Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffe6927f-185b-33c2-a452-3c92fb49b98a.roa
File:                     ffe6927f-185b-33c2-a452-3c92fb49b98a.roa (raw, json)
Hash identifier:          39myjraHM8hkn+JweCHLSHUclw/A8qBOaeEQsxOIYj0=
Subject key identifier:   93:CB:38:BF:5B:76:B0:8A:FF:63:EC:C1:CE:FF:03:FA:B5:69:F7:B1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA79389ED0988D27FD2A14740
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffe6927f-185b-33c2-a452-3c92fb49b98a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     273887
IP address blocks:        154.13.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:89:ed:09:88:d2:7f:d2:a1:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cb9024b2-fe03-406e-9d0a-ff8d765dfcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:3c:40:da:f4:04:13:3d:e0:da:36:c4:a9:
                    2b:1a:7e:bc:ed:29:e1:98:ad:71:15:31:f3:8c:53:
                    5a:86:0d:ca:ad:fd:fa:93:d5:e4:12:d6:04:cd:98:
                    a1:41:f3:f1:ab:a8:80:51:c9:c4:38:96:c5:2d:1d:
                    b4:a1:f4:e2:31:73:b3:d3:65:d5:d6:46:e7:d0:91:
                    bc:40:30:b9:d0:14:23:44:3a:0d:dc:8f:70:15:aa:
                    63:48:90:1b:08:8f:b8:17:05:81:cb:e7:ea:bb:b7:
                    e9:2f:bd:dd:01:32:65:52:51:78:4a:e9:88:d5:59:
                    5d:b1:9f:85:d5:9c:e7:66:e5:5e:57:6c:ba:f6:9f:
                    b8:f8:85:5f:ae:64:4f:90:4a:29:26:41:ac:2b:fc:
                    f9:b7:85:d1:25:46:22:24:61:71:0d:73:49:67:49:
                    18:76:e2:b4:f2:5c:ca:03:9c:b0:e9:68:02:e4:9c:
                    d9:f6:83:bd:3f:d0:96:2c:fd:88:c7:08:8e:74:b2:
                    29:6f:44:c7:8a:b1:7e:bf:8c:6b:e6:cd:7a:19:a9:
                    dd:f0:ec:f2:f6:48:bf:4a:1d:e4:c5:65:c2:a2:21:
                    c7:06:b6:78:fc:95:6d:62:57:ee:e5:90:7b:5c:53:
                    2b:a3:6e:39:00:f1:04:1d:ad:ae:a2:85:6f:40:42:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CB:38:BF:5B:76:B0:8A:FF:63:EC:C1:CE:FF:03:FA:B5:69:F7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffe6927f-185b-33c2-a452-3c92fb49b98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.13.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:76:23:c1:6d:ad:0e:d4:64:92:00:84:c5:e8:df:93:26:
         c1:b0:9e:cc:f0:35:eb:98:29:8f:f7:0b:f0:e4:7d:6f:5b:df:
         ab:5e:ae:66:d6:59:57:15:74:d2:b7:9a:6b:5e:7d:8d:80:d4:
         69:5d:05:fe:5c:9d:fc:0e:28:66:50:43:0b:d2:f7:8b:37:5f:
         e4:db:a0:05:e5:93:84:1b:69:49:f4:57:27:05:cf:b6:41:1d:
         35:96:b8:db:49:81:05:09:41:e0:d0:fe:d0:f9:01:aa:3b:8e:
         18:88:56:e8:93:59:3d:a6:71:09:c9:42:e1:ce:a5:f4:92:1d:
         44:d7:c0:0e:2b:ba:53:bc:08:78:79:5f:c6:8d:8a:19:50:4a:
         96:e6:44:6d:52:2b:9a:4c:13:ae:fa:68:e3:3c:15:87:b2:3a:
         50:c1:b7:85:07:1c:da:5e:19:5b:3f:0d:a1:a5:2e:9b:e1:68:
         21:6c:9b:fb:47:05:bb:7b:65:44:6f:49:42:7b:35:ba:a4:4d:
         31:bd:65:7d:10:bb:dc:5b:ce:fc:05:7d:11:00:f6:db:f6:14:
         d7:59:b5:1d:0e:c7:64:b1:4a:73:83:91:5d:d2:27:ac:7a:99:
         36:67:33:74:0c:62:9e:56:9c:e6:e7:2b:e4:8b:06:3d:84:b2:
         08:45:34:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk4ntCYjSf9KhR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Y2I5MDI0YjItZmUwMy00MDZlLTlkMGEtZmY4ZDc2NWRmY2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK88QNr0BBM94No2xKkrGn687SnhmK1xFTHz
jFNahg3Krf36k9XkEtYEzZihQfPxq6iAUcnEOJbFLR20ofTiMXOz02XV1kbn0JG8
QDC50BQjRDoN3I9wFapjSJAbCI+4FwWBy+fqu7fpL73dATJlUlF4SumI1VldsZ+F
1ZznZuVeV2y69p+4+IVfrmRPkEopJkGsK/z5t4XRJUYiJGFxDXNJZ0kYduK08lzK
A5yw6WgC5JzZ9oO9P9CWLP2IxwiOdLIpb0THirF+v4xr5s16Gand8Ozy9ki/Sh3k
xWXCoiHHBrZ4/JVtYlfu5ZB7XFMro245APEEHa2uooVvQEI2CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPLOL9bdrCK/2Pswc7/A/q1afexMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmZlNjkyN2YtMTg1Yi0z
M2MyLWE0NTItM2M5MmZiNDliOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmg0BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALg6diPBba0O1GSSAITF6N+TJsGwnszwNeuYKY/3C/DkfW9b36termbW
WVcVdNK3mmtefY2A1GldBf5cnfwOKGZQQwvS94s3X+TboAXlk4QbaUn0VycFz7ZB
HTWWuNtJgQUJQeDQ/tD5Aao7jhiIVuiTWT2mcQnJQuHOpfSSHUTXwA4rulO8CHh5
X8aNihlQSpbmRG1SK5pME676aOM8FYeyOlDBt4UHHNpeGVs/DaGlLpvhaCFsm/tH
Bbt7ZURvSUJ7NbqkTTG9ZX0Qu9xbzvwFfREA9tv2FNdZtR0Ox2SxSnODkV3SJ6x6
mTZnM3QMYp5WnObnK+SLBj2EsghFNOI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:18 2026 by rpki-client