Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa
File:                     d8100009-70c0-3912-8d76-a269e3657e98.roa (raw, json)
Hash identifier:          iGKWYW2DzDAtDvn0bXss1SnpeArNmU/YhPTqsoRH6jY=
Subject key identifier:   C8:E4:83:87:75:16:64:DD:74:6C:D4:1B:97:6C:34:AA:D8:9C:73:9E
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584E35FF123E13EB4E1264D62B80
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     25649
IP address blocks:        143.55.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:12:3e:13:eb:4e:12:64:d6:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=6fb7fa1e-7605-45ad-ba65-fb4f04562fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:39:e6:3d:f3:12:64:0c:aa:18:82:c9:c7:98:
                    af:7f:c6:65:cf:c6:3e:cd:5f:2b:bd:86:dc:4d:f7:
                    13:a9:71:46:44:06:ef:6c:7a:ac:81:ba:08:fe:e6:
                    bf:70:40:2d:c1:93:ad:b6:86:1d:69:40:ca:9a:65:
                    2e:e3:99:33:e4:55:c5:bb:e5:de:f2:c3:e1:4f:e0:
                    bf:64:5e:ba:05:4e:0e:e4:5c:3b:2b:f1:c0:b3:90:
                    33:e8:21:f7:72:95:e8:be:26:0b:ac:9d:d2:ed:88:
                    de:59:43:1b:1a:20:29:2e:42:e6:fb:d0:aa:9c:81:
                    a8:8c:96:49:c1:24:f8:ee:dd:c9:a1:c8:28:ee:4e:
                    60:5e:40:9e:04:b6:09:30:8a:9b:da:40:fa:32:b4:
                    ee:9f:4d:8a:a1:4a:8c:c3:c2:bf:a7:a4:93:d4:c8:
                    a5:b7:88:56:58:b9:ac:08:20:51:cb:3b:01:91:8b:
                    f3:74:7d:09:45:6d:e5:db:ac:8b:c3:d8:d7:53:b0:
                    fe:e1:4a:43:66:24:2b:b1:fd:b5:8a:a6:5c:69:04:
                    42:c0:5c:13:78:1e:57:7a:73:b6:a0:20:72:54:3a:
                    42:9a:27:88:cf:1c:b5:e4:a2:15:36:76:b3:35:ef:
                    1d:70:a9:06:8e:e6:f8:4e:03:91:d9:b4:07:42:70:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E4:83:87:75:16:64:DD:74:6C:D4:1B:97:6C:34:AA:D8:9C:73:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:38:4b:6f:34:5d:b9:a2:71:1d:64:c8:b0:f3:ea:27:54:
         ae:b0:da:fe:78:d4:10:27:33:c9:29:c8:e2:b5:32:d7:d1:e7:
         8a:ce:38:a5:96:90:8a:08:cb:8c:32:e2:d5:84:6a:66:6d:9e:
         e8:99:af:33:3a:72:4a:49:f7:37:a1:0b:25:74:c3:61:c4:95:
         2b:06:25:13:96:c6:45:f1:b6:aa:4b:a3:fb:cc:9e:7f:c4:7d:
         2a:68:3c:8a:53:d1:c9:2d:ce:ea:31:b1:10:e8:5a:39:56:a9:
         a4:6c:88:f3:e4:b1:60:68:bc:6a:e7:7d:f9:2b:b8:19:c6:28:
         02:58:59:c6:00:04:f5:13:b9:d8:7c:e8:b2:fd:c9:8c:d8:82:
         0f:06:47:9f:c5:90:a2:f0:ed:85:8a:99:4c:cf:c7:a2:e0:d2:
         88:8b:97:c8:b6:19:d9:9e:04:ed:84:54:e8:88:a0:31:52:84:
         78:69:c3:e7:5a:1f:bf:26:56:5a:60:f8:76:6e:5f:22:a5:f3:
         2a:d9:30:85:de:01:4b:40:c3:c0:be:07:04:fd:1f:90:e6:61:
         83:27:fd:3b:58:54:94:af:c1:cf:11:64:f6:47:81:1a:da:69:
         3a:27:5e:77:ed:3e:d1:47:30:a3:a3:c3:15:97:38:95:31:d0:
         3f:9e:e7:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/xI+E+tOEmTWK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy
ZThlMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
NmZiN2ZhMWUtNzYwNS00NWFkLWJhNjUtZmI0ZjA0NTYyZmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkznmPfMSZAyqGILJx5ivf8Zlz8Y+zV8rvYbc
TfcTqXFGRAbvbHqsgboI/ua/cEAtwZOttoYdaUDKmmUu45kz5FXFu+Xe8sPhT+C/
ZF66BU4O5Fw7K/HAs5Az6CH3cpXoviYLrJ3S7YjeWUMbGiApLkLm+9CqnIGojJZJ
wST47t3Jocgo7k5gXkCeBLYJMIqb2kD6MrTun02KoUqMw8K/p6ST1Milt4hWWLms
CCBRyzsBkYvzdH0JRW3l26yLw9jXU7D+4UpDZiQrsf21iqZcaQRCwFwTeB5XenO2
oCByVDpCmieIzxy15KIVNnazNe8dcKkGjub4TgOR2bQHQnDpfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMjkg4d1FmTddGzUG5dsNKrYnHOeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj
ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDgxMDAwMDktNzBjMC0z
OTEyLThkNzYtYTI2OWUzNjU3ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh
NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw
MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw
YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjzeYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACe1OEtvNF25onEdZMiw8+onVK6w2v541BAnM8kpyOK1MtfR54rOOKWW
kIoIy4wy4tWEamZtnuiZrzM6ckpJ9zehCyV0w2HElSsGJROWxkXxtqpLo/vMnn/E
fSpoPIpT0cktzuoxsRDoWjlWqaRsiPPksWBovGrnffkruBnGKAJYWcYABPUTudh8
6LL9yYzYgg8GR5/FkKLw7YWKmUzPx6Lg0oiLl8i2GdmeBO2EVOiIoDFShHhpw+da
H78mVlpg+HZuXyKl8yrZMIXeAUtAw8C+BwT9H5DmYYMn/TtYVJSvwc8RZPZHgRra
aTonXnftPtFHMKOjwxWXOJUx0D+e520=
-----END CERTIFICATE-----
Generated at Wed Jul 8 15:49:13 2026 by rpki-client