Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eec6d885-d0aa-301d-b7eb-9b8e26259e12.roa
File:                     eec6d885-d0aa-301d-b7eb-9b8e26259e12.roa (raw, json)
Hash identifier:          gL6dQStsNntiBhX79kQySOKXoT2b8XVHztvY2PhDzsg=
Subject key identifier:   2B:12:BC:38:6F:03:39:16:BF:1B:60:AE:8A:2F:FC:94:82:E4:16:96
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D932563DE7749D82BA4AEC100
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eec6d885-d0aa-301d-b7eb-9b8e26259e12.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     54994
IP address blocks:        153.43.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:63:de:77:49:d8:2b:a4:ae:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=8b2290f3-5963-4da3-986e-a02f44bb12e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c3:6c:da:22:33:e3:fe:9b:67:48:d5:ce:2d:
                    4e:d9:00:da:a3:78:6e:c4:f7:f4:9b:21:90:e8:96:
                    87:f7:c9:4a:e4:5e:1a:3e:ed:3e:84:1c:02:18:da:
                    00:bb:ca:14:06:c4:7f:91:66:50:6e:4f:7a:7b:2e:
                    69:d2:05:34:84:a3:0f:bd:49:3e:2b:6e:ab:fd:d8:
                    f2:6e:bf:3f:f2:21:f9:c9:23:62:25:82:55:26:39:
                    d3:aa:50:7c:d0:7d:75:77:77:a4:07:f6:2f:f6:3f:
                    c8:25:ad:3f:2e:1a:fc:8b:37:26:70:c7:af:78:cf:
                    94:1b:c7:ec:86:58:45:12:a3:fb:89:7e:73:78:26:
                    fc:e1:af:5a:c6:7d:e0:e2:13:19:14:b1:df:29:94:
                    1a:2c:b4:ef:b0:c1:1c:a5:0e:bd:f1:47:03:74:35:
                    5a:31:de:4a:59:bd:ce:b4:65:ad:fb:70:fb:09:ff:
                    8e:87:19:a6:62:8a:ef:9d:3d:47:6b:4e:3c:11:61:
                    53:17:06:94:df:8b:0b:05:0e:46:cb:fb:7e:b5:55:
                    d4:8e:ff:5c:4e:44:d9:5e:5f:3a:5a:22:59:21:fb:
                    7a:ba:03:00:96:d1:33:a3:99:67:e9:cd:8a:a2:f9:
                    28:a0:46:d6:15:00:3e:81:71:81:ec:bc:34:27:18:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:12:BC:38:6F:03:39:16:BF:1B:60:AE:8A:2F:FC:94:82:E4:16:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eec6d885-d0aa-301d-b7eb-9b8e26259e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:34:df:d9:e5:55:d2:cd:e6:37:23:9d:18:ff:08:a2:23:4e:
         94:2e:a4:20:05:b0:79:94:17:af:b1:fc:d1:f5:03:46:6c:f3:
         b0:51:f8:0f:c1:26:2a:7e:9c:fc:2d:19:c8:11:68:30:dd:75:
         8a:93:d8:55:ee:b9:8b:17:2d:7c:79:95:1f:74:1c:91:a7:51:
         5d:cb:ec:2f:c2:a7:d4:4b:5a:6c:02:63:0e:e3:81:46:18:3e:
         e7:dc:56:9f:e8:08:8a:dc:84:25:c0:42:2d:21:76:5c:89:62:
         ad:da:26:2b:fc:3d:6f:24:12:b5:9b:75:1b:c0:88:42:d4:2e:
         0b:4c:91:74:78:ec:64:c5:fb:5d:5e:e4:d2:05:c9:51:13:b1:
         6d:45:f3:e9:7d:cc:c8:4c:5b:75:ae:0b:74:df:2d:0b:f6:fa:
         d6:76:92:4e:5b:e9:b2:07:75:e4:c0:14:15:20:d7:16:03:c5:
         ee:f2:80:aa:d1:29:f4:71:6c:1f:c4:d6:ab:45:e3:53:d2:4a:
         35:04:77:bb:2d:c4:6d:41:88:0b:01:9a:c7:65:9e:d4:71:13:
         bd:f4:66:ba:20:8e:49:73:72:ef:4b:39:f3:f1:df:4e:13:3a:
         6c:bb:8d:33:07:23:90:ea:76:7a:fb:74:1e:bb:a7:30:05:95:
         4a:53:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:54:21 2026 by rpki-client