21:6e:6c:58:28:9e:e6:a2:c2:3d:e0:
         4c:c6:17:bf:b7:d0:0b:bc:40:a5:06:84:6c:f9:9f:00:b2:10:
         3b:78:e6:b2:ad:3f:ed:fc:96:89:30:32:28:aa:6e:fe:94:ad:
         4a:06:f4:ce:d0:ae:b5:82:2c:35:c7:7d:40:9b:69:25:13:71:
         5e:48:a9:03:43:5c:13:9b:fe:5c:83:b2:43:8b:cf:4e:e5:1a:
         29:9d:ac:98:f7:6a:23:38:04:50:6c:29:ae:71:d3:81:6a:4a:
         cd:6b:5b:84:12:7e:80:1e:51:de:cb:96:a4:86:42:0e:63:4c:
         43:91:3b:62:b7:1f:73:e2:97:41:b9:13:18:4b:f9:98:b5:5c:
         4c:bf:d8:da:23:d0:8d:75:b4:df:40:d2:be:89:0c:47:3f:4a:
         eb:1e:bb:f1:66:fd:82:6b:b7:5e:d3:1e:36:2d:1c:cf:70:79:
         b0:78:38:01:0f:3c:1f:05:29:ab:8d:90:f9:c2:b7:fe:d6:6f:
         c6:b6:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 14:38:25 2026 by rpki-client