Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb89faed-a397-38ec-a3f6-17926b5d1efc.roa
File:                     bb89faed-a397-38ec-a3f6-17926b5d1efc.roa (raw, json)
Hash identifier:          AwGxX0dnwdgc5F0TsQsqFvNqj8y9lwuiMgCALJjUmXk=
Subject key identifier:   D7:EF:91:20:1D:66:EA:67:73:48:B4:41:2B:35:4B:AB:6B:E6:9D:F8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA795C1DD12C6C20095F2A150
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb89faed-a397-38ec-a3f6-17926b5d1efc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     34214
IP address blocks:        154.49.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c1:dd:12:c6:c2:00:95:f2:a1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=adb0ea05-89ff-4375-9fe0-e7d473cdd17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:c4:c8:32:d9:91:cc:af:42:63:f7:9a:45:
                    3c:db:c3:c4:8c:06:1b:d4:b8:f4:a0:18:2d:6c:23:
                    95:73:6f:e1:81:26:f9:68:1f:78:f0:66:a2:92:59:
                    54:db:77:43:da:b4:b1:bd:fc:e3:0d:d3:9a:6f:e7:
                    c6:61:f5:71:7b:e3:16:ad:bb:32:b1:85:17:0f:f4:
                    1e:9c:61:b7:93:f2:4b:36:c9:bd:23:cc:ba:5d:8b:
                    69:a5:74:ea:36:36:d0:88:b5:4c:ed:4d:ae:01:19:
                    04:97:42:00:d5:8d:36:73:5f:fb:e4:69:45:17:d5:
                    eb:d6:61:12:16:ba:5e:b7:40:ef:ee:92:0c:e2:17:
                    1c:94:53:bc:22:e8:59:6c:ca:c1:f5:b6:dd:60:05:
                    a4:f5:f9:ce:9d:40:47:73:d9:1a:2e:4d:d5:d4:97:
                    62:16:6c:4e:88:82:0d:72:fe:ba:73:74:33:19:c8:
                    19:ea:52:15:b3:c3:71:02:54:cd:1b:8e:fd:9b:da:
                    18:5f:b5:d0:b4:9e:87:6c:69:07:ac:2b:fa:5d:66:
                    98:4b:27:a3:d6:0a:9a:a2:09:aa:d0:a0:bc:f1:64:
                    3e:45:08:9e:c5:e0:6e:0f:03:42:4b:64:6e:dc:80:
                    d6:71:3b:6f:5a:83:0b:4e:32:a9:89:d3:7f:be:2a:
                    af:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EF:91:20:1D:66:EA:67:73:48:B4:41:2B:35:4B:AB:6B:E6:9D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb89faed-a397-38ec-a3f6-17926b5d1efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.49.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:ee:d3:b8:5d:c5:65:6f:26:d6:cc:da:09:8f:c1:e7:90:
         5d:c1:88:53:60:e1:b3:ad:74:f5:f4:d1:25:63:da:c4:23:5d:
         ee:3b:25:31:cf:f3:9a:78:48:98:18:5e:0b:65:77:c0:ff:1c:
         45:50:ac:fa:b5:07:2a:6a:06:e5:5c:fe:46:6c:43:67:cb:1b:
         b1:7b:02:2d:f1:09:ed:61:b3:e3:5f:87:b4:89:88:46:24:9c:
         6d:a0:25:95:37:bc:d2:84:ca:d0:d6:6e:a8:a1:b1:2b:ff:ee:
         ce:64:06:53:d1:f1:44:72:4e:40:59:cb:d6:91:8e:95:62:85:
         3e:46:da:69:fc:c6:e7:df:ea:41:7f:b1:cc:75:13:10:76:ff:
         c2:e6:f9:e0:3b:51:f5:76:64:4b:04:fd:12:b1:8a:6f:75:8f:
         a1:b9:b8:eb:9c:7d:1e:49:3e:e9:f4:56:ef:6a:d3:b8:3d:98:
         23:61:e2:45:ab:7e:2c:64:0e:30:81:03:78:0f:72:3f:17:0e:
         6e:77:e5:bb:4a:a5:1c:0a:47:4a:bd:39:35:9e:87:bf:c0:e3:
         5d:1a:36:d0:f5:64:a8:a8:8a:8f:a9:f3:e9:b9:e3:7e:c5:17:
         8a:bf:95:a0:e3:c5:e2:3d:26:99:1b:76:b9:75:4c:f8:bd:97:
         f2:e6:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:21 2026 by rpki-client