Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa
File:                     35004e6a-5b7a-3715-94cd-50fae5247ec3.roa (raw, json)
Hash identifier:          n9PS+VD8SFIcny4KnQ62DUnOBt/D/qQsIBGE8pV/+h8=
Subject key identifier:   CB:7F:B0:E5:3C:06:DB:77:59:91:B7:F6:8A:55:D9:58:9C:52:07:71
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584D75D53DD177B4497CF2526D00
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     53334
IP address blocks:        104.153.198.210/32 maxlen: 32
                          104.153.198.211/32 maxlen: 32
                          104.153.198.212/32 maxlen: 32
                          104.153.198.213/32 maxlen: 32
                          104.153.198.214/32 maxlen: 32
                          104.153.198.215/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3d:d1:77:b4:49:7c:f2:52:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=7b6b773a-e6fe-4be1-8ccc-b21e18e74791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:91:c5:15:08:a5:57:20:26:29:f9:86:f2:
                    34:32:7e:0c:86:94:af:29:05:51:9a:2e:68:ff:4c:
                    50:ff:55:58:9a:33:bb:a3:9a:1a:b2:e7:3a:42:00:
                    70:cb:ed:b3:25:07:ad:3f:57:45:b3:cf:b5:2f:1f:
                    f5:9f:f8:a6:55:ac:45:0f:4d:13:e4:ff:3c:4e:73:
                    91:ce:2f:a5:c8:a2:77:23:7e:89:f3:ac:5b:17:9f:
                    bf:6e:00:4d:af:fb:ff:aa:8f:1f:77:0a:ca:8a:16:
                    4b:48:12:ae:05:a7:82:ea:2b:08:02:51:7f:5f:ef:
                    03:c8:5e:e3:a4:44:28:2b:06:94:2e:b6:ba:64:39:
                    da:c2:ae:c2:21:6a:4b:b3:6e:73:f7:ba:1b:c1:21:
                    c0:2f:d1:22:92:df:82:80:71:4e:87:30:55:e8:9d:
                    65:bd:76:e8:44:8c:ea:58:a8:c1:aa:35:d8:af:0c:
                    fd:bb:ff:8c:f1:f9:e8:b1:f8:53:9d:b3:7e:14:2f:
                    d2:d3:c3:d4:b7:34:5c:eb:93:81:37:17:8b:3f:34:
                    c4:c8:6f:33:c0:82:db:25:d0:24:c7:6e:ae:08:8c:
                    75:0e:f8:31:14:f5:d8:95:8e:c6:a9:04:e5:6b:54:
                    d3:cd:a1:ca:16:f5:75:23:5a:ea:e3:23:f9:5e:de:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:B0:E5:3C:06:DB:77:59:91:B7:F6:8A:55:D9:58:9C:52:07:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.210-104.153.198.215

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:95:7d:f5:85:47:f1:7b:fb:59:05:ab:51:c7:10:33:62:
         3e:92:8a:d7:37:fd:60:d0:c3:ad:a6:68:27:2e:fc:81:85:6a:
         1e:20:0b:7d:0d:e7:e6:a9:0a:85:1c:89:af:d3:41:f0:e5:fc:
         27:4d:3c:9b:5c:e6:93:35:e2:ca:50:03:0c:20:2d:93:0a:55:
         1d:f4:ee:6a:8c:fb:01:76:67:4f:63:02:ac:9a:c6:49:93:c3:
         60:0b:53:0d:d7:3d:d9:c8:96:62:b4:71:f1:df:5f:82:91:1c:
         e7:23:b6:50:e4:f8:48:ba:33:32:e1:f0:4e:7d:43:c4:33:35:
         32:74:32:ae:37:5f:fe:b4:03:f7:e4:30:35:79:d7:86:af:af:
         a8:a4:35:2a:44:46:a6:60:e8:80:66:bb:5d:de:2f:c8:56:36:
         55:3c:bb:e1:3e:77:9c:d5:35:2a:97:4c:14:3d:8c:8c:55:73:
         75:d7:f0:79:ce:94:5f:9f:5b:b0:1e:c9:c0:3f:02:37:3b:62:
         52:87:b3:55:43:4b:2b:5c:38:c1:1c:a4:61:72:33:cf:26:24:
         82:a2:73:da:2c:8f:c6:73:65:0a:11:84:87:f1:44:ea:5f:97:
         db:ab:30:ed:1b:50:2d:c3:7c:e5:5d:95:c2:1a:bb:4a:b9:b6:
         56:b5:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:36 2026 by rpki-client