Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f05fddda-4024-3e47-9cc7-ae9b95d0fa0c.roa
File:                     f05fddda-4024-3e47-9cc7-ae9b95d0fa0c.roa (raw, json)
Hash identifier:          Mxwzx8PZJc8n0anfNfaBUXn+rqSm0ApU9iz1UhMf8JI=
Subject key identifier:   F4:7E:57:D0:CC:48:43:71:87:1A:52:6E:89:4F:98:C3:9F:D4:D5:FB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1F9246D94E42E13940FB3480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f05fddda-4024-3e47-9cc7-ae9b95d0fa0c.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     199701
IP address blocks:        154.13.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:46:d9:4e:42:e1:39:40:fb:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=475f1c61-66b6-4066-b004-cafcd3a88966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8e:83:90:a6:23:8d:b0:23:3f:a4:82:6c:a7:
                    5e:1c:10:87:40:bd:24:21:0f:29:72:02:81:df:9f:
                    a7:68:f0:63:53:44:19:5e:c4:61:2a:bb:6e:66:98:
                    e9:12:5e:48:df:76:3e:8d:48:18:bc:8f:03:39:77:
                    2a:d8:24:54:7c:a9:66:1f:e9:0e:16:0b:5a:74:ad:
                    b5:6e:72:05:5d:4a:9b:6a:10:22:fd:7a:1e:4d:77:
                    bf:dc:54:1d:0f:7a:d1:02:78:f2:f2:c4:76:78:60:
                    2a:a6:3d:a2:6c:27:21:1f:07:14:a6:0e:5a:c0:c8:
                    1f:6a:76:38:1d:24:fc:e1:39:9a:9a:bf:65:a9:8d:
                    c3:05:dc:9b:08:9b:57:b0:11:a2:2e:de:31:09:4f:
                    d2:b1:ee:91:25:6f:c7:6f:07:93:38:ac:c7:e2:ef:
                    6f:59:af:66:65:ee:9c:18:fc:21:45:f4:0e:e6:d9:
                    c9:53:c7:52:e9:61:26:52:0d:c6:eb:7e:ba:09:3c:
                    d1:5d:06:72:c6:00:38:14:71:6d:87:85:ea:1d:c3:
                    ad:a4:07:8a:9b:f5:09:bf:e5:40:b0:71:73:3f:72:
                    15:ad:5c:09:ce:81:95:c4:ae:35:bc:67:a5:53:5e:
                    f1:62:2a:49:fd:eb:e0:98:01:eb:80:f8:18:3c:db:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7E:57:D0:CC:48:43:71:87:1A:52:6E:89:4F:98:C3:9F:D4:D5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f05fddda-4024-3e47-9cc7-ae9b95d0fa0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.13.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:ff:48:ab:dc:2f:69:12:0e:7c:4e:4f:73:81:2a:b5:ab:3e:
         24:eb:23:fd:dd:8a:6b:31:c0:50:d7:6f:79:57:92:b4:53:23:
         ed:87:19:42:25:2d:bb:fa:bb:28:36:cf:6d:e4:21:23:1f:e5:
         25:8a:dd:b7:2d:a5:b4:42:dc:96:44:00:cb:42:07:1d:07:a5:
         64:d7:25:7a:19:2a:3f:3a:b7:b4:33:1a:01:d2:08:df:5d:68:
         e5:8e:17:92:36:b1:b5:67:03:1f:0c:b4:13:0e:bd:ae:86:38:
         0c:42:dd:9e:61:cc:ba:5a:42:eb:18:cc:22:c4:2f:8f:02:9a:
         f9:55:d5:01:35:71:04:46:e8:e7:a0:3a:62:4f:b5:e5:17:e7:
         2a:8e:ea:9f:6e:a1:bb:18:8a:d2:86:c4:b4:e1:fc:9f:87:fd:
         f7:8f:c1:81:8b:56:5d:15:7a:b7:7d:9d:12:b4:8b:b8:07:74:
         3b:ca:a3:4b:8e:e7:41:b9:62:67:4a:91:17:d0:d7:51:34:2f:
         a7:9a:76:70:d6:4f:30:aa:f0:61:9c:62:b2:2b:fd:2c:54:0a:
         b7:f5:0c:64:f4:fe:38:8f:88:4a:0c:ee:75:b6:3e:84:a3:90:
         2f:e9:db:80:f0:bb:9c:63:8d:99:76:0b:3e:5b:aa:8c:f8:2b:
         6f:c9:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:49:42 2026 by rpki-client