Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9aa9455c-184b-387c-99ed-a22c51138362.roa
File:                     9aa9455c-184b-387c-99ed-a22c51138362.roa (raw, json)
Hash identifier:          57g+PL6LmnsOhfVEsmE0fYEtUReGyyZSERwGQyftLfo=
Subject key identifier:   96:00:86:E4:D0:71:91:C7:A8:32:E9:D9:80:62:63:72:E9:18:59:BB
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E5FDF775A019762B1D34A8980
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9aa9455c-184b-387c-99ed-a22c51138362.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     29752
IP address blocks:        107.151.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:77:5a:01:97:62:b1:d3:4a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=407d798d-d438-4bcd-ace4-4ea3c4e16414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:56:bb:66:b4:4e:2b:e8:39:f7:db:20:30:
                    81:53:86:99:e1:91:bf:08:62:2d:3a:09:99:39:8a:
                    23:8f:eb:86:ef:93:e1:45:8b:ab:fb:52:bc:73:af:
                    12:3e:a2:1c:81:a5:0e:ae:42:21:e6:73:f7:e2:54:
                    0d:e8:59:a2:fd:d9:2d:80:87:49:07:41:84:45:60:
                    ac:61:23:d0:de:3b:6f:8a:55:32:b1:ad:45:a2:88:
                    26:a4:88:8a:71:e4:1c:13:aa:0b:6f:ce:26:bb:92:
                    f6:f1:3d:6b:bf:86:ef:00:20:ba:82:b5:f7:92:a1:
                    d5:d2:57:5f:29:4d:f7:e1:44:f8:50:ef:df:b0:de:
                    fb:ec:84:fc:18:bf:5d:b6:04:b1:43:02:49:f2:49:
                    b5:00:9e:17:f3:e1:8f:aa:28:69:57:9e:9c:06:af:
                    1b:d4:f5:d7:1c:08:58:ac:65:2b:51:67:10:53:11:
                    b8:fa:60:e5:82:4c:96:6b:06:a0:18:77:66:31:38:
                    cd:ac:2f:53:0c:e2:39:0f:6a:39:f4:e2:66:3e:d4:
                    f2:94:f8:65:d5:7e:3e:ce:f5:f6:73:9a:1c:a0:87:
                    df:35:0f:61:7f:af:6d:1f:d6:09:16:84:b6:fc:45:
                    e7:e1:0d:39:a1:a9:22:bd:56:5e:e5:f4:71:99:01:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:00:86:E4:D0:71:91:C7:A8:32:E9:D9:80:62:63:72:E9:18:59:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9aa9455c-184b-387c-99ed-a22c51138362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:f1:ba:cc:76:a9:6d:95:6c:05:05:5f:54:64:44:a8:19:
         2f:e8:36:b0:fe:e7:27:8a:6a:84:0b:4f:87:0d:0a:34:da:20:
         a1:87:13:d4:86:cd:87:12:5d:08:8e:c5:45:20:e3:93:77:88:
         45:8a:c4:a0:a5:f8:bb:c2:3d:d4:df:13:71:70:2c:0e:36:6c:
         6a:d8:66:24:5f:3d:e6:67:5d:47:5c:0f:34:e2:64:cd:39:64:
         a9:12:7e:41:05:99:48:24:54:f4:90:b2:99:22:52:2a:8e:30:
         42:6c:78:06:6a:47:d4:71:ce:b6:5d:18:f4:e6:62:9a:04:a0:
         05:01:7a:95:dd:37:b4:ac:82:bc:9f:ef:62:e6:7a:b5:a4:7a:
         a5:c1:ce:88:10:55:2b:1f:0c:ea:23:93:00:d3:c6:58:77:4b:
         28:35:ad:dc:57:0b:61:cf:8c:89:e4:ab:3f:af:cd:14:b8:9d:
         07:8b:a0:da:af:d2:26:0c:99:c7:36:52:5d:34:11:c4:78:f4:
         82:43:a5:ab:8c:90:e3:d3:bf:ad:53:7e:39:93:1a:97:13:99:
         9c:fb:7a:13:6b:53:ff:40:84:d2:65:8e:04:28:3d:c1:ae:ec:
         fd:80:85:d0:31:1e:3d:68:05:52:95:d6:8b:a7:44:71:b2:d9:
         45:fd:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:59:33 2026 by rpki-client