Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa
File:                     2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa (raw, json)
Hash identifier:          WgyJAWo7lVIBMbsE9YvpKMIzPAYfkAq/rGVUiMyhCqQ=
Subject key identifier:   C7:BB:98:AC:41:35:D1:E4:EC:68:20:D2:B1:5C:1D:29:29:61:73:D6
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F4328584E4AEF4A4672E9935F087B0AC0
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     53991
IP address blocks:        164.152.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4a:46:72:e9:93:5f:08:7b:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=b92b89e4-41fb-4160-9494-2c4f6085524f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:fe:77:70:78:fd:87:02:61:6a:f4:8e:ca:
                    32:58:32:c4:3e:be:85:d5:98:ad:ef:e6:41:51:c2:
                    92:33:a0:ae:bc:48:3d:5d:74:b9:fa:e4:19:dc:86:
                    6d:c5:a1:3c:c3:72:0a:38:e2:ca:5a:8a:a4:52:7b:
                    c7:22:de:24:a0:3e:cc:b6:d8:06:72:f7:bf:eb:21:
                    c0:d0:df:b6:04:45:8d:8c:d3:32:12:a3:8a:fd:25:
                    b0:26:84:98:88:f8:e3:06:02:b2:44:29:bd:3f:52:
                    53:d9:50:bd:7e:0b:41:41:7a:7b:ed:0b:cf:25:b5:
                    51:df:44:ad:05:b7:c4:b5:b4:40:2a:d4:30:6d:73:
                    89:92:c1:9a:b3:18:7a:62:64:57:9b:95:7c:84:57:
                    aa:d8:f1:41:bc:d3:ed:fa:55:fc:b3:da:49:42:8e:
                    4a:dd:c4:60:19:7e:48:68:60:8f:6e:7d:fa:5b:70:
                    a3:be:5f:12:ae:3f:26:9a:4d:e6:34:01:85:4f:f6:
                    3f:c2:bf:70:a1:07:24:35:41:ec:55:5a:e7:03:22:
                    8a:ac:a9:3e:75:e4:34:84:e1:8b:fb:a4:5a:56:ac:
                    5e:d6:74:e4:51:b2:c5:c8:cb:06:58:24:ee:36:66:
                    75:6d:e2:56:6c:67:2e:f6:66:1c:37:a4:7f:ab:74:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BB:98:AC:41:35:D1:E4:EC:68:20:D2:B1:5C:1D:29:29:61:73:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:53:51:e5:50:0e:f5:0b:ea:26:0b:26:36:81:82:6a:c1:
         89:42:6d:34:a5:25:35:35:10:43:53:7b:49:5d:68:a7:4e:51:
         c9:ac:cd:de:ba:ff:63:ca:15:11:5c:1c:73:ad:ff:b2:93:3c:
         ab:0f:7c:52:6b:b9:fc:e5:17:94:3a:d8:b4:dd:69:9b:fd:6b:
         e8:af:d6:6a:be:30:30:2b:f7:10:76:e1:a2:7f:5e:62:5f:ba:
         f6:40:23:59:2b:a7:c8:a2:78:a4:9c:05:51:ed:8c:e0:56:b3:
         87:43:ef:12:7f:4a:27:25:04:20:0b:5d:d3:2a:fe:42:68:58:
         81:fc:6f:05:a0:34:47:a1:22:b2:eb:04:cb:12:69:0a:c7:ae:
         2f:4a:83:67:c2:5b:fa:d5:eb:0a:3f:b4:c8:91:30:fc:bf:94:
         02:6d:26:41:31:ea:ab:2f:7c:45:e9:f6:fe:71:65:32:e0:23:
         d7:13:ba:5b:f2:da:16:f2:05:48:da:a5:0a:b2:3f:dc:6e:18:
         f0:d4:08:bb:a3:49:b0:b3:fd:4f:d8:a9:8a:55:27:e3:5a:21:
         3e:e6:09:31:2b:d0:85:36:b5:d6:b6:0a:df:6f:c5:f8:ba:a0:
         4c:90:d8:1e:62:3d:6f:62:2c:de:01:22:a1:f7:fd:cd:7f:36:
         a8:76:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 02:15:54 2026 by rpki-client