Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d053c72c-4693-3cb8-8bf6-6062dbdb6201.roa
File:                     d053c72c-4693-3cb8-8bf6-6062dbdb6201.roa (raw, json)
Hash identifier:          3oEWr+LairsVqHzGe74qJvAUWlh/Y2g5UshoEHNx+QM=
Subject key identifier:   E1:28:6F:12:F7:53:94:02:D6:37:DD:3E:1A:B0:99:02:8F:7E:E9:94
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E08665C2E33FBE2FB2C725320
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d053c72c-4693-3cb8-8bf6-6062dbdb6201.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     40838
IP address blocks:        154.22.160.0/19 maxlen: 24
                          154.50.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5c:2e:33:fb:e2:fb:2c:72:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=024ddaeb-970c-4e1f-89cf-9498b1e5c276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:e0:ae:05:e9:60:49:b0:67:99:61:f0:12:
                    e1:c8:c2:af:38:da:13:be:e6:cd:18:76:05:50:db:
                    6c:6c:d5:0d:b7:5f:a4:ba:0f:0b:88:f2:6b:28:34:
                    60:7d:32:91:8f:60:66:bb:ce:1f:ad:53:20:9d:ae:
                    e2:ce:ba:01:b5:27:56:8e:d0:45:ff:37:2e:dd:41:
                    06:47:9f:de:b3:1e:a8:c2:17:11:77:1e:34:3f:9a:
                    5a:20:36:8d:82:0b:72:5e:5b:1c:9e:8e:51:4d:b5:
                    98:42:0d:1b:2a:2a:14:7a:b6:37:07:11:b3:ad:3b:
                    71:4d:f6:6f:e5:94:6b:c1:5d:1b:9f:3d:64:31:20:
                    6c:c7:15:95:40:71:46:dd:af:d6:5a:ef:f0:ef:cb:
                    42:44:9e:26:76:63:19:b2:f1:14:f2:35:5a:23:9b:
                    42:ae:2e:36:35:ed:72:5b:42:89:d6:b4:0d:78:fd:
                    89:c4:15:98:df:a3:44:6a:ce:6b:7d:d8:8b:53:77:
                    f8:7e:11:e9:57:c6:1b:2a:5a:7d:e1:5d:ca:e3:de:
                    7a:65:17:d4:a1:f5:04:0e:d6:5c:f2:28:bf:f9:2f:
                    2e:6f:4b:9b:e7:fd:80:d5:ed:18:63:d0:d2:d9:72:
                    a6:66:5b:57:f5:b4:d0:2e:1d:42:cf:ce:38:e2:c2:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:28:6F:12:F7:53:94:02:D6:37:DD:3E:1A:B0:99:02:8F:7E:E9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d053c72c-4693-3cb8-8bf6-6062dbdb6201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.22.160.0/19
                  154.50.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c9:3c:1d:dc:cf:5a:94:5b:38:af:f0:f8:77:3c:2b:ec:cf:
         d4:e7:ef:29:37:25:38:2c:6d:fd:2e:d2:5e:54:a1:06:cc:59:
         5d:56:72:eb:f4:e2:bb:95:ab:77:8d:5f:9f:84:e6:c3:ac:7e:
         ae:1a:f4:d3:25:59:09:a6:2c:d7:e5:a4:ff:2d:00:7b:e1:81:
         6f:fe:74:71:29:ba:44:24:33:b6:1d:d8:ee:90:23:de:28:07:
         15:39:e4:f8:6b:45:64:fd:01:de:71:ec:59:3d:9a:f9:1d:20:
         a3:dd:27:8c:17:04:59:f8:92:80:79:6c:e8:c4:a5:59:58:97:
         20:47:99:fd:ef:bb:4e:b6:dd:8b:82:b2:a5:0c:0d:35:e0:6a:
         49:24:5e:6e:f7:95:95:91:2b:5e:58:90:18:6d:54:ac:95:26:
         5b:dd:19:43:1f:0a:af:14:a9:e1:fe:13:87:1c:cf:b1:d6:dc:
         f7:be:7f:6f:8e:a9:89:de:f6:68:8f:b0:3a:15:a0:4d:53:8b:
         6b:aa:99:ac:5f:cc:bb:fc:b4:55:e5:e8:4b:78:47:77:36:5a:
         4f:80:d3:5e:45:37:f0:d3:1f:b6:08:82:25:51:1b:1a:47:1a:
         4a:e9:4f:45:09:00:af:e4:6d:df:0d:63:5b:5d:57:c2:c4:ca:
         f5:34:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:39:16 2026 by rpki-client