Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce1f6775-46a6-395c-be95-20a16f81078e.roa
File:                     ce1f6775-46a6-395c-be95-20a16f81078e.roa (raw, json)
Hash identifier:          /yTaG2ePsZEYPf5LXs+OzZv85azV2oRfPwwtJI3ZgCU=
Subject key identifier:   3A:52:FE:40:33:61:E3:07:92:EA:E0:4A:E2:C6:0D:41:78:A8:32:C3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA794F8ADAF6A9226262762C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce1f6775-46a6-395c-be95-20a16f81078e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     264778
IP address blocks:        154.59.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:f8:ad:af:6a:92:26:26:27:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=53a72108-eaaa-4db3-bff4-999d5608ecf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:45:8c:f2:67:57:95:ee:40:1b:87:03:2b:
                    ba:f3:66:75:b4:97:b5:3c:52:4c:d4:2f:b2:b3:3f:
                    fc:38:ac:11:c7:08:25:ca:e5:81:bf:3b:b0:0c:70:
                    7d:2d:8b:74:4a:59:95:f7:6f:d2:cf:7a:bc:46:7f:
                    b7:29:4f:a6:42:ea:fa:22:29:d5:af:76:85:b8:82:
                    eb:c5:4a:8d:aa:37:77:ea:7d:5c:89:d5:53:b0:00:
                    5d:11:a9:80:06:79:6e:67:89:b2:dc:f4:a0:57:7e:
                    f5:fb:07:84:70:73:7e:06:73:b5:2c:d7:61:13:53:
                    3f:aa:86:97:08:56:8f:58:32:68:96:34:f9:37:a8:
                    1c:67:94:16:d2:c5:7b:ae:9c:55:28:56:46:7c:5f:
                    dd:4f:b4:1e:82:63:f1:20:62:9e:94:fa:c2:b4:be:
                    46:96:66:87:69:04:e0:d3:de:7b:25:1f:30:de:7d:
                    de:0c:06:51:d4:25:0f:f5:12:73:9d:9a:67:25:44:
                    72:8c:29:ae:13:45:47:3a:07:ea:80:77:db:aa:6e:
                    80:cc:b9:60:45:2b:32:2d:aa:a7:06:e2:60:84:6f:
                    7a:3b:cf:fb:e3:65:d8:bb:e8:0f:27:c9:9f:97:b0:
                    d0:bd:55:8b:fe:6c:a7:ff:08:89:a6:dd:46:77:21:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:52:FE:40:33:61:E3:07:92:EA:E0:4A:E2:C6:0D:41:78:A8:32:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ce1f6775-46a6-395c-be95-20a16f81078e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.59.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:53:07:d3:75:e6:c7:70:f1:f9:0c:77:84:f0:11:55:bb:
         ef:e7:01:4a:b1:7b:94:ab:02:12:58:32:bb:ca:23:e7:dd:e9:
         39:61:95:07:38:35:21:97:b0:bb:60:d1:45:ce:ec:1b:ea:45:
         1a:5b:bf:39:1b:a5:71:cc:b3:51:9e:ea:01:0b:25:c7:5c:a7:
         24:3c:be:27:43:8d:58:77:9c:cd:e2:39:0b:a8:75:d7:58:0d:
         9c:41:87:b2:f3:02:99:c5:1b:03:22:fe:ad:3a:8e:b9:7b:1a:
         ca:76:40:19:7c:a4:1b:6d:7a:64:b1:68:0b:5c:a8:1b:7f:bf:
         d8:19:40:ad:a0:47:73:1a:aa:6d:4d:6a:b1:f4:dd:ed:aa:0f:
         34:47:4c:0e:20:4b:63:33:37:65:74:32:0a:3f:6d:a2:5d:a7:
         7e:60:0b:54:58:e8:3f:20:9d:62:7e:5f:ae:ab:57:12:8d:25:
         22:69:c0:7c:12:b2:00:d0:50:ae:2e:b5:8d:49:75:ba:f7:73:
         4b:9c:9d:68:67:72:85:fc:6d:e5:1d:eb:ee:76:60:86:0d:9b:
         1f:17:d3:34:08:d2:17:23:bb:21:4a:0d:31:74:7c:43:50:f5:
         90:e2:f5:eb:46:a4:69:ac:49:53:94:bd:f7:6c:e7:d3:cd:32:
         d8:d5:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:05 2026 by rpki-client