Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa
File:                     7b4cebea-3564-3ced-b43f-9712c6e282a5.roa (raw, json)
Hash identifier:          4Re0BJYnDJUSxyPf8u7hcBcTYHrTvv4SW/pzp6ezxlI=
Subject key identifier:   72:90:A0:D3:58:22:06:CB:E6:14:44:0C:51:D4:8C:35:E6:22:69:62
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F4328584F698D688D8294E6CAD1B74F00
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     1054
IP address blocks:        216.40.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:68:8d:82:94:e6:ca:d1:b7:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=56046520-e4c5-49ef-a240-b6bffd3c6877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:32:01:9c:4a:9b:1c:2b:fa:db:e7:20:ad:
                    16:af:11:25:a4:ad:53:0d:5a:4f:b0:ee:28:fd:35:
                    8a:6f:0c:a4:6f:aa:70:06:67:70:df:07:65:0d:37:
                    91:5a:38:c9:49:80:7a:06:5c:99:fd:94:e0:32:11:
                    95:15:e8:d1:2e:d5:69:e5:b2:03:1b:ad:3d:e6:a5:
                    5e:5f:de:3f:59:50:07:1a:36:f2:64:f2:b7:11:8a:
                    bb:c3:62:94:75:44:48:5f:e4:2d:bb:2c:52:5d:3f:
                    cd:0a:30:83:67:7e:69:0f:f0:77:99:b7:3d:dd:01:
                    49:d6:9a:8a:72:f0:b1:e1:b2:97:dd:ce:d7:a7:a1:
                    67:35:ef:04:4e:7d:f7:9b:f5:be:e7:ad:ea:e0:4a:
                    ef:fe:a0:7c:52:b1:a6:00:4e:c7:19:11:e7:61:3e:
                    80:0c:f0:bf:5e:b5:80:41:7b:23:6c:60:6f:54:79:
                    7d:d1:9d:c3:d8:85:ef:68:cf:5a:0c:86:53:4a:d1:
                    c6:8b:97:07:ba:77:6c:77:a9:4b:a6:21:a7:64:90:
                    25:d1:4d:32:43:b4:fb:a4:0b:50:4f:1e:0f:bc:6c:
                    f4:bf:38:da:b8:cf:b7:c3:a7:4a:4e:cf:a6:8a:67:
                    e4:11:6d:06:50:27:42:ca:50:77:25:57:0c:0b:f6:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:90:A0:D3:58:22:06:CB:E6:14:44:0C:51:D4:8C:35:E6:22:69:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:a8:15:c3:29:b3:df:c5:35:65:29:ca:bc:75:ff:8e:37:
         c1:fc:80:da:1b:0e:81:b2:d0:a7:ba:45:d3:28:90:db:c7:8d:
         2f:20:b8:32:8a:cb:2d:43:57:a6:36:44:42:74:38:95:ba:a2:
         02:ef:67:04:79:ef:ab:db:9a:f1:31:6b:a8:7b:36:f3:6c:e5:
         0c:4b:e8:06:13:35:ef:2a:85:c0:2f:d6:e7:e7:a5:ba:e9:73:
         e2:20:dc:c9:8e:52:cf:7a:93:38:3e:3b:8b:ef:5a:9f:48:02:
         ed:5c:13:3a:8b:12:3b:8b:55:29:9e:2a:82:05:2d:44:48:53:
         0a:69:9f:25:1c:12:bb:9e:61:85:17:d0:59:4e:3f:5e:8c:e4:
         b9:28:64:e0:ef:ab:a4:24:cd:13:bf:12:eb:39:92:32:3d:a0:
         94:64:86:41:2b:39:e0:9e:b9:b5:20:a0:e2:bf:99:00:67:79:
         2d:73:16:81:c9:ec:14:b3:d5:40:17:4d:fa:22:33:bb:63:60:
         e2:da:ad:4a:98:34:4d:4e:82:3f:01:27:bc:da:44:a2:2c:a6:
         4d:9e:35:e1:05:f2:f0:81:a0:f0:57:da:62:e5:3d:7d:3e:97:
         03:4e:41:e1:1f:fa:c6:90:d2:09:ef:68:bb:c8:9a:d2:14:ef:
         b8:37:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:25:48 2026 by rpki-client