Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/64bd5705-d391-348c-bb5d-de86bb3f1834.roa
File:                     64bd5705-d391-348c-bb5d-de86bb3f1834.roa (raw, json)
Hash identifier:          juAyefhjvzghrXyK8EZYLOiAFWifhLqRrYg5pI+TzNk=
Subject key identifier:   B0:B3:C4:5C:03:4F:2A:04:E7:48:FA:8C:00:B0:EF:3F:A9:99:4D:FB
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D93254084127D500FF97B7400
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/64bd5705-d391-348c-bb5d-de86bb3f1834.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     54994
IP address blocks:        153.43.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:40:84:12:7d:50:0f:f9:7b:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=42d7a6d8-08ec-4f95-989c-6cd328481f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:83:3e:e9:e1:4c:e3:48:be:28:0e:07:91:
                    68:ac:c6:ca:83:43:34:fb:6e:2e:94:b1:ef:4f:bf:
                    dd:bd:d9:e2:8b:d5:8b:06:1d:2d:e5:c1:65:ec:bb:
                    80:4e:63:6b:6a:8a:ff:18:2d:4a:9b:b2:00:c7:e6:
                    a3:a9:e0:e2:3c:01:b6:eb:a6:85:11:a2:5a:5a:6a:
                    e7:7a:51:e7:34:0b:0a:6a:b8:42:a8:be:18:ae:e4:
                    a2:70:80:db:29:98:6e:c6:8c:42:f4:a7:be:73:9f:
                    29:9b:4e:70:68:10:c6:5c:16:6a:ae:bc:2d:1c:5b:
                    af:d5:2b:52:30:45:73:3f:5d:eb:f1:4c:df:a5:1d:
                    3a:fe:fc:0c:5a:a1:55:63:3f:6b:6e:b0:74:eb:60:
                    a4:1c:04:c8:d0:75:d6:e9:da:37:d9:eb:dd:93:ef:
                    b2:ae:68:dd:47:43:b4:45:0d:24:3a:a8:d1:cd:f5:
                    93:48:ee:76:90:ea:ca:c4:6c:96:81:b0:4b:64:00:
                    86:2c:e5:e4:7e:49:2d:bd:9c:21:ed:35:a2:69:4c:
                    17:60:ef:49:ee:04:63:76:32:77:f9:8b:84:f8:2b:
                    2f:cb:58:4c:67:01:bb:63:30:b0:32:f3:db:f8:da:
                    0f:96:86:a4:cb:73:17:47:b5:58:f7:da:32:e2:bd:
                    85:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B3:C4:5C:03:4F:2A:04:E7:48:FA:8C:00:B0:EF:3F:A9:99:4D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/64bd5705-d391-348c-bb5d-de86bb3f1834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:63:01:56:12:89:e0:f4:2b:97:83:7b:b8:7d:0b:86:d4:62:
         50:13:ea:3c:eb:b2:a9:5b:ba:2e:d2:4f:53:21:62:e6:6e:c6:
         e8:2c:24:86:2c:9d:dd:85:d1:9a:c0:92:16:30:d6:6b:6b:fd:
         b7:36:1a:7a:3d:59:41:75:0a:c5:31:95:18:b6:a2:30:df:65:
         0c:45:1c:5d:13:bd:36:0c:92:5d:3d:7d:c0:c3:3a:c6:68:7e:
         52:89:b2:be:f7:f2:93:e9:ae:5f:ab:5e:c1:3a:61:32:8c:77:
         e8:4c:7b:ed:49:5e:85:82:ca:30:98:07:29:42:d4:c3:fd:ae:
         99:98:22:5b:c4:79:9d:11:68:dc:f0:23:a5:03:77:34:b1:52:
         06:3b:54:5e:2f:cf:40:92:7d:d4:32:82:bb:ea:8e:68:45:52:
         e7:b4:c0:da:bf:f6:87:67:29:a8:d0:8c:85:ef:45:3b:7a:cb:
         0a:b9:90:a3:d4:a5:88:62:e3:57:27:93:d5:a7:f4:e2:e8:ae:
         59:09:cd:3a:5b:f1:ce:e0:47:41:48:3b:21:3b:fe:de:9e:98:
         1f:83:a2:09:9f:ff:a0:99:5b:e4:cb:30:f0:ed:27:1a:49:84:
         3b:60:4a:0f:ed:3a:8d:09:3d:36:85:77:67:64:09:2f:d0:21:
         e8:cb:a1:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUCEEn1QD/l7dAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
NDJkN2E2ZDgtMDhlYy00Zjk1LTk4OWMtNmNkMzI4NDgxZjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSODPunhTONIvigOB5ForMbKg0M0+24ulLHv
T7/dvdnii9WLBh0t5cFl7LuATmNraor/GC1Km7IAx+ajqeDiPAG266aFEaJaWmrn
elHnNAsKarhCqL4YruSicIDbKZhuxoxC9Ke+c58pm05waBDGXBZqrrwtHFuv1StS
MEVzP13r8UzfpR06/vwMWqFVYz9rbrB062CkHATI0HXW6do32evdk++yrmjdR0O0
RQ0kOqjRzfWTSO52kOrKxGyWgbBLZACGLOXkfkktvZwh7TWiaUwXYO9J7gRjdjJ3
+YuE+Csvy1hMZwG7YzCwMvPb+NoPloaky3MXR7VY99oy4r2F7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCzxFwDTyoE50j6jACw7z+pmU37MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjRiZDU3MDUtZDM5MS0z
NDhjLWJiNWQtZGU4NmJiM2YxODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSszMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtjAVYSieD0K5eDe7h9C4bUYlAT6jzrsqlbui7ST1MhYuZuxugsJIYs
nd2F0ZrAkhYw1mtr/bc2Gno9WUF1CsUxlRi2ojDfZQxFHF0TvTYMkl09fcDDOsZo
flKJsr738pPprl+rXsE6YTKMd+hMe+1JXoWCyjCYBylC1MP9rpmYIlvEeZ0RaNzw
I6UDdzSxUgY7VF4vz0CSfdQygrvqjmhFUue0wNq/9odnKajQjIXvRTt6ywq5kKPU
pYhi41cnk9Wn9OLorlkJzTpb8c7gR0FIOyE7/t6emB+Dogmf/6CZW+TLMPDtJxpJ
hDtgSg/tOo0JPTaFd2dkCS/QIejLoQ0=
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:16:26 2026 by rpki-client