Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3eed156e-8077-377d-ab6a-8f89ea8ba2ac.roa
File:                     3eed156e-8077-377d-ab6a-8f89ea8ba2ac.roa (raw, json)
Hash identifier:          0OjZ0VExSlHW+Ony80gepn/7cmx6nUzlPLg357nCRg8=
Subject key identifier:   6C:80:55:0D:94:6F:3A:DB:FF:1D:06:02:5C:C5:93:5F:40:25:DD:86
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E1E5EB8B896611CBFE7F606A0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3eed156e-8077-377d-ab6a-8f89ea8ba2ac.roa
Signing time:             Tue 09 Jun 2026 21:53:37 +0000
ROA not before:           Tue 09 Jun 2026 21:53:37 +0000
ROA not after:            Mon 07 Sep 2026 21:53:37 +0000
asID:                     14618
IP address blocks:        204.157.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:5e:b8:b8:96:61:1c:bf:e7:f6:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  9 21:53:37 2026 GMT
            Not After : Sep  7 21:53:37 2026 GMT
        Subject: CN=55909da3-6b86-4138-ae17-c436175367c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:11:41:4a:38:4c:cf:ce:7e:f2:09:26:39:
                    ce:49:f8:e9:fc:b9:5d:3f:80:86:31:ca:99:1d:fb:
                    d9:16:a0:3a:b4:be:d3:52:4c:14:69:3f:de:c1:71:
                    5a:19:bd:48:af:42:83:ca:2c:a1:75:e7:0b:68:10:
                    ad:e2:8b:07:df:ea:74:6f:75:71:39:74:25:f3:ec:
                    76:9d:0f:48:fb:22:24:a0:ae:5c:e3:74:ff:e6:80:
                    30:75:bd:c5:6e:9a:fc:0c:0d:2b:a6:52:36:01:89:
                    58:9e:e4:22:f9:38:80:e1:05:1a:39:7a:3b:61:27:
                    a1:c9:2a:0c:07:bc:41:da:d5:94:13:34:a5:88:fc:
                    e1:39:61:92:6d:83:71:15:c0:42:23:a5:a9:b6:4a:
                    ff:d3:df:29:51:10:61:6b:e8:59:de:b9:bc:95:7b:
                    5d:9d:32:9c:7d:3c:a5:41:0a:7c:96:15:45:20:3c:
                    72:cb:44:c8:24:43:5a:57:0c:e5:3b:0a:b2:92:fa:
                    08:fd:63:1f:1c:7d:e0:79:3a:49:8d:5f:cf:47:85:
                    c7:9c:7c:5e:82:a2:64:b6:19:4f:c7:b8:0c:8e:68:
                    7e:0b:25:40:d5:8f:87:88:02:a3:95:05:e1:4d:3b:
                    a4:b1:cd:48:26:b4:b7:e2:97:c9:77:c3:04:68:be:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:80:55:0D:94:6F:3A:DB:FF:1D:06:02:5C:C5:93:5F:40:25:DD:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3eed156e-8077-377d-ab6a-8f89ea8ba2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:64:ea:7a:d1:05:d8:54:00:5c:48:cd:d5:5a:32:7d:2f:da:
         db:00:05:72:94:88:20:5a:e1:7a:fc:c1:e2:8e:7d:a7:df:5b:
         11:b3:e0:90:3f:d2:0d:1f:35:82:c0:dd:c4:1e:ad:0d:b8:36:
         62:a1:e8:63:b9:ad:dd:77:20:f6:a0:11:c9:23:dd:35:ac:f1:
         cf:ff:0e:1f:50:da:6c:d9:ed:71:a8:99:26:62:0b:e4:43:ad:
         f5:16:91:6f:23:02:94:a6:57:38:d1:83:46:5d:c3:5c:16:dc:
         ae:56:cb:aa:23:78:13:47:08:6f:45:61:e5:f2:33:25:54:5d:
         2f:ff:55:07:0c:a2:cc:a5:d9:21:c8:6a:ab:b2:a8:6b:c2:7b:
         3e:72:df:33:87:6f:f3:84:e5:7e:14:71:00:c1:1e:11:d6:60:
         1c:8c:36:45:a1:63:f6:5f:11:61:d9:29:4b:ca:e0:2b:2c:75:
         6d:71:31:3c:1f:f0:c0:79:2c:cc:fe:18:f2:37:64:c0:79:52:
         47:14:c4:eb:7e:4d:eb:75:2b:08:95:89:73:cb:d9:ba:b8:0b:
         e4:ab:16:05:eb:53:b7:69:16:bd:da:4b:8e:77:d1:6d:c4:e4:
         88:4b:0c:30:3b:09:97:7f:b7:bc:b7:c5:d3:26:a2:d6:0a:14:
         71:87:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 23:36:58 2026 by rpki-client