Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa
File:                     f55d329b-e206-3311-9383-9e5491a7f00f.roa (raw, json)
Hash identifier:          7D2Wo99i5PYWdbH6Ngija/RK9NyCvV+xwysWKwQF05w=
Subject key identifier:   90:20:95:55:88:90:D6:7F:FA:E6:19:DA:32:A5:19:5E:05:23:91:32
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F4328584EF71777E55AD9252C818300A0
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     15404
IP address blocks:        170.200.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:77:e5:5a:d9:25:2c:81:83:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=49ed9913-d6ad-44c3-8537-e57772c5ed03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:9d:a6:69:12:84:25:fd:41:e7:62:73:1d:
                    bc:82:0c:50:5f:73:d4:16:2e:b5:7b:f2:c8:12:dc:
                    52:fd:db:0a:e0:ba:05:03:36:ae:7c:e2:f7:ed:92:
                    1f:df:31:41:ec:bf:8c:75:99:cd:6d:e7:97:6b:26:
                    7c:15:20:ea:39:71:0a:9c:13:ed:52:f7:c1:22:c0:
                    6f:98:76:4d:73:b3:1f:e7:20:73:3d:f8:e6:d5:7f:
                    76:0e:d2:db:d4:45:6b:40:27:9a:6a:54:4d:e3:51:
                    72:5e:4a:16:81:a7:f5:f3:32:04:6d:cb:16:e8:4e:
                    e4:3b:62:80:b4:ab:ab:f5:38:4d:57:d9:dd:3a:0f:
                    35:f0:04:9b:aa:55:69:12:3c:10:fb:cb:e3:57:7a:
                    1c:95:50:e1:e0:98:96:41:56:16:13:50:29:4e:c8:
                    56:83:bc:11:f3:37:0b:8f:94:c8:58:8f:b2:b3:d8:
                    59:8a:4f:75:c1:6d:95:63:6a:89:18:8b:64:ae:b3:
                    dd:3d:43:14:21:34:6d:cb:d2:a6:c7:f6:8b:fb:d5:
                    24:ac:3a:b3:ce:4c:e8:61:bb:eb:30:c5:d8:ef:09:
                    a8:57:ab:5a:14:a4:88:1a:e0:e6:24:a2:86:83:db:
                    a6:23:24:c0:ef:30:b7:e1:21:d4:9a:66:91:ee:39:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:20:95:55:88:90:D6:7F:FA:E6:19:DA:32:A5:19:5E:05:23:91:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:d9:08:d4:56:68:95:4b:f3:15:74:65:dd:9f:03:11:10:
         d8:ec:80:ad:15:b5:4e:62:7a:cf:85:01:a0:5f:77:61:79:d0:
         fe:d1:cd:28:75:a0:39:2e:77:1a:5d:76:f0:b1:f1:5a:70:8b:
         a7:b6:8a:70:eb:0f:1e:d5:fa:1f:76:15:67:8c:dc:6e:f8:e0:
         e0:7b:51:a8:99:8c:0f:1d:83:b5:ed:58:51:b3:3c:00:9d:6d:
         b6:a2:91:75:7d:3e:46:43:1f:a2:ca:68:a3:bd:10:8f:f7:d7:
         3f:81:26:2e:a6:a8:4e:16:64:56:bb:20:ef:de:50:c0:be:f5:
         88:ac:0f:23:5a:41:92:3f:e3:eb:e8:6a:88:7d:0b:39:4f:12:
         b1:12:1f:a7:58:27:7e:56:bf:2e:c3:0b:c8:53:82:09:85:19:
         08:6d:d5:85:a1:1d:19:a0:5d:36:76:57:b4:46:ff:6f:5b:09:
         73:33:40:ad:e8:5f:ef:77:6e:b7:6a:16:c2:24:3e:41:9e:55:
         4e:9d:5c:d0:f0:c5:f2:4a:87:78:81:53:60:11:d8:e9:b6:e1:
         92:d2:99:a5:4d:fa:a4:de:fc:07:ed:8c:d8:82:ee:d1:67:86:
         54:24:a8:e6:80:a5:1b:53:12:0b:e6:be:c3:ce:bf:0c:aa:fd:
         00:11:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:40:05 2026 by rpki-client