Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/37191ffc-8486-35c0-86e3-740b71796e73.roa
File:                     37191ffc-8486-35c0-86e3-740b71796e73.roa (raw, json)
Hash identifier:          bf3T06KAATCZctI59gFCjiuVmNFuJqg0N5hZvhBGFAQ=
Subject key identifier:   2B:6F:CB:7D:8A:34:79:A0:59:FB:95:11:7D:52:07:B7:74:71:30:D6
Certificate issuer:       /CN=6528c9ac-3735-430d-99f2-7ac01944d688
Certificate serial:       010D0C9F4328584F374D526861EB188B9D014CB0
Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/37191ffc-8486-35c0-86e3-740b71796e73.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54696
IP address blocks:        167.150.103.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:52:68:61:eb:18:8b:9d:01:4c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=7dcb5dfa-bfd9-443e-ac67-7618b22c796a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:90:35:13:6e:6a:27:7e:0b:a9:6e:31:60:
                    c7:4b:b1:6e:50:c5:79:11:a2:6b:bc:0e:42:4f:ee:
                    df:7a:8c:65:78:64:05:86:20:ab:ee:e9:37:21:8f:
                    67:ab:bd:cb:5b:3a:0e:df:fd:93:55:91:bb:8f:95:
                    69:6c:59:ca:2b:2a:f0:3a:40:5c:04:24:39:84:23:
                    5a:ef:56:bb:72:50:98:0b:1f:2a:2c:14:c8:67:6b:
                    23:6d:44:26:24:f7:c9:a6:3a:90:85:ae:2e:5f:9a:
                    70:fb:9a:a1:ab:6f:ce:5e:9b:18:a0:f4:20:4a:9d:
                    e5:5e:eb:34:ed:e4:c6:04:7e:20:f9:d6:2b:8f:28:
                    e2:06:f1:a3:ca:c9:d4:00:e7:50:9b:b9:6d:88:f3:
                    b5:b8:14:c2:d8:41:c6:36:9f:13:c6:86:2a:4f:8c:
                    05:35:3f:2c:d0:c2:5f:e6:f0:76:fb:ce:00:fd:7d:
                    30:9f:1c:57:08:e1:ab:89:2b:c5:2e:df:fa:34:08:
                    3a:b7:4b:61:12:03:28:15:49:fc:77:27:ff:f8:9b:
                    58:d8:c8:db:4c:25:95:02:bd:4c:ce:5f:db:a7:40:
                    1e:85:f8:3d:25:ff:57:2c:8e:af:1e:e2:3d:fb:20:
                    95:0d:f1:18:90:89:26:cb:21:2d:b4:11:7b:99:8b:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6F:CB:7D:8A:34:79:A0:59:FB:95:11:7D:52:07:B7:74:71:30:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/37191ffc-8486-35c0-86e3-740b71796e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl

            X509v3 Authority Key Identifier:
                keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:62:98:ae:38:d9:dd:86:da:bc:e7:e3:72:73:29:dc:72:14:
         89:74:f8:24:25:0e:24:9d:bf:36:72:ac:3e:3c:05:30:1a:10:
         98:c7:7e:25:53:71:eb:63:a6:c3:8e:db:30:95:f1:73:03:d3:
         18:a8:13:3b:9f:29:4d:86:8b:c6:51:37:52:c6:f0:f1:ae:ca:
         84:97:ca:b9:f1:53:15:13:78:7a:28:4f:27:20:a9:1b:ab:81:
         e8:d5:14:d8:19:97:34:fc:d3:b1:a2:4e:ba:5a:b9:25:07:e2:
         5a:50:a7:bb:c7:54:0f:9a:ce:45:3d:d0:67:e2:fe:4d:e0:b8:
         7a:78:a9:2f:84:9a:04:00:82:c2:b2:41:45:81:85:7a:b4:16:
         01:8a:21:8b:8f:a5:f8:b1:8a:aa:ff:d3:4d:ac:7f:c9:67:85:
         1d:66:22:ae:9e:95:7e:11:92:5b:60:26:5e:5f:91:36:24:6e:
         d5:7c:f4:bb:80:16:65:17:fb:ca:62:fc:95:15:28:61:83:cb:
         67:cb:fa:b0:d4:5e:97:f1:f7:fe:ef:97:2d:b0:b8:6a:06:ec:
         b7:4d:d3:d9:e1:cd:04:10:61:29:f4:d9:e6:bc:16:45:65:a5:
         50:43:03:44:d2:55:ba:90:8c:66:64:4e:ad:10:08:0e:d6:ba:
         ef:28:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:08:47 2026 by rpki-client