Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa
File:                     b1ccda99-02e2-3927-8808-445f6fc6880d.roa (raw, json)
Hash identifier:          dPiDM+IB4OWL/PYaESrtQDRO/UFRMjAZE99xA820cRw=
Subject key identifier:   45:5C:B8:61:58:C4:C3:75:DE:C6:31:3D:8E:5B:6B:38:BD:86:A1:B4
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F4328584DEDE0A704E2A8AE7DE8BB2900
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     22135
IP address blocks:        173.242.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:a7:04:e2:a8:ae:7d:e8:bb:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=154f2e1a-f665-41cc-946e-b3e4f394a427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:b5:88:5e:09:88:6e:87:4b:b3:0a:6c:c0:
                    77:46:fd:27:53:62:e0:d0:59:b2:26:2d:2d:2f:ff:
                    54:69:0d:19:cc:9e:fc:30:5b:f5:99:ca:49:7e:2d:
                    15:3d:de:ef:21:9f:b2:d8:c4:d7:0f:e9:e3:8e:89:
                    3b:53:d3:a0:74:4f:bb:81:cc:f9:f3:50:29:ef:70:
                    8e:18:1e:8e:cd:fa:7b:97:15:18:a3:85:d9:b8:70:
                    f4:81:33:93:33:bf:1b:5c:33:36:30:ad:7b:0a:b8:
                    cf:83:ce:ac:71:8f:ee:1f:a7:07:5d:8d:85:f4:c6:
                    18:e7:38:bd:ee:b9:71:53:ac:c1:7b:6a:65:a3:40:
                    68:92:65:9a:e9:17:fe:e2:c4:7f:1a:ab:b2:51:aa:
                    2d:ec:98:2e:92:10:e7:d7:13:35:78:cc:5f:c4:85:
                    85:b9:78:0a:db:90:a5:b4:a9:07:7f:86:63:40:b1:
                    83:0e:f7:73:99:0c:d6:31:13:a5:e3:cf:c8:12:c3:
                    1c:c2:00:f1:bd:9d:37:04:cc:d9:e7:97:0b:b5:54:
                    7b:4c:17:38:97:5b:a9:83:02:97:1f:39:22:99:b3:
                    98:2a:9f:ac:51:44:fe:22:f3:23:54:64:67:7e:d7:
                    93:cc:81:fb:a5:d1:bd:d0:e7:dc:96:e3:e2:37:95:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:B8:61:58:C4:C3:75:DE:C6:31:3D:8E:5B:6B:38:BD:86:A1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:28:d8:65:56:f0:7a:d1:8c:76:7b:fc:17:d4:d5:6a:8e:9e:
         da:c6:f9:9c:f4:07:94:02:79:45:16:9a:ef:f4:a0:2d:9e:cf:
         87:c5:d4:23:57:21:ff:32:71:d4:0c:92:56:b8:15:68:83:28:
         09:21:8b:f7:99:56:22:97:f6:a3:cc:85:a7:61:16:be:09:95:
         03:e1:89:a3:56:d4:5b:22:29:60:c5:40:7b:35:45:d4:a8:1b:
         d0:7c:b0:da:67:1b:39:5a:6f:75:46:40:01:26:b0:56:d2:fa:
         47:a9:ed:68:d1:fc:cc:e5:53:7b:58:ba:14:ab:35:32:b4:28:
         1d:bb:e5:cd:79:51:8d:34:5f:da:7e:a3:71:d5:8e:92:ce:e7:
         7f:3a:5a:ac:31:74:eb:90:f0:50:76:94:b8:e5:d1:3d:05:af:
         55:df:6b:6c:75:49:74:d6:32:b4:ba:fd:2c:31:89:bb:3d:4a:
         68:b3:54:1c:2f:5b:26:f9:63:32:ab:7d:82:97:27:0f:07:4a:
         8f:57:2b:e1:72:57:16:52:12:40:8c:d6:d8:cf:48:eb:62:43:
         56:b0:db:8c:0a:95:44:b8:de:29:f1:ce:37:98:a3:fc:06:a9:
         ba:4f:f9:7b:2b:15:3b:70:95:d4:09:33:be:8d:81:2c:72:00:
         e6:d6:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:24:58 2026 by rpki-client