Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/54f00001-cb3b-3638-b2cf-aa7c27fad3db.roa
File:                     54f00001-cb3b-3638-b2cf-aa7c27fad3db.roa (raw, json)
Hash identifier:          xZv1iXaL6dhZNCktGCmCYeRX2r7EjVOf1q9uhNYBhGY=
Subject key identifier:   9D:C8:15:25:4F:9E:01:14:0A:2D:E9:DD:E7:33:23:20:C7:5E:EF:6A
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584ECBD1EBBD8CE015F2B268F180
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/54f00001-cb3b-3638-b2cf-aa7c27fad3db.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     14555
IP address blocks:        162.210.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:eb:bd:8c:e0:15:f2:b2:68:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=03457501-bb4a-4e59-808a-890d76883d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:33:40:31:57:a9:6e:07:75:26:f8:f6:27:
                    e6:92:0c:10:b2:0b:48:65:9d:ae:19:c9:19:f6:04:
                    cc:eb:44:7f:91:7d:7d:ad:a8:04:4f:83:55:c9:f3:
                    7d:07:24:31:8d:17:0d:ab:c6:8a:66:e2:31:e1:54:
                    f4:5b:5f:09:2e:6f:62:81:1e:47:af:f5:27:ba:05:
                    38:53:c1:fe:85:ae:7f:ea:ba:c5:63:37:d0:73:10:
                    ad:37:74:da:12:bf:6d:9e:a0:b8:8e:f2:bb:d2:85:
                    d2:99:74:fa:64:7c:c4:68:9b:4d:87:be:ee:f1:85:
                    c7:77:bc:d0:b6:75:47:df:ea:44:c1:84:91:90:b1:
                    b3:cd:5b:6a:fa:4a:92:9f:1d:c1:3c:53:88:4f:f2:
                    fa:0c:9c:b6:d8:eb:53:dc:ed:44:98:96:1c:99:40:
                    d2:6c:03:16:02:52:f3:da:b2:17:4f:42:c4:2a:77:
                    14:ec:b1:ae:ed:a0:70:6c:7c:ea:84:66:ed:8c:0f:
                    30:ce:1b:73:ba:bb:17:9d:eb:3b:6c:85:f0:59:51:
                    9d:d5:3b:9b:4b:5c:15:a2:4f:f4:01:e4:96:fa:72:
                    33:77:74:ad:72:b0:c0:c5:40:f3:dd:81:66:31:d8:
                    dd:ef:95:2d:f1:fa:ab:38:78:a1:fa:77:2e:08:6b:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C8:15:25:4F:9E:01:14:0A:2D:E9:DD:E7:33:23:20:C7:5E:EF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/54f00001-cb3b-3638-b2cf-aa7c27fad3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:fe:75:55:12:4b:b9:76:0d:24:1b:82:4d:cb:27:d2:c2:
         8e:c9:d4:b2:c6:59:9d:27:1d:ec:3d:7c:ce:29:6a:e4:8f:99:
         fc:de:18:41:9e:be:1f:74:18:91:5d:6e:d9:09:99:bc:b9:5c:
         5d:bc:24:0a:98:14:aa:36:4c:5a:3c:e2:7a:80:1f:b2:7e:51:
         f8:82:04:d3:19:a2:19:dc:1a:5b:d2:62:59:a0:9d:42:00:38:
         10:bb:7c:88:77:f5:93:46:54:c5:bd:3f:fe:5c:67:14:78:51:
         e4:9a:53:f7:d0:6c:02:4f:b7:4c:e6:ee:cd:37:6a:ae:6c:5e:
         b8:fc:b6:bc:3e:6a:64:29:aa:bd:97:54:93:67:7c:ad:db:1b:
         1f:77:12:e5:fd:13:0d:2e:5e:b3:3a:e5:01:e4:48:9c:3c:fb:
         79:6a:b1:e1:8c:79:05:0e:52:6f:59:84:70:4e:96:13:7a:6b:
         90:cd:09:6f:0f:1e:26:5e:58:6d:89:9f:4c:70:a9:75:a3:2b:
         7b:61:9c:93:93:c1:09:9c:be:de:44:ef:17:0e:57:b1:f1:67:
         9a:fd:56:cc:90:9b:dc:a2:b3:eb:c1:3d:65:02:fa:71:1e:0b:
         a4:1f:06:42:b6:6c:b0:61:7b:ab:e2:8d:62:a1:23:7b:8d:2d:
         01:56:63:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:23:15 2026 by rpki-client