Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/e2fa6a1e-e29d-3e3b-aa3c-c974e374a2dc.roa
File:                     e2fa6a1e-e29d-3e3b-aa3c-c974e374a2dc.roa (raw, json)
Hash identifier:          zyPVzUF2FU6etNo8XxuKtH9rfBcKioxFvpjChoBMoGk=
Subject key identifier:   5F:D8:99:F3:00:43:66:0C:C2:CC:69:C2:A6:46:76:B4:EB:B7:01:60
Certificate issuer:       /CN=0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1
Certificate serial:       010D0C9F4328584F3B7D22445B92B3D378289500
Authority key identifier: 7C:32:C4:33:EC:1A:5E:9A:5F:89:F7:D9:82:A5:C2:4D:24:F5:A7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/e2fa6a1e-e29d-3e3b-aa3c-c974e374a2dc.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     53571
IP address blocks:        199.181.154.0/24 maxlen: 24
                          204.155.96.0/24 maxlen: 24
                          204.155.97.0/24 maxlen: 24
                          204.155.98.0/24 maxlen: 24
                          204.155.99.0/24 maxlen: 24
                          204.155.100.0/24 maxlen: 24
                          204.155.101.0/24 maxlen: 24
                          204.155.102.0/24 maxlen: 24
                          204.155.103.0/24 maxlen: 24
                          204.155.104.0/24 maxlen: 24
                          204.155.108.0/24 maxlen: 24
                          204.155.109.0/24 maxlen: 24
                          204.155.110.0/24 maxlen: 24
                          204.155.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:22:44:5b:92:b3:d3:78:28:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=a70af16e-2216-4556-9efc-7fa7342873b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:69:70:4c:14:46:48:af:5e:49:6d:bf:5b:
                    92:86:be:0c:20:bc:51:b9:e0:33:97:21:db:8d:e8:
                    31:c0:f4:44:3b:0b:30:98:d1:a0:10:f0:4c:e0:cd:
                    33:fc:cf:89:97:eb:c3:76:a1:1f:e9:27:54:26:8f:
                    40:ea:69:eb:80:72:39:7c:b7:1b:39:93:dd:e2:6c:
                    93:71:b9:53:e9:13:1d:31:8b:fc:25:99:c7:02:d9:
                    d2:6c:ed:8d:d7:d1:91:c6:3b:a6:4b:ec:47:53:03:
                    67:7d:25:9e:a4:8a:ac:cd:5a:ed:2b:3c:2a:31:02:
                    18:05:16:04:21:39:f9:13:c7:9d:d6:58:8c:68:f1:
                    cc:49:a8:71:de:2c:b0:ac:06:38:b0:47:96:b2:87:
                    c2:e3:f7:8d:d9:b9:fa:0f:69:62:89:b1:79:19:9a:
                    52:35:de:76:26:6e:65:ec:e1:b8:66:70:eb:39:04:
                    5e:b7:9e:3e:85:ed:5b:54:65:29:d7:ae:d8:7f:85:
                    f4:ff:cd:69:d2:36:2e:2a:33:de:60:0a:93:fc:ec:
                    bb:9c:4f:0f:d3:f1:0e:24:9a:91:06:2a:5c:24:62:
                    f6:dd:2c:ee:b5:9b:62:3e:58:7a:34:45:47:be:9e:
                    9d:99:84:19:cb:4c:cb:b9:8d:dc:ec:a1:e1:f9:6c:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D8:99:F3:00:43:66:0C:C2:CC:69:C2:A6:46:76:B4:EB:B7:01:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/e2fa6a1e-e29d-3e3b-aa3c-c974e374a2dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.crl

            X509v3 Authority Key Identifier:
                keyid:7C:32:C4:33:EC:1A:5E:9A:5F:89:F7:D9:82:A5:C2:4D:24:F5:A7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.154.0/24
                  204.155.96.0-204.155.104.255
                  204.155.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:20:8b:23:07:2e:54:d9:24:a8:67:65:8e:e5:b8:0e:30:fe:
         a8:bb:61:8b:af:8d:04:c9:93:4c:3c:10:d1:4d:2a:4d:1f:14:
         0c:03:b9:fb:71:34:1c:ab:ac:40:1e:0b:24:75:90:61:bb:14:
         92:5a:09:84:48:ae:e9:22:dc:34:24:22:7e:74:23:78:b3:85:
         59:d3:8f:46:cb:8b:a4:ee:16:7b:89:bd:c8:61:59:f8:75:32:
         24:db:85:05:3d:1f:0c:b6:e4:68:3c:fe:bd:67:a7:cc:9c:25:
         b4:d0:be:1f:06:1a:26:06:04:cd:7d:e4:41:d6:09:fc:1c:9a:
         cb:bb:10:c6:ed:de:6c:7c:2d:8b:f6:9b:53:8f:56:6e:b6:a8:
         67:e0:48:1f:11:d3:08:5a:41:e2:bf:22:94:7f:36:30:56:be:
         f5:26:d9:05:d3:e7:2b:cd:14:a8:e8:dd:32:73:29:d7:cb:62:
         eb:2d:de:4e:3c:76:a7:62:d7:1b:2d:a9:7d:cd:19:cb:33:63:
         70:11:ce:48:5a:7d:99:cc:e6:c2:a0:2c:f0:b3:1c:de:ba:a9:
         fc:6a:85:e8:85:05:c8:06:68:ae:fb:65:a6:94:e9:ad:ac:b0:
         f3:6f:a4:35:11:68:7c:8d:51:62:f4:64:ed:97:94:85:36:f1:
         7f:05:cb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:13:42 2026 by rpki-client