Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/8593b3a6-6502-360f-83a0-b15437707937.roa
File:                     8593b3a6-6502-360f-83a0-b15437707937.roa (raw, json)
Hash identifier:          YcRo01ny/W381lexCrZpMZ6bpUcZO3WcqpHLQRkwijA=
Subject key identifier:   66:08:31:2D:7B:37:25:8D:6C:73:02:04:3D:69:E4:50:A9:17:FA:A6
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584EE38CAA826BFC362EBB358940
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/8593b3a6-6502-360f-83a0-b15437707937.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     25932
IP address blocks:        153.7.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:aa:82:6b:fc:36:2e:bb:35:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=d2bd8614-8034-4d7d-9666-4d05f14a857d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:f2:75:ce:44:6d:1d:a9:16:5a:7b:09:09:
                    93:e7:94:05:c7:c7:8f:00:dc:bd:2f:84:03:90:f2:
                    7a:9d:89:85:66:09:62:0c:5b:a1:04:49:19:17:f2:
                    9f:57:3e:66:4c:3d:9b:7a:03:77:b4:08:de:94:e2:
                    9d:44:2a:5f:8a:a9:08:fa:55:bf:4f:2a:57:15:a4:
                    db:7e:60:c0:82:fd:34:8c:5b:c6:df:8e:91:2a:00:
                    18:61:58:9a:08:38:42:28:2a:3f:df:ee:38:96:6f:
                    dc:e3:5e:5c:f1:8e:e2:f4:71:4a:be:d9:20:ba:6f:
                    6f:97:8b:0c:5a:8a:ec:05:e7:4c:e3:34:c7:5a:c5:
                    fe:bb:29:2b:88:15:5a:29:a9:26:f0:9d:40:81:e7:
                    6a:e5:64:95:c5:4c:80:37:5b:96:36:68:c2:9c:7f:
                    3c:94:d9:ae:b2:5d:8a:19:94:4f:11:53:c8:04:a4:
                    d4:46:47:63:fa:cd:ed:30:6e:02:d5:1f:3c:a5:33:
                    ec:5f:84:eb:b7:cf:e4:9d:07:cb:96:f7:be:9f:6b:
                    a5:b2:69:14:bd:d8:77:4b:d4:92:37:85:65:40:c2:
                    dd:f2:f9:73:22:7a:49:2b:e4:0e:84:88:a6:8e:82:
                    4a:71:e0:d3:eb:f1:fe:0a:52:5d:68:b3:c8:94:8d:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:08:31:2D:7B:37:25:8D:6C:73:02:04:3D:69:E4:50:A9:17:FA:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/8593b3a6-6502-360f-83a0-b15437707937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.7.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:94:73:d2:da:a2:d2:9d:1c:06:78:95:46:87:d1:70:fb:
         7e:90:c4:fb:7d:f9:d9:64:f7:17:d9:68:a6:c5:06:11:2d:82:
         5f:05:1b:13:5c:fa:0a:ae:54:39:c4:7b:8b:9b:0b:c4:77:de:
         83:81:d2:c0:a9:33:2c:2c:96:06:18:66:68:cf:96:16:b1:3b:
         3f:fa:df:61:0d:29:41:e5:b0:c9:8c:8f:2b:54:ef:5a:15:64:
         d5:45:71:8e:48:18:6e:1b:ca:66:91:76:ad:a9:94:61:f7:3d:
         e0:c6:ee:d7:72:87:e8:cd:66:7d:a7:65:23:b3:d0:8f:e6:da:
         60:fc:d9:71:97:be:e2:a0:71:44:c6:48:13:02:c1:b8:77:d1:
         e1:de:59:b3:54:9d:93:d1:87:58:0b:37:d1:12:d1:18:f3:5e:
         93:ad:e9:df:5e:a7:f8:c6:4b:5c:01:be:c6:38:1a:4b:24:c6:
         e7:68:cb:1e:e4:8a:ad:b0:34:40:c1:11:7f:43:9b:03:85:76:
         a8:46:72:e9:67:72:20:9d:d4:10:bc:66:36:14:44:0e:db:99:
         2a:e8:e7:2b:83:6d:ce:ac:6c:b4:8a:01:86:f3:59:59:0d:df:
         18:db:9a:46:c6:1c:52:73:e5:22:9d:44:ee:53:7e:01:e6:01:
         97:f3:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:29:58 2026 by rpki-client