Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7181ff77-9833-3e3b-b903-646e92ec7de9.roa
File:                     7181ff77-9833-3e3b-b903-646e92ec7de9.roa (raw, json)
Hash identifier:          7w9jrO9/JQWQXnRLIC24mF/oI8cfqOW91qEhO1rmiG0=
Subject key identifier:   ED:83:40:00:6C:87:06:1E:CB:FD:B0:4D:6C:56:5E:9D:72:AF:F4:80
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F497492422FCA747A08B11B80
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7181ff77-9833-3e3b-b903-646e92ec7de9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        153.43.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:92:42:2f:ca:74:7a:08:b1:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=be756e57-7445-407f-a2da-ac82a96b8e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:bc:e4:0a:05:fc:31:b6:eb:0b:a6:92:bc:
                    bd:05:4b:f3:c9:43:f5:b1:4c:88:cc:ec:12:60:a8:
                    8b:9d:68:83:cf:9d:fa:8f:c8:f1:38:27:b7:40:29:
                    87:b6:20:14:10:5d:62:18:23:9f:28:6b:f8:b7:d4:
                    d4:8f:78:5f:4e:2d:c1:fc:f6:72:7e:ec:03:5a:8f:
                    ce:24:11:13:ef:ed:20:20:75:19:36:9f:c3:06:6a:
                    2a:56:94:9a:01:04:0c:e7:3c:8b:d4:6d:b3:e9:cc:
                    71:18:92:4a:df:bf:98:40:49:54:a0:3b:4e:d3:da:
                    c9:89:e6:f4:13:fa:de:9e:b3:ea:2b:6e:37:c0:5e:
                    dd:f3:04:7d:f2:00:b3:63:97:6d:55:9c:4f:e8:fd:
                    88:40:8a:7f:92:07:94:67:1f:f2:b0:51:79:50:fe:
                    80:b6:e3:37:b9:06:f9:84:73:7f:6a:8a:ca:e2:23:
                    99:df:fc:0d:ad:37:07:88:6b:d1:18:02:0d:1c:75:
                    19:ef:36:4d:a3:cd:ca:d7:e0:47:97:a3:31:da:7d:
                    78:9b:d1:18:86:bc:32:49:5d:e4:08:a1:f3:a1:17:
                    77:93:ae:fc:ad:68:2a:bd:4f:24:74:32:fe:90:73:
                    af:5a:75:5c:b9:7d:74:52:3a:44:01:30:ce:fb:6b:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:83:40:00:6C:87:06:1E:CB:FD:B0:4D:6C:56:5E:9D:72:AF:F4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7181ff77-9833-3e3b-b903-646e92ec7de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:92:3d:15:f4:0c:1e:12:55:38:fc:de:c7:e2:f7:1c:b0:90:
         df:12:cb:ef:cb:23:da:c6:6d:c4:d9:3b:2f:d7:d3:b5:91:50:
         e9:be:58:08:1b:d2:f0:e2:29:f0:55:8e:98:b9:67:df:96:43:
         61:73:4e:a1:aa:a2:b2:71:75:f3:28:5c:82:ad:58:f0:5a:16:
         82:67:f9:f0:52:4a:43:8d:61:4d:5a:09:1b:41:d9:3a:78:a8:
         2c:b7:73:61:2b:9f:a3:e3:d3:ae:bd:c0:66:51:2c:16:1a:30:
         37:38:45:7d:0a:62:9f:1b:4a:bf:3d:bd:e1:96:92:e1:69:41:
         29:7a:c4:c1:e3:43:44:f4:b3:a8:e1:e1:73:a6:8b:83:a4:6b:
         07:de:9a:9f:29:71:9f:ff:dc:a3:49:75:d6:59:cb:eb:1f:7f:
         07:76:bf:1a:89:09:3b:d8:0f:e7:e7:1c:f9:a9:6e:eb:f7:a6:
         74:24:1d:f1:96:d1:e9:cf:1a:20:cd:3f:17:21:5c:8e:99:3b:
         50:47:bb:73:0b:91:16:13:05:cf:9d:cf:28:30:c7:4e:74:64:
         d6:32:72:0e:1e:ce:54:fc:8f:7a:cc:6e:62:94:25:4f:50:48:
         2f:c2:62:ab:48:77:30:21:57:6f:4b:5b:3d:ac:43:e8:75:f3:
         a1:96:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:41:12 2026 by rpki-client