Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c/5afd00d0-01eb-3a0f-94f5-1a453acfa11a.roa
File:                     5afd00d0-01eb-3a0f-94f5-1a453acfa11a.roa (raw, json)
Hash identifier:          0EKGV14rH2h/Kihbz7TNdwGWiXVQOD8vKBUzM6+93MI=
Subject key identifier:   C6:54:43:C1:55:93:B6:2C:D4:B4:B5:DD:F8:CC:D6:81:42:7A:92:83
Certificate issuer:       /CN=8155aaa7-2991-4b86-8d54-3e2966cf1c0c
Certificate serial:       010D0C9F4328584D65153E9E15E81FE6F25A1880
Authority key identifier: 97:B4:73:F4:A1:A5:58:DD:11:A6:46:F9:9D:60:6C:93:99:04:9B:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c/5afd00d0-01eb-3a0f-94f5-1a453acfa11a.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     401636
IP address blocks:        155.103.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c/8155aaa7-2991-4b86-8d54-3e2966cf1c0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c/8155aaa7-2991-4b86-8d54-3e2966cf1c0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:3e:9e:15:e8:1f:e6:f2:5a:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8155aaa7-2991-4b86-8d54-3e2966cf1c0c
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=c76189f6-bb5b-4d09-87b5-92a93c813944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:3f:cf:24:55:8a:09:23:b6:0c:82:9a:31:
                    db:4c:ec:e9:e4:26:6e:d6:29:e0:ec:bf:ab:7c:50:
                    65:12:f2:e6:f4:db:3c:d3:e3:ad:5c:17:20:a7:50:
                    2a:42:cb:bf:8d:98:8a:cb:63:7b:0b:47:5d:7e:b0:
                    c5:46:ac:19:84:eb:eb:76:a9:47:5d:05:23:d8:6f:
                    97:04:9b:8e:ad:d1:1c:e6:75:81:28:31:8a:15:b8:
                    09:49:25:f4:3f:e3:4c:66:4f:ee:cb:5b:1f:dc:7e:
                    38:55:fc:41:da:3b:38:91:57:d0:48:07:7e:27:76:
                    39:25:1a:3a:7c:1c:9b:96:3f:8d:c8:2e:ec:48:ec:
                    f8:c6:49:ad:c0:43:9f:a4:47:e9:73:89:d2:90:c3:
                    0c:53:de:c3:f1:99:f4:c8:0d:96:37:1c:bb:08:f0:
                    08:f7:ca:e1:b5:ed:4e:ca:5f:d7:44:9e:14:63:f3:
                    79:a2:81:89:52:8d:4a:39:5d:54:e7:3c:5f:84:fd:
                    5e:11:0a:38:f8:1c:63:f6:a5:67:70:ea:fd:21:be:
                    17:9e:3a:39:61:95:48:2a:bd:2e:71:06:ba:39:d5:
                    15:87:ca:12:0d:da:a9:06:63:75:90:0a:95:4e:37:
                    e6:b9:cc:08:ab:4a:ca:20:2e:4b:6f:a5:ee:c9:40:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:54:43:C1:55:93:B6:2C:D4:B4:B5:DD:F8:CC:D6:81:42:7A:92:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c/5afd00d0-01eb-3a0f-94f5-1a453acfa11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c/8155aaa7-2991-4b86-8d54-3e2966cf1c0c.crl

            X509v3 Authority Key Identifier:
                keyid:97:B4:73:F4:A1:A5:58:DD:11:A6:46:F9:9D:60:6C:93:99:04:9B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8155aaa7-2991-4b86-8d54-3e2966cf1c0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:76:62:31:83:f6:97:c8:fb:7e:f8:a1:f8:bb:6d:2d:10:bd:
         06:19:3e:76:4a:9e:e4:a9:e1:f9:f2:2a:45:a0:a0:4d:cb:8f:
         da:70:7a:4d:47:58:65:e9:b5:d4:9d:0b:d7:70:b4:fc:54:87:
         92:34:f4:2a:5a:2e:be:df:68:17:e6:e9:cf:e0:23:59:4b:82:
         7f:e6:33:e4:d0:a1:0f:bd:8e:86:ff:66:71:ad:8e:43:27:8c:
         70:f1:d5:95:11:3b:e4:2f:75:82:7e:f7:e1:b5:0f:80:8e:07:
         e4:01:43:11:30:67:83:7e:b3:84:f5:71:f2:c5:f7:22:3a:42:
         0e:83:e4:0c:49:2e:57:50:d2:db:80:e5:08:fd:e2:57:34:1c:
         1d:29:ec:1b:48:b4:90:7e:73:48:8f:4f:3c:05:4d:f0:4d:91:
         ca:f1:d0:72:7a:6a:8b:40:b5:af:fc:3e:da:98:58:fa:4c:4b:
         eb:be:a9:d0:d7:c2:10:d9:59:6c:df:9d:d6:3a:17:39:9d:db:
         fe:e6:bc:e9:39:a3:43:7d:44:e8:39:6d:93:a0:1e:73:26:4b:
         83:39:03:01:53:b4:8f:19:44:f7:b9:cf:fc:6d:7f:8c:af:59:
         aa:f9:7f:6b:e9:67:ee:8a:e9:76:bb:61:ec:9e:62:79:8b:c9:
         17:76:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:05:19 2026 by rpki-client