Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e724b59-f02e-3a50-ac0b-3420c26a174d.roa
File:                     8e724b59-f02e-3a50-ac0b-3420c26a174d.roa (raw, json)
Hash identifier:          YEfl+tVblclcJgf0P64R4Pq/8HL88ZzTDjNwrz3YWhE=
Subject key identifier:   64:46:2E:36:B5:6B:68:53:B9:3E:D2:57:C2:BF:87:97:70:1C:F3:87
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584FAA359EF196A5B6C58BD2DD80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e724b59-f02e-3a50-ac0b-3420c26a174d.roa
Signing time:             Thu 29 Oct 2026 16:50:55 +0000
ROA not before:           Thu 29 Oct 2026 16:50:55 +0000
ROA not after:            Wed 27 Jan 2027 17:50:55 +0000
asID:                     0
IP address blocks:        154.7.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:aa:35:9e:f1:96:a5:b6:c5:8b:d2:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 29 16:50:55 2026 GMT
            Not After : Jan 27 17:50:55 2027 GMT
        Subject: CN=9d67096d-88c8-4b02-9545-041073186d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:da:aa:f0:27:4f:68:23:22:3e:64:20:5b:
                    80:3e:a8:08:dc:08:f8:f6:d2:47:60:1d:99:60:ce:
                    ca:ab:4a:17:f9:2e:4a:f7:9e:af:f6:85:ec:f0:f9:
                    a0:58:3d:0d:43:e0:a5:c9:a5:70:a2:64:c0:89:21:
                    07:28:21:3f:32:08:db:a6:f8:2b:4e:f8:ae:9d:1c:
                    64:1a:b5:3c:6c:6d:cf:03:1c:a3:a4:73:a8:f7:04:
                    47:08:7b:30:1e:d9:f7:f4:aa:f6:8d:de:1f:3c:b8:
                    ed:c8:69:92:f9:a0:16:51:bb:34:f0:2c:2b:07:4e:
                    5e:95:88:60:28:21:9f:49:3d:22:60:92:49:07:46:
                    d0:2d:d3:d9:f3:28:4a:c6:06:dc:74:3f:a8:80:57:
                    1e:fe:77:ac:5b:7f:76:c3:09:32:0a:19:77:b1:e2:
                    f7:e2:f5:20:5f:03:9b:35:9f:92:9b:5b:3c:cc:e5:
                    b6:a8:ea:e4:0b:e7:3d:44:d5:2b:a8:26:25:9f:ab:
                    5d:b2:b8:ff:1a:4e:bb:fc:89:fb:16:72:78:09:83:
                    dc:fe:53:d5:f8:06:10:f0:26:48:68:ba:59:52:c8:
                    1d:11:66:37:04:0f:71:71:92:0f:04:52:25:11:63:
                    58:26:e3:00:2f:dd:74:a2:81:fb:e3:f6:84:cb:5e:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:46:2E:36:B5:6B:68:53:B9:3E:D2:57:C2:BF:87:97:70:1C:F3:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e724b59-f02e-3a50-ac0b-3420c26a174d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.7.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:9e:6f:ad:1a:32:36:c5:17:d0:4d:54:67:95:bd:1a:34:41:
         ce:9b:3b:09:e8:1f:a3:02:04:c1:a9:07:36:f7:23:1e:22:c5:
         02:1f:4b:97:2b:b8:7e:15:06:ed:b2:d9:16:59:01:3d:43:48:
         b4:05:ac:d6:1c:24:9c:f7:84:b0:62:19:95:77:26:54:46:79:
         5c:07:8c:54:af:b3:35:86:ee:1e:ce:2e:46:7f:9f:a0:bc:e6:
         bc:67:30:18:c8:39:4b:b4:10:87:e1:2c:26:58:df:01:c4:aa:
         2a:f4:90:1d:5f:4d:d5:6e:52:85:8b:14:dd:e5:78:62:cb:0e:
         2c:cd:9e:92:cf:45:e2:1b:bf:73:1e:f8:8b:ae:97:16:dc:98:
         47:9d:62:45:9a:e1:a9:bc:7d:88:25:a6:b5:a4:f4:b9:f1:d2:
         52:59:67:64:c0:87:c3:f5:9f:30:3a:1d:1f:e7:0b:d8:fe:3f:
         e6:73:aa:22:ea:b7:8a:40:49:7e:33:50:16:7b:d3:56:54:75:
         8a:e1:4d:90:69:63:24:1b:22:0e:68:02:0e:48:08:84:32:7a:
         9e:4e:60:5a:0e:57:fc:16:44:8b:48:d4:08:24:a5:4a:4f:a0:
         15:7d:09:b6:bb:27:6e:24:bf:7a:21:51:4b:1a:4a:8c:f1:c7:
         ac:21:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:40:56 2026 by rpki-client