Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1d073053-e0a8-3cfb-820f-c86fe1f31e9e.roa
File:                     1d073053-e0a8-3cfb-820f-c86fe1f31e9e.roa (raw, json)
Hash identifier:          PBKzSO1fz9r5NjWcC/VhUbAAqxOO9EOx3cuEB9t7Zc0=
Subject key identifier:   A7:30:AE:6D:0B:A9:B7:60:F7:C2:2F:16:30:A1:31:60:FA:7B:6D:24
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F3E47C93CC24AEA8CFABD2300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1d073053-e0a8-3cfb-820f-c86fe1f31e9e.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     215224
IP address blocks:        154.6.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:c9:3c:c2:4a:ea:8c:fa:bd:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=e956ae3a-9db8-4811-b79e-1e0c217876ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:ac:1c:5b:18:4a:a6:75:74:76:38:9d:ce:
                    a6:8b:00:ee:7b:f1:75:eb:5c:db:d9:4f:fb:02:a4:
                    6a:d5:ed:5e:ca:c6:f5:d4:c0:a0:63:46:f3:2e:fb:
                    d1:71:6e:34:d1:ea:50:79:05:53:58:b8:5c:c5:55:
                    39:8f:23:e9:bb:d9:f7:11:b1:60:f0:4a:7b:44:a3:
                    0d:54:e8:28:81:27:3d:63:ed:53:26:0b:ea:8a:d5:
                    c5:65:ea:b0:7d:27:e0:4c:8b:bc:1f:e2:76:56:18:
                    c7:3e:64:41:90:e5:b2:c4:3b:14:d3:6d:bd:7b:87:
                    b9:2b:96:e4:1d:15:fe:a2:e0:e8:25:6c:b5:c5:bc:
                    c6:0f:13:85:a1:0a:bd:47:ad:e0:48:cb:90:da:7d:
                    e4:6f:7f:e4:08:1b:10:8f:74:66:7d:be:9f:41:52:
                    c7:c2:5a:c0:16:c0:e3:50:58:3f:57:c2:cc:16:e9:
                    ea:bc:78:d9:3a:37:f5:82:85:34:82:4b:b0:0f:5f:
                    d5:7e:90:b3:d3:69:72:29:d8:53:8a:3f:21:b6:bf:
                    db:3a:f2:08:b5:6e:d5:e0:50:e6:b0:ef:25:e0:b0:
                    7a:61:ee:1e:d1:5e:af:28:d2:87:19:52:52:8f:00:
                    8a:3f:92:e2:80:c6:a4:bd:d2:8c:11:35:3f:5a:7a:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:30:AE:6D:0B:A9:B7:60:F7:C2:2F:16:30:A1:31:60:FA:7B:6D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1d073053-e0a8-3cfb-820f-c86fe1f31e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.6.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:fd:3b:76:b2:c2:ad:39:a2:7e:55:bf:e1:20:8c:58:17:84:
         81:7d:b0:b6:e6:f3:65:e7:e7:e7:54:66:cf:c1:54:aa:d8:bc:
         33:a1:59:c4:6c:1c:45:16:44:19:03:a8:a8:ca:9e:9c:cc:65:
         44:a7:85:2a:06:fe:ee:62:f3:64:03:ce:e3:58:57:ca:72:6d:
         63:6f:c3:fc:5a:24:4e:91:3e:5f:d7:67:d0:69:6a:cc:ce:24:
         d5:89:2e:05:99:a2:63:d0:e7:08:21:81:d7:9d:ad:21:64:0c:
         8b:01:a0:93:11:eb:29:33:4c:87:2c:91:4a:66:d9:89:7b:af:
         c1:39:50:2e:b6:3b:ef:de:0b:13:02:3e:9b:2c:a2:e2:2c:1b:
         5c:5b:2c:61:f7:da:7b:3a:a1:47:7a:38:de:1c:90:c5:32:57:
         62:16:69:b3:a3:f9:a2:81:56:a5:8e:fc:bf:ea:a5:f9:41:89:
         8f:66:f1:cf:86:28:2a:2f:c8:cc:45:1a:b8:a6:0c:a9:15:e8:
         15:89:bd:82:47:54:4f:b9:3f:7b:ca:ea:2c:8f:a9:a3:7f:53:
         41:18:a3:4f:53:42:95:f0:57:af:71:72:e0:16:c6:05:42:7c:
         75:59:8e:09:22:2d:ee:29:de:9c:4e:ff:0c:87:07:6a:df:55:
         0b:2a:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:26:06 2026 by rpki-client