Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/15e0a6ad-fba5-3cb1-bf22-c25282ca0e2d.roa
File:                     15e0a6ad-fba5-3cb1-bf22-c25282ca0e2d.roa (raw, json)
Hash identifier:          ugi8smvKxg8pqLNoYLgkTkbHHxehKvJYvnm0aCH+ToM=
Subject key identifier:   6F:6A:21:6D:B3:6A:87:F6:D5:B9:43:63:C1:8C:7B:B1:16:74:1A:04
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584DEDE0A668396E412DE4537300
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/15e0a6ad-fba5-3cb1-bf22-c25282ca0e2d.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     397373
IP address blocks:        192.154.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:a6:68:39:6e:41:2d:e4:53:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=bd9a1042-6c96-4ea6-a756-a8168ea55254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:f6:dc:0e:f2:80:59:9f:04:d2:ba:24:8a:
                    82:97:34:5d:5f:70:16:80:3f:c7:14:d9:9a:4d:27:
                    70:94:8e:90:36:96:52:0a:3e:ad:d8:aa:df:3a:68:
                    e5:03:85:3a:7c:56:36:ef:81:dd:32:09:13:74:82:
                    84:e9:cc:b9:b1:3a:21:8d:b8:f3:35:b6:28:2b:4e:
                    ef:c7:8b:3c:c4:53:3a:36:88:a6:4a:ed:3c:85:72:
                    88:12:af:ce:ed:1b:de:1c:4c:b6:fc:76:34:70:50:
                    15:e9:5f:94:a0:e7:6c:b7:3d:34:fb:6d:41:63:8a:
                    c9:95:d2:6b:56:4e:ad:ed:8a:e0:fd:1e:72:6e:12:
                    03:84:af:e5:a2:98:3a:57:03:84:90:92:b1:b5:86:
                    45:29:aa:40:9a:a8:84:98:e8:11:4b:38:f4:cd:2f:
                    de:63:3e:e4:0f:0f:a6:37:00:5b:50:61:92:f5:5e:
                    e0:17:51:d9:57:0a:94:df:5a:9a:a4:eb:70:e0:53:
                    99:d6:1c:4f:62:2f:e6:49:f5:42:89:8e:46:ea:e6:
                    2f:25:98:7f:39:0a:f7:c7:72:3f:de:5c:08:6c:ce:
                    7f:4d:4f:7e:2b:24:f8:90:cb:10:a3:d0:55:43:21:
                    18:17:28:6e:b2:53:4a:14:16:6b:42:42:06:b6:52:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:21:6D:B3:6A:87:F6:D5:B9:43:63:C1:8C:7B:B1:16:74:1A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/15e0a6ad-fba5-3cb1-bf22-c25282ca0e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:13:83:f4:77:9a:76:3a:ea:67:93:bc:60:72:1e:a8:45:d8:
         b2:07:7e:e8:9f:f7:d6:40:fa:5d:c9:6b:b1:e6:cb:8b:53:d5:
         f3:72:bb:61:99:ce:70:f8:ce:3a:74:8b:78:95:5b:a6:3e:e5:
         b4:c5:15:2b:f1:39:3e:92:e9:1a:b3:5f:1f:f0:8b:c8:55:c2:
         c8:97:6d:68:60:05:d0:05:49:e9:54:ae:c2:ce:a0:c8:a5:60:
         b5:f3:d9:3e:82:1f:73:bc:78:e5:5b:04:e9:52:44:44:a8:8b:
         bf:36:e2:2a:c2:21:4d:de:a7:c0:5c:fd:61:4a:0b:07:a9:26:
         62:c9:af:17:f7:c2:b7:4a:7a:6d:f3:98:13:cc:c5:a5:88:1a:
         65:9d:69:88:d8:e1:89:ac:aa:da:07:8f:a1:71:4d:5b:e8:a6:
         83:a7:f8:73:d0:5c:56:ef:a8:51:88:4f:34:83:7e:35:5b:65:
         97:4c:2e:81:62:44:a0:b2:77:78:79:d0:64:ac:52:54:cd:75:
         10:5c:40:e5:0e:4c:f5:df:6e:f5:ea:e0:fa:78:dd:8b:57:b9:
         8d:c8:72:26:83:2f:7f:3d:2b:92:bc:9f:05:50:e5:2a:b9:d8:
         70:e6:b0:c0:2b:4a:e8:9f:ad:bc:c4:c9:bd:e5:c4:3f:d9:56:
         52:e7:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:26 2026 by rpki-client