Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/8a33f882-982e-3be3-9431-5e4e49f2eaaf.roa
File:                     8a33f882-982e-3be3-9431-5e4e49f2eaaf.roa (raw, json)
Hash identifier:          XhYFlgXdpwOmHAlmUgvPcPhZoXrVuUzNa89kRBTRqu4=
Subject key identifier:   A1:26:E4:57:7B:E3:32:CD:09:71:47:DE:5B:D4:90:BE:2D:D1:20:FD
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584F5B9AE05473D78F199C7D7AE0
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/8a33f882-982e-3be3-9431-5e4e49f2eaaf.roa
Signing time:             Thu 01 Oct 2026 13:06:04 +0000
ROA not before:           Thu 01 Oct 2026 13:06:04 +0000
ROA not after:            Thu 03 Dec 2026 15:54:25 +0000
asID:                     62044
IP address blocks:        153.69.20.0/24 maxlen: 24
                          153.69.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:9a:e0:54:73:d7:8f:19:9c:7d:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Oct  1 13:06:04 2026 GMT
            Not After : Dec  3 15:54:25 2026 GMT
        Subject: CN=4a3a76e7-4603-4fb9-8cdd-2bf60a2b8f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:da:94:24:ee:eb:e6:63:4a:6c:9b:ab:57:a4:
                    91:6f:5e:70:64:fe:4c:62:99:f2:b0:7d:69:42:47:
                    fa:36:a1:98:ae:d8:ff:20:2d:8c:90:13:34:38:ff:
                    c0:8d:99:8f:60:77:a7:bd:c4:06:29:10:79:04:b9:
                    10:bb:dc:26:d8:25:1e:ed:18:c2:80:f6:53:b4:92:
                    5c:e0:7b:c5:e7:e5:5f:49:82:04:ca:64:d6:77:9a:
                    ad:b3:1b:67:b5:a6:c2:cb:d4:ab:fb:88:e7:f6:d6:
                    f9:94:2e:21:9a:c5:da:94:c1:dc:08:44:87:5e:18:
                    8b:3a:bc:a6:ac:b9:b3:76:08:9a:2c:5d:6b:78:e4:
                    2a:7b:4f:cb:55:18:96:a5:05:bf:14:30:f2:a9:dc:
                    82:52:9f:85:bc:47:b9:df:db:a7:de:ad:be:c8:e6:
                    41:97:39:1d:55:9b:e4:eb:9a:f9:75:e0:43:74:cf:
                    7f:7b:a7:37:8d:de:2c:6d:47:58:c9:4c:9f:5c:75:
                    66:cc:33:22:e8:d5:a9:d4:d7:94:02:aa:5c:ad:77:
                    4f:28:a8:61:c0:0d:56:fb:74:14:85:2d:81:ec:00:
                    46:94:c2:f8:a4:18:5d:75:8b:51:04:15:9b:3a:45:
                    80:7c:96:d1:2f:e6:08:9f:a4:ab:5a:97:b6:e7:8a:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:E4:57:7B:E3:32:CD:09:71:47:DE:5B:D4:90:BE:2D:D1:20:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/8a33f882-982e-3be3-9431-5e4e49f2eaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.69.20.0/24
                  153.69.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e2:8f:15:d8:80:20:ab:8b:76:d3:88:92:a5:bd:48:7d:17:
         fd:a1:a6:1e:f2:3c:21:c9:7f:a1:7c:70:3d:78:63:bb:ce:94:
         49:04:52:ea:13:27:19:1c:ed:e7:20:94:1c:c7:af:85:a1:fe:
         64:b1:79:a2:63:b5:4b:b5:c8:e8:01:15:2e:c1:71:b7:06:46:
         c7:80:67:a9:8e:e6:1c:fe:13:4b:a3:dc:9c:2e:aa:0a:d2:5b:
         e6:95:37:45:7e:3b:27:fd:fa:64:25:0e:24:8f:6e:c4:30:3c:
         72:58:b9:e5:76:be:da:b2:68:d4:f6:db:bd:17:58:75:4b:49:
         54:50:2d:f0:a9:1f:6c:03:b4:43:e2:af:4a:fd:b0:3b:83:c8:
         d5:ef:dd:18:c1:7f:81:49:6f:c5:1f:a5:e2:5c:0c:6a:94:d8:
         6d:54:45:43:e2:e9:5f:43:a6:d8:21:cb:b7:d6:f6:df:dd:8b:
         3b:62:58:51:ca:b6:d0:48:00:f5:36:0e:6d:c5:5a:1a:6d:16:
         66:6b:30:d2:1b:ad:c4:3f:88:64:09:7e:bb:06:e7:74:0f:0b:
         2d:93:5d:df:a9:86:3d:c9:26:4b:14:79:d8:9e:6f:cc:e7:68:
         a8:24:62:13:3c:4d:52:d9:9b:44:b1:18:38:dc:82:b5:6b:85:
         0a:8b:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 01:26:06 2026 by rpki-client