Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a669a1c-9f66-3814-939f-990c4560c48c.roa
File:                     0a669a1c-9f66-3814-939f-990c4560c48c.roa (raw, json)
Hash identifier:          +Q8wbvuk/5jxMW4mdtuZmOXU7LuFBAi/82qfMyibyMs=
Subject key identifier:   84:21:D9:91:E7:28:D8:B0:DE:03:4A:F9:DD:AE:46:65:7A:B8:DF:2A
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584CF6ECDB9766CFAB7F35927300
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a669a1c-9f66-3814-939f-990c4560c48c.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     11377
IP address blocks:        159.183.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:db:97:66:cf:ab:7f:35:92:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=27323d10-2d9c-4f89-baaa-96f36f1135cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:1c:06:bc:1f:5e:5c:50:da:34:91:8c:a4:
                    c3:17:3b:74:b3:ec:99:d2:f4:f7:23:1e:35:7a:de:
                    40:4b:a4:9f:e3:2a:09:60:b8:54:49:4b:a8:6a:6d:
                    94:a1:58:7d:73:75:85:fe:5c:0a:83:23:ea:2a:82:
                    e5:87:dd:57:d6:22:5b:19:e0:da:d3:3e:70:f7:67:
                    9b:d3:7d:96:16:99:9e:55:b1:89:99:73:ef:02:0e:
                    e2:0b:ef:8f:b2:af:4f:f5:0c:e3:90:6b:8c:24:79:
                    43:0b:0a:27:45:b7:76:94:8e:11:f8:37:e3:d6:bf:
                    cb:53:25:81:74:a1:2d:92:54:97:72:2d:1e:ef:e4:
                    80:5e:ce:81:1f:6a:32:01:49:c8:37:2c:f7:b8:69:
                    25:bc:b2:50:81:95:8a:15:bc:03:f2:26:fd:76:f3:
                    0c:ba:bc:89:03:0a:e0:b6:b6:c3:bd:42:65:6f:0a:
                    9e:0a:81:34:8a:57:7c:f9:33:55:5e:f4:d1:7e:59:
                    5f:8d:5e:97:e0:c6:6f:d4:f6:cc:91:15:c9:0c:0a:
                    32:a5:95:d7:94:f9:6d:75:64:55:a2:27:0e:56:e5:
                    de:3a:ed:a8:16:de:a9:4d:7b:22:a2:b3:a2:4d:aa:
                    60:e9:a4:66:af:87:77:f3:27:19:e2:37:82:05:b2:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:D9:91:E7:28:D8:B0:DE:03:4A:F9:DD:AE:46:65:7A:B8:DF:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a669a1c-9f66-3814-939f-990c4560c48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:3f:ed:1a:a3:fa:7a:7f:50:09:19:86:a8:d6:10:28:dd:
         d7:43:1f:40:d6:99:bf:71:49:a7:13:8e:ad:d7:bd:1b:f9:43:
         88:53:e6:03:28:76:b6:42:91:68:99:ad:78:45:e2:7b:92:e9:
         6a:67:6e:c8:60:04:75:38:7f:17:90:89:e2:b0:88:46:d0:cb:
         fb:7f:09:5a:a3:5b:83:fa:78:b3:c3:76:e1:18:d8:88:e9:0c:
         30:6d:ae:e7:b2:ce:aa:ad:ec:d9:97:f0:87:4c:71:48:cd:bd:
         7b:d1:00:2d:e0:b8:1f:a3:47:10:ca:b9:26:5a:a8:12:33:de:
         6c:62:45:c5:8b:a0:99:4a:fe:e4:1f:6c:b0:ff:b6:94:e3:8e:
         87:c0:15:21:26:23:b8:8b:cd:7a:5d:d2:74:2b:cb:6b:89:5c:
         b5:9a:e9:0f:ab:35:de:47:30:7b:80:d5:3b:18:c3:85:2e:40:
         63:bd:9d:04:d7:f8:1c:fd:12:7e:56:94:49:18:19:51:f1:d8:
         c2:87:df:b2:58:5a:45:0d:f7:ce:b5:1b:64:d0:b7:60:45:34:
         74:5f:00:ed:12:10:69:93:36:42:c1:5b:60:07:d2:4c:2a:b3:
         5b:a0:08:1c:a6:e2:f3:b3:50:8e:d9:11:89:3f:78:df:79:de:
         2f:13:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:49 2026 by rpki-client