Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa
File:                     8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa (raw, json)
Hash identifier:          r6HMY9cpstqelTtBYMLEprZeu0MI6E5h4Wbt66pRxUw=
Subject key identifier:   95:F5:E3:0E:1D:E8:D3:C5:EA:49:35:FE:38:94:01:61:4F:2C:C2:A3
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A5A7FA9D35CEFA5C13E3B0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        151.101.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:a7:fa:9d:35:ce:fa:5c:13:e3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=bd577dd6-fc69-4e49-bcca-52f63f1d4f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:86:c7:05:2a:6e:81:7d:eb:53:ab:ce:19:
                    4c:e7:30:93:fd:fd:22:28:2a:38:a8:aa:18:14:ec:
                    60:5b:5e:05:24:e7:6a:1c:80:58:f5:0e:95:46:91:
                    3b:53:c1:5d:7a:d1:f1:10:73:a0:b9:00:32:9b:03:
                    ea:28:1d:36:e8:81:25:f1:6f:e3:70:d4:c6:20:cd:
                    da:98:c7:b0:78:c5:cb:56:cd:f3:0f:4e:d1:fa:22:
                    71:9c:82:bb:7c:c9:7a:69:f0:bf:fe:01:ea:3d:89:
                    d3:9a:f7:71:e8:b3:88:27:39:e5:93:84:f9:7f:47:
                    7e:2e:df:d6:aa:ad:f3:4b:bb:23:f0:a4:2c:64:97:
                    42:0a:3d:e7:7f:bf:dc:5b:24:2f:a5:35:5a:a2:d4:
                    46:55:b3:66:0f:18:14:d8:66:51:c5:e0:60:2f:41:
                    47:74:fa:3b:3a:13:52:51:3c:63:28:1b:08:e3:f2:
                    62:80:64:3f:cc:68:61:8a:b1:4e:b3:0f:d7:ce:65:
                    f5:18:fc:c6:34:4a:6a:64:81:e2:80:45:32:88:e1:
                    e1:03:03:77:24:69:75:e1:03:51:d2:44:e9:92:01:
                    01:bb:e4:ec:53:72:df:74:b4:0b:a0:19:f7:3d:6e:
                    7e:02:50:6a:bb:a9:35:44:66:6f:b7:58:3f:e8:ef:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F5:E3:0E:1D:E8:D3:C5:EA:49:35:FE:38:94:01:61:4F:2C:C2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:92:52:99:a1:9f:3c:1f:df:8b:1a:05:3a:84:cf:35:6a:
         e0:ce:27:a1:67:1e:e6:87:6d:dc:ad:18:b3:be:22:57:2b:0a:
         eb:7c:92:42:a3:67:30:be:bf:df:39:2a:6e:c6:25:60:41:16:
         c7:ac:32:9f:77:7c:ec:f4:86:81:67:c4:d4:16:93:f9:44:78:
         3c:35:4a:58:ef:a1:c4:d6:00:af:eb:11:8c:95:3f:78:c8:38:
         5e:5f:01:27:42:f6:72:29:fc:ba:a6:51:79:95:3c:3b:9f:fd:
         ba:f7:a4:eb:b8:1f:84:c0:ec:92:b8:0d:e6:de:e1:f2:b2:2d:
         14:6d:6c:a6:fc:6a:62:40:ae:70:48:45:2b:5f:41:a0:50:c7:
         45:9d:9f:00:9c:76:f0:c8:61:dd:67:73:c8:4c:56:ed:92:6a:
         54:91:45:cc:61:d7:3d:b3:6b:85:e4:99:6e:0f:53:99:3c:6c:
         a2:46:97:75:77:88:4e:08:cf:1f:7c:8b:61:4c:44:1f:dd:22:
         90:dd:aa:e7:67:60:b7:35:22:4c:79:45:47:87:41:a0:1c:51:
         51:c4:7b:a6:ee:a8:bb:9a:b2:75:80:fc:c4:05:bb:63:95:72:
         4b:1c:cc:93:cd:34:10:7c:19:58:6d:38:50:3b:9e:ba:4c:03:
         9a:58:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:53:12 2026 by rpki-client