Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa
File:                     4e9f50cf-171b-33f5-a287-280df82c96bd.roa (raw, json)
Hash identifier:          p3CxVCd7ZAgVRxvqVa3W4F7GAClzYldVd5TeTRAgR6s=
Subject key identifier:   CE:7B:5A:06:D4:FC:29:FC:7C:97:62:F7:0F:9B:C8:AC:12:7D:14:ED
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F4328584D6802E946951C58F3B975AF00
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa
Signing time:             Sun 05 Apr 2026 14:11:31 +0000
ROA not before:           Sun 05 Apr 2026 14:11:31 +0000
ROA not after:            Sat 04 Jul 2026 14:11:31 +0000
asID:                     27395
IP address blocks:        155.254.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:68:02:e9:46:95:1c:58:f3:b9:75:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Apr  5 14:11:31 2026 GMT
            Not After : Jul  4 14:11:31 2026 GMT
        Subject: CN=78ee4f18-9d0f-4c53-a061-60852098c2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e3:eb:29:05:54:a8:52:a2:ce:ad:23:d9:f9:
                    42:5c:da:23:27:70:4d:26:e3:54:04:dc:08:dd:a5:
                    0e:9a:81:6d:99:5c:fc:19:66:99:c3:81:b8:f7:6e:
                    5f:dc:1d:06:e4:f9:81:0c:fc:41:f6:9f:29:ec:30:
                    5f:15:6c:e2:d4:45:61:43:7a:83:f8:1c:43:3e:c1:
                    18:d6:c8:33:95:65:93:7a:5c:b8:16:60:9f:50:c6:
                    27:72:00:49:a2:b3:de:ea:18:eb:fd:2f:3f:c5:b5:
                    f8:ed:2b:53:d0:ec:9d:44:1d:73:4e:8b:0d:0d:b2:
                    b5:44:00:d8:a8:ab:76:77:7e:70:32:3d:e4:62:2a:
                    10:96:14:59:00:af:d0:de:85:8a:7e:a7:38:ee:26:
                    e2:7c:ee:81:a1:2f:69:4a:b3:46:f0:86:55:e7:3b:
                    dc:3f:85:04:1c:09:64:8c:5c:4f:33:9f:23:8f:f2:
                    0e:08:ab:12:85:c5:af:3a:fd:c2:88:f7:8c:af:00:
                    d1:4c:2e:9c:38:db:71:a2:85:6c:89:2e:a5:ac:75:
                    85:1d:92:84:be:a7:38:69:e9:0b:56:7f:b4:a8:32:
                    b3:7f:ed:cf:e7:e1:7a:c0:8c:0a:1a:48:3e:6b:ef:
                    fe:73:3f:fa:7e:3a:58:d7:36:0c:72:1a:d2:7f:9e:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7B:5A:06:D4:FC:29:FC:7C:97:62:F7:0F:9B:C8:AC:12:7D:14:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:b2:56:84:cb:76:11:15:78:65:03:3a:5b:06:73:1c:fb:
         d4:ac:30:95:45:f8:d1:b8:ad:05:c3:1c:55:e6:0f:3b:5f:95:
         71:66:c6:67:c3:6c:7d:4e:82:6d:10:47:cd:ce:df:2a:60:0f:
         14:67:b6:5c:e5:f2:9a:45:64:e2:60:50:85:95:95:d1:05:8f:
         21:c2:d4:6b:8d:63:0f:91:44:cb:b7:71:00:9f:9a:66:fb:03:
         71:57:ee:21:08:19:09:cc:b4:8c:9b:0a:0c:bd:c1:17:d2:93:
         29:6e:c1:8d:94:02:64:25:69:33:c8:30:83:e0:19:16:85:67:
         18:79:c8:e1:fe:33:e6:4f:c3:c4:03:2d:d1:34:a3:e7:3e:22:
         6c:48:64:ae:a3:4a:04:f6:28:7a:79:2e:72:0b:19:0d:88:0a:
         23:be:d6:e8:93:d6:93:93:4b:5c:8e:d2:1b:87:b3:11:83:b1:
         25:1d:e1:f0:97:8e:05:c1:0a:70:20:a6:60:eb:71:0a:03:33:
         c3:03:5f:9e:30:9b:d9:89:14:49:70:1d:af:8c:5c:30:0e:d0:
         e9:07:c7:f3:8a:b9:b5:0d:8e:ac:ff:46:19:64:cd:e5:ec:43:
         ba:ca:4e:e6:4e:df:95:36:13:18:20:2d:7c:ff:e8:e3:ef:2d:
         54:26:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:57 2026 by rpki-client