Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa
File:                     800c6431-3fb5-37fb-bd44-84155cafeb2d.roa (raw, json)
Hash identifier:          KGbA3oVrihIbv6FSSumqfd9pZIb37OGjx5cGzDCOgkc=
Subject key identifier:   43:0A:8B:6B:29:A4:87:C9:AA:B2:DC:0B:9D:76:20:6C:B7:9C:0C:5D
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584EF87CD56FBB54D43DFA853E40
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     53334
IP address blocks:        104.153.198.216/32 maxlen: 32
                          104.153.198.217/32 maxlen: 32
                          104.153.198.218/32 maxlen: 32
                          104.153.198.219/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d5:6f:bb:54:d4:3d:fa:85:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=d9c6089e-354d-46c4-84ab-248dba85da30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:13:ce:96:e9:55:73:53:93:55:99:8c:b3:
                    35:08:5b:8b:b2:39:bb:b1:ef:c9:cb:c9:21:49:67:
                    31:31:bd:3f:de:6e:93:8a:70:81:58:9b:f9:16:66:
                    3e:5c:0a:d2:85:24:a2:99:a0:77:a1:71:cc:c1:bb:
                    13:64:b8:c8:5c:24:f3:de:3e:cd:c2:4e:52:fd:5f:
                    03:3d:01:1a:f3:2b:70:87:b0:3f:1e:51:4f:1c:71:
                    a3:97:96:18:ff:a3:96:dc:63:ee:33:f1:a0:e5:e6:
                    cf:ec:fc:11:03:65:55:d1:9f:a5:56:b3:1c:ae:0d:
                    aa:ef:b0:cc:83:70:d1:f0:b7:88:d4:2c:e9:60:51:
                    40:f8:33:39:88:1d:8e:d3:c3:c9:af:0f:12:ac:60:
                    dc:c2:7f:b3:0e:c4:4c:7c:01:28:26:7f:6b:55:ba:
                    2a:85:d6:34:f5:52:0a:0c:16:eb:bd:6b:44:50:79:
                    8e:a1:51:02:3d:18:72:63:d7:0d:fa:1b:3a:de:40:
                    6e:e8:9e:a5:0e:a5:ba:2b:ba:fb:46:84:6d:13:85:
                    8f:46:3b:77:cc:1d:f2:e5:34:2d:4b:ee:74:6c:ea:
                    3b:4a:bb:ca:53:98:a5:7c:1c:87:2f:d6:c1:07:9d:
                    6b:5b:d2:c3:53:60:15:08:08:b0:e8:d8:7f:8d:82:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:8B:6B:29:A4:87:C9:AA:B2:DC:0B:9D:76:20:6C:B7:9C:0C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.216/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:6c:32:65:11:87:c8:dc:a6:d3:c5:23:57:04:13:ec:72:
         2f:e7:78:24:db:f1:2d:5e:a1:c7:75:bd:89:7d:4b:1d:06:4a:
         c8:ab:aa:47:09:ea:6b:47:d3:e8:24:46:04:37:bb:13:97:5f:
         b5:c8:26:f1:95:8c:9c:55:43:c0:ae:c4:0c:54:6e:eb:d6:f3:
         27:45:4f:78:fd:40:a3:6d:0c:1d:e7:49:46:b4:65:61:f4:e9:
         82:9c:70:95:c0:ef:db:ce:b5:0d:7e:df:41:b9:93:d7:f0:f9:
         1b:60:6c:64:b6:a2:72:0a:cb:9a:87:83:44:88:5e:ec:da:dd:
         e3:91:1a:aa:ef:76:c2:26:35:f4:2a:0f:5e:60:0e:68:29:1e:
         ee:84:dc:4d:47:4e:be:7d:2d:ae:69:99:c7:08:e4:d1:f9:7f:
         ec:29:ca:98:56:01:cc:5b:31:cc:fc:f3:be:c3:88:37:cc:fe:
         33:e0:c7:3f:75:9e:e4:78:1d:42:24:85:3b:87:af:23:3e:1c:
         a8:5c:c9:46:a3:5e:df:02:99:29:15:49:dc:bb:d9:8e:2b:51:
         de:47:f4:38:ab:63:86:ff:e0:02:66:4e:92:03:49:90:c0:18:
         d0:fa:c5:c5:ed:ef:33:c0:46:f1:0c:de:63:e2:f7:26:2d:0c:
         e7:c8:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:21:31 2026 by rpki-client