Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa
File:                     fc927540-428b-37cb-903f-ca1e8fb6454c.roa (raw, json)
Hash identifier:          xqRKMtNR2kut1UyEGEwarxjiddTUtE5sNih23qy1jP0=
Subject key identifier:   17:90:3B:6E:AB:73:26:43:11:CA:2D:30:0A:2C:C4:02:25:88:16:B3
Certificate issuer:       /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial:       010D0C9F4328584E104EF2FB72D89E4C16BBB0C0
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     160
IP address blocks:        198.177.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:f2:fb:72:d8:9e:4c:16:bb:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=8f416ea3-d56f-4e61-93dd-036a68e4e60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:bf:57:49:73:02:05:8a:6b:e6:5b:4e:86:
                    3e:21:7a:34:7c:d6:61:08:b5:1d:5e:6c:8b:38:60:
                    2e:1a:0e:c2:64:4f:55:9a:9d:01:a7:31:8d:cd:2c:
                    90:dd:78:ed:01:04:86:77:df:35:62:68:85:66:76:
                    af:83:66:ab:d9:ac:1d:fd:1a:b9:89:fd:53:58:dd:
                    90:7c:72:24:d2:2b:bb:9a:a0:6e:a8:49:b9:56:e7:
                    76:5c:b5:e7:ff:87:a2:5c:4e:9c:82:70:85:cb:25:
                    09:df:df:82:c6:2f:4e:0b:8e:da:16:b4:92:0d:b7:
                    6a:4d:20:56:b5:15:82:f2:f9:aa:9f:b4:1d:14:31:
                    d5:83:7d:7f:cc:14:76:35:6c:a7:da:c7:2c:1e:84:
                    27:37:0a:4d:22:4c:b1:10:35:bd:ac:74:7b:4b:15:
                    32:d4:18:87:7a:61:4f:84:2c:ee:ec:7a:52:9e:c2:
                    e6:11:72:5a:68:66:25:9f:17:b2:1e:31:06:2d:64:
                    c7:b7:72:e2:2a:34:5f:a9:41:60:cb:ed:65:cd:fe:
                    e0:2e:2a:eb:24:c9:bd:de:b7:15:f5:06:ce:30:c5:
                    a0:57:7c:a4:49:92:45:5f:f8:e7:04:0e:52:27:d7:
                    2b:04:4d:83:42:a9:fe:02:55:88:9a:31:73:90:e3:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:90:3B:6E:AB:73:26:43:11:CA:2D:30:0A:2C:C4:02:25:88:16:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:52:28:6b:81:4e:70:83:d2:ce:27:48:35:04:87:36:c5:5f:
         02:e0:ec:7a:bf:e3:9b:2a:70:61:6b:8a:6b:c6:8b:e1:8e:18:
         f5:66:a4:ca:ff:b1:a7:f3:16:2e:5b:65:8a:26:12:fe:e4:cc:
         2c:3d:dd:4f:29:f2:7e:7b:2a:a7:65:19:51:fa:32:0e:8b:7c:
         36:7e:af:d0:51:5a:67:0e:3d:25:bb:27:07:f0:c5:5a:a0:b9:
         75:00:51:3d:0c:d2:ce:64:78:1b:9d:31:3d:92:9e:f9:dc:f0:
         05:33:91:49:07:ca:f3:4c:f2:ee:48:9f:b3:0a:98:6b:fa:41:
         77:68:fe:8f:ad:7b:95:c7:cc:76:b2:ba:94:fb:1e:e0:93:0a:
         06:0e:1d:f1:53:9a:3f:19:f3:0c:79:5b:e6:5a:ab:b7:8b:b6:
         99:7e:98:48:f5:78:f9:77:f6:b5:1b:fc:ed:25:65:30:c0:be:
         7a:47:7c:49:10:c9:b4:9a:75:9e:be:3a:12:43:18:b8:cb:9c:
         a8:9e:c4:08:bc:0c:30:27:67:d6:19:33:5c:ec:0a:4f:b7:74:
         ca:da:c0:03:0f:89:d6:ed:e1:9c:aa:24:79:07:56:dd:55:7f:
         71:78:2f:ac:de:99:ee:f7:85:99:92:58:5b:3d:83:be:c2:3f:
         9b:83:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:36 2026 by rpki-client