Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa
File:                     43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa (raw, json)
Hash identifier:          ht4xS+m8bk/nEKHz1yhYIkX0gFExjkkYTalbrXO9Zns=
Subject key identifier:   9F:0C:95:8C:ED:0B:5B:21:89:40:27:01:1F:65:1F:CF:D4:EC:FC:9B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1B19F9E5AA2157BAAFACA6E0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        154.20.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:f9:e5:aa:21:57:ba:af:ac:a6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=724c19bd-817a-4067-88d7-21dd19e5bd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:a6:47:f6:10:c7:a9:12:68:fa:c3:97:c6:
                    c5:9b:c0:00:d2:1b:08:b7:ae:84:cc:85:79:f1:f5:
                    67:3b:2a:f9:41:03:e2:bb:01:9f:e1:65:2c:d1:05:
                    22:58:f7:80:15:e8:d8:bc:90:91:e0:6a:73:09:35:
                    3c:66:20:13:90:d1:25:c4:18:82:c1:6e:8e:98:56:
                    c5:07:a4:75:46:d2:66:6d:02:6d:27:d6:ec:0d:0d:
                    15:90:01:e4:4f:a8:44:72:a6:d1:aa:56:d2:d0:82:
                    57:03:6d:e3:54:94:3b:50:59:50:05:a3:b3:8e:02:
                    f5:98:0f:d7:61:75:b9:f8:57:64:85:a0:f7:f8:0f:
                    ba:65:3d:f1:d4:37:56:b4:50:fb:74:57:3e:c1:61:
                    1f:94:37:92:50:2b:3f:cf:a2:83:e6:d1:99:1a:da:
                    fd:0d:b3:db:d6:63:a5:9c:31:69:db:7c:a7:5a:d0:
                    b8:53:97:89:2d:b4:24:52:3a:49:9a:7f:30:f8:20:
                    37:ae:b7:3b:d9:fc:1c:35:2b:92:31:35:c6:bf:f1:
                    4c:0a:b9:75:16:72:73:ac:0c:64:04:e5:51:cd:1a:
                    41:eb:85:c4:5e:70:11:08:46:bc:73:c5:81:37:50:
                    f3:97:79:05:85:02:b5:a2:ce:61:d1:2f:e0:20:ba:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0C:95:8C:ED:0B:5B:21:89:40:27:01:1F:65:1F:CF:D4:EC:FC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:8d:dc:ff:ea:94:c3:7f:8f:e3:c0:5d:9f:f4:79:2d:a2:
         6c:ff:70:65:e4:58:0c:0c:e9:27:be:e4:f4:63:f3:80:44:45:
         79:88:e2:82:50:e8:0c:a8:b9:59:86:b1:65:b1:24:25:c9:7e:
         44:b8:38:c1:2b:28:7d:f0:7c:fc:9e:00:5f:90:02:8d:f5:bc:
         e7:87:d9:8f:e2:e7:9b:90:10:ea:b4:d1:e4:34:2d:dd:57:ae:
         c5:e8:e9:8f:99:41:dd:5d:63:2f:fa:9f:66:7b:bb:64:99:84:
         54:32:6e:64:88:cc:4e:f1:61:3f:83:67:7f:af:20:5d:24:6c:
         2e:5e:69:06:e7:2e:c9:9c:e0:f6:b3:98:cc:59:00:b5:f8:52:
         60:8c:87:43:dd:1b:29:26:7e:f9:2a:d7:6a:96:aa:79:b3:1b:
         89:7d:a5:ab:1c:c5:a6:5a:9a:9f:fc:ea:38:3c:3f:16:d4:8e:
         1f:e4:f3:ed:e9:33:ef:d2:4b:ab:e9:3c:ac:fc:86:fe:2a:01:
         8b:22:12:ce:40:f4:2a:7a:2a:2e:68:34:da:c0:61:9f:22:ec:
         94:12:36:28:50:c2:1c:cb:85:90:81:3d:53:b4:d5:cb:ee:b0:
         1d:32:a8:ba:90:b1:2a:39:60:7a:49:88:cd:5f:1f:8e:86:f4:
         b1:44:ab:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:38 2026 by rpki-client