Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa
File:                     dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa (raw, json)
Hash identifier:          sEDvI/2Bzcn9UiGcRaMLRHradMwe9P1NjYSfA+hi9lM=
Subject key identifier:   E3:20:E4:0E:EC:40:FD:B4:B1:58:5F:B3:C4:B4:62:3E:07:E7:CF:87
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584E016B2D2FDEF35B53C9099AC0
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     16509
IP address blocks:        159.183.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:2d:2f:de:f3:5b:53:c9:09:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=9a9ca813-696e-4c1a-ab52-7a6381b386a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:48:b9:77:37:10:6b:e2:68:70:44:df:18:
                    b1:55:b6:e2:66:5b:ba:ae:2c:85:fe:89:95:5f:ef:
                    0e:dc:ab:35:2e:e3:df:91:4d:f8:75:58:cf:9a:b3:
                    fe:aa:ce:10:be:8e:e3:92:cf:95:3f:38:98:ba:94:
                    bb:1d:d1:e9:04:ec:ec:3d:7f:0e:ab:d1:f1:73:83:
                    a1:42:28:7d:1f:b7:f1:57:64:e3:36:10:41:c4:83:
                    b0:5e:5f:9e:d5:c1:b6:9a:65:b5:f4:1d:8c:a3:fc:
                    a3:a5:ae:5b:8e:b9:c8:2d:f0:82:69:2e:e0:05:5e:
                    50:99:22:f7:64:b0:5f:48:fa:51:2a:c6:9e:0d:d8:
                    b8:2f:b8:56:98:eb:bf:ee:d7:0a:e0:b6:f3:6f:1f:
                    be:48:d7:40:ac:05:bc:66:31:c5:69:67:b0:75:41:
                    b2:86:aa:e5:48:8c:d7:82:2d:e1:76:bb:30:93:79:
                    d1:02:0c:4d:d1:fb:5c:ce:95:ee:5b:3c:e9:7e:5d:
                    63:0b:0e:42:91:05:04:46:05:a0:44:1c:48:e4:3f:
                    d1:2f:c9:2c:5a:23:1f:93:c2:9b:91:fa:74:c7:55:
                    98:4d:00:bd:55:e3:66:9b:10:c4:9c:df:e4:0e:8d:
                    28:2e:d9:b4:c4:5a:ad:20:60:dc:2a:b3:26:fa:31:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:20:E4:0E:EC:40:FD:B4:B1:58:5F:B3:C4:B4:62:3E:07:E7:CF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/dde2ebd1-37f4-3a48-811f-c139ff13a7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:9f:62:c5:1e:8b:92:f2:8b:4c:6f:c2:68:b4:56:60:da:
         c5:56:77:20:d6:b6:27:7c:e7:03:a4:4c:af:0d:a5:cc:0c:31:
         d1:bf:2f:05:7c:82:31:e2:25:13:f3:99:c9:1b:38:3c:ae:e0:
         66:6b:a5:b5:6d:3e:60:fe:af:a5:a5:8c:a4:e0:5b:fc:96:6f:
         5f:90:7e:73:81:fb:24:3c:d8:83:0a:bb:0d:1e:79:c3:c6:4d:
         e2:1d:db:f7:1e:31:80:d5:06:77:98:7d:f1:1b:b5:87:d9:63:
         2a:5a:1e:ad:e3:ea:9f:a1:52:c8:55:19:92:d8:67:11:49:2c:
         bf:aa:9f:66:0e:17:29:5a:d8:80:dc:c8:05:39:88:49:d1:6e:
         4c:55:43:97:7f:04:9f:af:2a:51:66:c0:f4:5e:b4:ef:b0:84:
         52:5a:6a:ab:fb:1c:57:db:3b:0b:7a:98:05:97:96:d1:5f:11:
         d1:3e:3a:57:db:83:36:7f:0e:96:99:45:26:54:62:21:40:0a:
         c7:f4:21:61:cf:73:58:8a:d1:5b:fc:9d:21:7b:32:8d:7a:25:
         61:32:7e:0e:f7:fb:86:9c:fb:09:41:43:1c:30:93:86:40:a3:
         13:d3:db:39:f5:28:43:0c:1c:55:9b:26:63:31:da:7a:7e:77:
         f1:cf:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:59 2026 by rpki-client