Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa
File:                     0b9c6ff5-d158-396b-adb7-de82805ec20c.roa (raw, json)
Hash identifier:          Y8aX7O3UE9gQ5Ga96VocNlRV9bz7a8kys24mZevqeDE=
Subject key identifier:   45:3C:45:0A:C8:AC:73:AD:0B:42:45:32:48:FF:AA:13:C2:4A:6D:DC
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584F374D2F9DAF82420ED5E40340
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     393653
IP address blocks:        104.128.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:2f:9d:af:82:42:0e:d5:e4:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=29519841-f640-464e-a4b0-739c7666b8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:8f:6e:1e:9d:56:26:d6:d2:b3:28:9d:90:
                    32:e3:8e:10:90:e0:d1:19:21:db:65:28:a0:f7:f7:
                    01:5b:07:6c:0f:f4:b1:43:1a:52:03:7c:41:5a:9f:
                    62:0c:bb:c3:fc:03:20:ed:4f:20:68:24:5e:19:d3:
                    e4:5a:77:82:7e:de:5e:12:95:3c:de:b7:72:82:9f:
                    d2:e7:27:e9:de:fc:98:d8:b7:10:d8:37:49:ed:f3:
                    7b:8b:f2:31:45:55:4d:90:a5:4e:b9:f4:6b:03:14:
                    1b:78:7c:8a:28:84:69:56:41:a3:8e:fe:27:26:87:
                    2d:22:55:ee:68:5a:de:45:78:ba:76:04:10:44:ad:
                    0c:e5:31:bf:12:c4:be:d6:4c:b2:10:82:ce:a1:73:
                    13:c3:e7:14:b0:15:17:3e:67:b5:2b:27:ad:51:94:
                    1d:76:5e:bd:b6:f6:97:cc:f9:d2:40:23:c5:a6:06:
                    31:94:ae:25:19:8b:25:e3:dc:a2:09:bb:38:3d:3e:
                    c2:fc:f7:49:75:3f:29:f0:e8:de:1f:ad:b0:1d:84:
                    77:0e:a3:43:09:53:40:43:a1:ed:ae:36:42:13:bb:
                    22:66:c2:a6:51:81:9c:3d:79:53:db:3f:ea:20:5e:
                    7b:fc:cd:1b:e2:0b:9f:eb:f8:64:c5:08:f6:5e:88:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3C:45:0A:C8:AC:73:AD:0B:42:45:32:48:FF:AA:13:C2:4A:6D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/0b9c6ff5-d158-396b-adb7-de82805ec20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:df:12:0a:2c:e4:8e:1a:8e:15:4e:f6:8d:2c:75:df:ad:45:
         66:d8:a5:bb:9b:35:06:8b:1d:16:6e:b1:8c:19:e7:12:dd:01:
         d3:a8:48:d9:71:41:4e:94:9e:fb:5d:12:5d:00:ff:fe:14:6c:
         b3:45:01:65:11:a1:cc:42:15:52:c7:91:8a:35:1b:b1:8a:1d:
         57:83:bd:e8:68:33:ab:f5:ef:ae:9e:25:e0:2b:5a:12:6c:c6:
         d9:16:3e:89:25:7f:87:db:d6:74:f4:12:72:90:b9:94:73:d0:
         bf:25:ac:4b:f9:c3:8f:62:d3:3c:87:12:21:ca:a9:45:bc:d9:
         50:c4:88:33:d6:a2:d9:df:1c:67:fa:7b:c7:f5:50:95:a5:ba:
         15:ef:6f:de:c9:8c:40:cb:bc:b9:70:73:2e:00:d9:4c:b4:3c:
         a1:26:aa:c2:70:a2:b8:ee:ca:39:2b:4a:47:84:22:ba:c6:42:
         4a:4a:33:ab:f6:f1:cc:b4:a9:cf:6e:3e:e7:1d:a8:4a:77:77:
         45:10:9e:0a:b7:d4:2b:1e:a1:42:c3:78:1e:b9:0f:72:87:97:
         a6:13:25:5c:a4:08:03:81:33:08:a5:23:13:db:d2:42:6f:0b:
         3b:56:9f:04:5d:42:bf:17:27:c9:69:7a:dd:e1:dd:e5:ad:b0:
         d7:fa:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:25:47 2026 by rpki-client