Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/5da41306-2886-3f54-ae98-1b158a03c655.roa
File:                     5da41306-2886-3f54-ae98-1b158a03c655.roa (raw, json)
Hash identifier:          gEOJ7oXbAcE1c+fRri9pErtE7CAv2BJWb4a8UlkpXTg=
Subject key identifier:   2D:50:A3:33:5D:49:97:B4:50:8A:FD:A0:9C:70:34:6A:DF:54:17:C6
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584EA78FB7BBF9E08FE7F8168880
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/5da41306-2886-3f54-ae98-1b158a03c655.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19165
IP address blocks:        204.14.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:b7:bb:f9:e0:8f:e7:f8:16:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=50a089a2-9012-40ed-88df-52c4c4d4de7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:04:20:af:b3:4d:ad:c6:d4:c4:49:ca:3a:
                    93:b8:af:f4:10:08:96:e7:fd:81:fb:3e:3f:46:87:
                    33:ee:88:28:82:e4:89:17:e8:e9:66:37:d7:bb:08:
                    c8:1f:0d:92:0e:ca:ed:54:45:b6:64:13:2f:0a:e2:
                    a4:e7:39:46:9e:1c:38:81:8b:06:ca:54:c1:e7:86:
                    f6:cc:57:97:70:ae:b3:e1:6d:16:c6:45:28:52:5b:
                    4d:aa:f5:d2:e4:f0:9b:1f:19:e6:67:6f:50:65:99:
                    12:c6:95:2a:80:ff:b9:3e:e0:7b:e0:95:ac:7b:5e:
                    27:03:19:f9:91:ce:68:2c:7a:32:bd:fc:37:1d:d4:
                    76:93:4a:ef:6a:05:63:33:ef:50:fc:bd:b6:b3:a2:
                    1f:be:bc:54:59:9d:dc:55:19:69:ff:a0:8d:fa:68:
                    4f:37:b8:be:d0:a5:b7:b0:6d:f3:e2:ee:80:7c:7b:
                    c2:1e:2a:1c:1b:ce:e3:4e:09:c5:04:03:18:ca:1f:
                    be:68:71:54:15:bb:95:c9:32:64:45:91:f3:1e:ac:
                    23:65:d4:26:07:af:fa:6f:eb:f9:77:5b:a5:c0:fa:
                    38:64:ae:c2:d3:ea:6f:9f:2d:90:6b:71:ab:1d:91:
                    80:55:ba:fa:a3:42:cb:de:cc:c3:02:0f:be:aa:2d:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:A3:33:5D:49:97:B4:50:8A:FD:A0:9C:70:34:6A:DF:54:17:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/5da41306-2886-3f54-ae98-1b158a03c655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:28:12:56:9a:c6:0c:39:88:cc:71:34:f9:c5:73:f4:90:
         0e:36:32:d9:6a:8e:89:c6:5f:13:48:6a:e6:ee:58:af:99:9c:
         c4:9f:67:cb:31:f4:71:8c:23:29:e7:1c:66:b2:66:a8:ee:3e:
         e2:5b:3f:ad:dd:31:ec:9a:94:b3:98:f0:73:c0:81:30:e8:15:
         4a:e6:8e:ce:f8:48:cc:1e:ea:ef:78:13:1b:a7:3b:8a:c6:73:
         94:11:ca:c7:8b:57:18:45:57:86:5d:d3:ef:a7:6a:0e:0e:81:
         74:79:98:ba:dd:84:b3:79:38:b7:e4:f1:f1:c1:33:83:fb:bb:
         b6:ef:0b:5c:73:ee:bf:07:e0:12:be:5c:8b:14:c0:57:55:ba:
         2c:51:40:05:42:ee:34:0a:d0:0f:9f:fe:70:a7:92:b4:a7:57:
         be:24:91:0e:05:03:85:a5:c3:e2:e8:a8:53:42:9d:c9:9a:96:
         f1:14:65:7a:5a:14:c2:2f:60:28:18:69:85:da:b3:5c:e6:a4:
         01:17:50:17:b6:6f:37:00:ca:df:0f:20:0b:8b:1f:b5:a7:cb:
         8c:d6:6e:d5:16:86:d3:ed:65:15:9c:92:0c:e2:4b:66:93:75:
         d6:ba:cd:5f:5c:2e:35:95:01:91:df:8d:3c:89:39:39:2e:9c:
         e8:46:c6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:13:16 2026 by rpki-client