Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce1f6775-46a6-395c-be95-20a16f81078e.roa
File:                     ce1f6775-46a6-395c-be95-20a16f81078e.roa (raw, json)
Hash identifier:          E9JBmtH/OsUq/tmh0zp9ClP9azfVntJjmApmys2wecg=
Subject key identifier:   76:FA:1C:0A:8C:22:04:E3:0E:79:4C:76:0F:73:28:CB:AE:40:A4:9C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D100CF8B6D8F4A5F8E381A200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce1f6775-46a6-395c-be95-20a16f81078e.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     264778
IP address blocks:        154.59.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:f8:b6:d8:f4:a5:f8:e3:81:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=c36af082-3024-404c-b6ef-eb09ff6749ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:19:3f:b1:8e:69:0c:11:88:38:ed:cc:75:f5:
                    5c:f7:b8:3a:4a:7d:2c:e0:51:ee:15:d5:06:75:51:
                    46:cd:3c:95:e7:70:4b:0f:47:a1:8e:27:ba:8c:81:
                    82:1f:35:6d:d3:6e:46:ab:b1:2a:1e:05:37:9c:2f:
                    87:ca:53:39:f9:e1:1f:58:4e:2b:3d:7a:1a:88:1a:
                    0e:9d:b0:a2:73:03:44:ba:a0:ef:61:d1:9f:de:22:
                    6b:c4:e3:70:ab:69:ac:06:be:1d:94:82:f3:a4:83:
                    87:b2:5f:05:1b:ea:d9:49:a3:14:3f:16:99:63:db:
                    06:02:e1:b7:7b:67:f8:f7:29:6f:8b:e7:ea:75:b5:
                    12:0e:50:1b:27:57:e8:7b:0b:59:4a:86:fa:51:a7:
                    9e:1e:57:82:3f:0b:76:cb:58:4f:c7:30:82:aa:66:
                    b2:16:64:1d:21:b7:f3:ed:cd:f6:9a:2c:24:1e:b5:
                    70:3e:2a:d5:19:9b:07:be:af:77:7b:df:c4:1b:a0:
                    17:74:93:ff:c3:6c:30:2f:ec:32:da:9d:5d:39:ca:
                    79:43:73:98:f7:10:c3:ea:57:90:5f:f3:3d:35:b4:
                    b5:b0:6a:f5:8e:c8:db:ac:62:54:98:9d:3b:4a:2a:
                    41:8d:1d:05:72:f5:40:43:0a:bd:0b:21:0d:5c:eb:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FA:1C:0A:8C:22:04:E3:0E:79:4C:76:0F:73:28:CB:AE:40:A4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce1f6775-46a6-395c-be95-20a16f81078e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.59.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:8b:5a:9f:5f:b1:22:97:77:0a:d2:c9:78:38:f3:c9:37:
         86:ae:3b:ad:e1:a6:3b:04:ae:e9:6b:51:60:17:e6:8b:84:19:
         cf:ea:e8:d6:2d:ca:5c:de:16:fe:d3:46:82:6b:d0:6d:17:aa:
         6b:66:52:26:d6:10:9d:01:6c:ef:e9:ae:b3:79:8a:d7:af:53:
         00:b3:da:8e:09:1d:d3:00:f6:75:c0:30:3b:72:93:2f:f7:f1:
         76:e4:65:73:e4:80:a8:bf:d3:e3:76:ef:0c:94:37:28:3b:94:
         f9:72:ce:b6:22:6f:d9:7a:6c:00:6d:db:7f:4d:a9:7f:f9:3e:
         40:9a:ec:80:0c:a8:72:a6:16:cf:df:da:a6:0c:66:3f:91:a1:
         d3:a8:56:d2:97:54:66:34:1c:07:80:d7:a1:04:0c:e1:68:9c:
         4f:40:7a:9c:9e:64:8d:6d:b9:02:04:16:2a:40:3c:29:7d:ec:
         e1:9c:2e:7b:ed:80:8d:37:a6:6f:f1:fa:89:35:58:10:22:90:
         50:33:9f:a9:89:bd:6f:03:23:15:eb:74:32:57:0c:0c:99:43:
         7a:5d:cb:ca:5e:62:4d:f1:6f:7f:d3:80:a7:79:80:00:4a:7f:
         c1:f7:68:f2:86:34:17:c4:1b:8e:e4:3f:d2:08:3a:62:6f:7b:
         a7:05:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:22:29 2026 by rpki-client