Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa
File:                     46888245-1cca-332a-aae4-6badf5545311.roa (raw, json)
Hash identifier:          78bRv77f1QyswerIbrd20UI+JvSPL9v/S6Vr4yWxD2c=
Subject key identifier:   33:64:B8:B6:E2:51:1B:CA:D1:D5:D4:96:7C:4C:7B:95:53:F6:A3:BF
Certificate issuer:       /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571
Certificate serial:       010D0C9F4328584F63F83003BBCAB184C0702280
Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     8075
IP address blocks:        153.65.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:30:03:bb:ca:b1:84:c0:70:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=cbb3c876-3323-4af4-a9f2-9ffd2406cb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:06:fe:dc:fb:ed:46:ca:da:ac:bd:61:6f:d3:
                    36:48:49:b2:8c:9e:70:6c:2a:db:e5:46:d6:c5:2c:
                    b7:f8:57:82:59:17:1c:16:e1:b0:5d:4d:fd:f8:37:
                    50:3f:bb:e8:3c:a6:de:2b:be:6f:b6:5a:40:a4:4e:
                    53:f6:e7:03:77:97:52:40:d6:d3:f6:c9:da:4a:2f:
                    33:4c:76:67:3b:e7:62:86:d2:b6:37:6c:a9:db:67:
                    54:67:b4:33:c6:cd:fb:a9:64:d5:37:73:a6:e7:10:
                    8f:c4:5c:f1:da:ab:69:d1:53:19:3e:8e:0e:ce:5f:
                    46:23:d2:27:47:b2:0e:a6:11:3f:c6:bd:b8:8b:ab:
                    01:ed:fa:69:31:0d:88:4a:f5:c0:a0:99:e8:76:71:
                    2d:a5:59:c6:39:a7:78:83:18:64:75:4c:8c:e3:8f:
                    f0:67:25:e2:21:e2:79:1f:b4:72:7d:86:93:f0:c1:
                    d2:4e:00:ad:c4:8c:15:0e:d4:8c:f1:7c:de:ac:9a:
                    d3:fa:39:2d:29:1e:d5:25:0a:14:be:ad:80:62:8e:
                    6b:64:7f:be:0f:f9:6f:0d:cf:c1:43:c8:d6:80:f0:
                    02:64:15:6a:aa:78:2d:f0:cc:81:e2:fe:81:4a:5c:
                    6c:51:6e:3a:ac:cb:c5:3d:e2:b9:6f:97:5d:d2:c9:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:64:B8:B6:E2:51:1B:CA:D1:D5:D4:96:7C:4C:7B:95:53:F6:A3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl

            X509v3 Authority Key Identifier:
                keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.65.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:24:a1:39:a4:0f:d5:a3:cc:0b:b4:bf:7c:5e:60:bc:a2:fc:
         2b:f3:58:b4:35:dd:84:4e:82:b3:3e:74:c7:9e:1b:34:6a:47:
         b6:4d:6e:33:b8:af:d4:a5:d2:5f:b1:94:bd:0c:9f:6f:10:58:
         d3:2d:a0:27:a9:1e:aa:81:14:d1:ba:7c:4e:26:67:5c:b2:c0:
         11:62:de:a0:43:e2:c7:8c:af:be:ee:8a:ab:af:04:61:67:80:
         a8:f0:7f:ff:ff:36:29:4c:e3:f9:18:b2:1a:95:97:81:f9:f9:
         6c:c2:52:84:dc:43:85:f6:b7:ab:82:0b:66:0a:af:b8:01:57:
         1e:cd:55:46:2d:21:bd:d4:ec:9e:ef:7c:c0:cc:b6:35:02:4a:
         e5:d0:cf:93:86:10:0f:b4:8c:a8:35:57:86:08:ee:ab:6f:8e:
         9c:83:b1:f9:7f:c3:45:57:df:40:a8:c9:cf:44:d2:c1:4c:3f:
         6e:91:c4:5b:b4:f7:a3:1c:8e:a7:cc:28:1e:ac:0b:0a:5d:3c:
         58:e4:9c:99:f7:66:55:a9:5c:78:ca:76:b5:0e:9d:6a:d9:de:
         58:74:ad:cd:04:06:89:a5:cb:bf:59:86:ef:81:67:56:53:a1:
         e1:b7:03:79:78:bc:e2:dd:e9:66:d7:e9:d3:71:18:42:aa:4d:
         9a:86:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:11:24 2026 by rpki-client