Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa
File:                     971d87c0-f9b6-332d-91fd-25349ddb466b.roa (raw, json)
Hash identifier:          EI360rfSU2II8eYs4F4Utr3sNPIU1/FhTyWrQILq8U8=
Subject key identifier:   16:64:A6:23:AC:C0:AD:49:6E:C3:69:B9:8B:A2:F8:28:FE:0A:47:97
Certificate issuer:       /CN=9af44307-21f9-411b-ba04-dedf105fd206
Certificate serial:       010D0C9F4328584F89A847C49BFBCB04B6866A80
Authority key identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     13335
IP address blocks:        155.103.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:47:c4:9b:fb:cb:04:b6:86:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af44307-21f9-411b-ba04-dedf105fd206
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=57d8c870-82e1-4547-8125-10956d82f152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:03:17:f2:b9:16:0c:51:3a:0f:e0:01:ec:
                    2e:75:6f:8e:7a:92:0c:72:4c:dc:9c:6a:17:2b:7f:
                    c0:c6:e7:98:87:8b:2e:12:6f:c6:a8:81:22:e6:3a:
                    92:d4:4c:d4:77:9e:ea:8c:36:5e:93:02:92:15:03:
                    ff:4f:c8:25:60:c6:97:b8:ac:b3:8c:01:4e:e6:6a:
                    df:3b:22:35:7a:4b:72:c0:d5:05:26:67:27:c4:81:
                    13:06:ca:62:21:8f:79:f8:e1:3e:7c:8a:d8:1f:f1:
                    51:2b:00:25:c1:b0:8b:cc:02:e1:9e:9b:65:d0:aa:
                    77:cc:dc:85:46:dc:d8:3d:2a:28:9e:e4:91:ef:4d:
                    1d:3c:4b:c5:12:9a:2b:49:56:24:d8:a6:f9:55:0e:
                    ed:59:73:d2:03:63:50:c3:c2:75:97:04:b4:6b:a4:
                    a4:ec:ac:1a:f1:55:26:b5:5c:bf:32:a3:43:33:fb:
                    ba:14:97:e7:c3:8f:a3:9e:54:03:66:1e:64:df:de:
                    be:23:89:1b:bb:36:d8:73:91:55:e0:4b:3d:7e:3d:
                    40:96:67:d7:54:d1:97:38:ce:26:9d:32:b7:e4:6e:
                    ad:53:b6:da:71:10:3c:f7:8e:17:85:01:0d:80:62:
                    64:6c:aa:32:86:9c:d3:5d:e0:f7:b1:1b:1f:83:25:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:64:A6:23:AC:C0:AD:49:6E:C3:69:B9:8B:A2:F8:28:FE:0A:47:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl

            X509v3 Authority Key Identifier:
                keyid:73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:bc:bb:fb:23:11:76:a4:0d:db:f5:ee:67:40:b7:bf:6b:95:
         9b:42:c5:c3:78:a4:f6:27:dd:95:b3:06:e0:48:f8:d9:a8:e1:
         80:c1:53:84:66:7b:69:8a:fb:c9:b8:8e:f7:3d:53:20:bb:da:
         d1:fe:58:c5:41:6a:d0:93:57:6d:ef:6b:e9:5f:13:3c:1d:66:
         7b:10:26:af:6e:8c:89:60:f8:3a:f0:65:b9:58:40:d6:fa:1b:
         75:89:48:07:4e:e8:d1:55:4f:d9:3f:85:1d:77:c2:18:ec:00:
         62:8e:b3:33:1a:25:30:66:91:e4:2b:85:7a:82:dd:87:bc:9b:
         e1:7e:a2:06:a7:65:2c:a8:84:4e:f9:e6:47:7c:e3:6a:45:70:
         e8:a3:3c:dd:d3:17:9e:44:1b:ed:0c:b8:d7:fc:35:02:1b:29:
         ef:25:0a:72:bc:ce:d1:48:74:e1:89:f9:b8:d7:7a:77:c8:50:
         bd:cb:c1:86:e9:b4:b5:2e:7e:b4:a3:dd:87:4a:53:66:c7:b5:
         54:c7:10:6d:e9:c6:9b:e7:b4:b3:a5:ae:5a:37:cb:cf:a2:d5:
         50:c1:40:88:2f:bd:d8:86:8c:98:ec:18:0c:b5:e4:da:44:b8:
         10:1d:ac:6c:a6:2b:ff:27:65:59:04:9c:18:4d:a4:9a:26:a3:
         9a:64:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:40:31 2026 by rpki-client