Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa
File:                     46888245-1cca-332a-aae4-6badf5545311.roa (raw, json)
Hash identifier:          wd2ZvCQaypiOsV8P9g+8lz1qv3NpQsiDpBGkoas1PKI=
Subject key identifier:   E4:42:CC:E7:85:B1:88:0C:C2:D8:9A:DB:5E:47:E8:B0:15:AE:E2:98
Certificate issuer:       /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571
Certificate serial:       010D0C9F4328584EC20C7DA5F71498D7B3E2DFC0
Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     8075
IP address blocks:        153.65.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7d:a5:f7:14:98:d7:b3:e2:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=5b1fd2cf-262d-4a2c-a236-e3a75ccc0d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:66:03:ef:87:d1:53:58:a2:c9:28:77:b3:
                    fe:82:7c:1e:2e:ba:08:d3:cf:d3:0a:bd:7d:3a:4f:
                    59:c3:6f:3b:7c:ff:b3:df:ad:04:2d:13:4d:4b:e4:
                    ec:db:da:f0:4a:f7:6d:c9:24:d9:2d:17:09:13:92:
                    8c:5a:65:5a:81:f1:8f:87:98:9d:94:0c:5c:7b:04:
                    5b:48:ab:c0:21:c1:1f:b7:7c:cf:51:32:f0:98:b5:
                    5b:63:fd:30:5d:84:89:73:e9:09:0f:4f:2d:43:f7:
                    38:11:a3:af:41:b5:e9:7d:62:bc:98:44:d9:3f:44:
                    34:47:fc:18:82:dc:c4:56:01:50:eb:ba:bb:36:95:
                    72:64:ba:0c:10:7b:28:0f:6c:e3:72:8e:75:1d:21:
                    27:dd:4d:44:b3:f0:b3:1b:4b:5c:5d:19:41:03:1e:
                    40:59:82:f8:4b:57:2f:4f:57:aa:39:88:a8:78:cb:
                    f6:d2:07:34:1d:1d:4a:23:3e:96:e9:3b:5e:26:b2:
                    96:ea:8c:30:47:71:c4:ec:08:ea:92:c3:98:07:d4:
                    3d:63:f1:d6:2b:fc:81:5e:61:7a:28:7a:53:44:a0:
                    53:20:d4:7d:55:10:f0:5a:ef:e8:4e:18:11:55:05:
                    37:fb:dc:0b:0f:f1:fc:01:f8:d9:0e:02:bf:22:b3:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:CC:E7:85:B1:88:0C:C2:D8:9A:DB:5E:47:E8:B0:15:AE:E2:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/46888245-1cca-332a-aae4-6badf5545311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl

            X509v3 Authority Key Identifier:
                keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.65.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a3:90:71:05:ef:3b:5e:91:86:b3:c3:97:50:0d:4d:53:cf:
         75:df:5c:68:15:1e:5f:bc:36:f0:f0:97:0c:c7:18:f0:96:c1:
         e0:98:b8:62:e2:3f:4b:fb:02:20:11:08:58:98:31:78:45:77:
         4e:cb:13:ab:57:38:22:09:e9:28:2a:05:c2:6d:9f:45:88:e7:
         98:4f:35:1d:6f:91:13:71:2f:06:ec:2f:15:a7:88:b4:f0:34:
         1b:c6:41:79:02:24:27:e8:11:a8:e1:b9:df:17:15:a6:2d:9a:
         df:49:60:99:79:f9:ac:01:27:12:47:e9:95:45:03:01:18:78:
         ef:8f:a6:01:da:b3:a7:be:86:2f:a1:a0:71:f3:6c:f5:9c:b3:
         e0:56:a4:14:df:aa:e1:6d:3d:c7:3d:34:c3:ef:45:cb:24:63:
         bb:07:04:9d:4e:02:76:9f:04:a0:1e:e5:07:cb:86:84:60:b6:
         dc:58:26:81:1e:c8:20:4f:56:c5:ec:68:c3:ba:01:38:23:c0:
         a8:e6:65:96:38:cf:98:1f:3b:c4:0f:96:7d:9f:6b:75:da:73:
         ec:67:48:7c:b2:d2:d7:86:df:6b:12:48:df:db:2d:70:06:79:
         80:06:c8:71:61:70:55:67:72:15:a2:de:5f:e6:3e:ab:b5:7a:
         b3:aa:f0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:54 2026 by rpki-client