Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/134d2777-4816-3935-bbd3-4bbd9a756ceb.roa
File:                     134d2777-4816-3935-bbd3-4bbd9a756ceb.roa (raw, json)
Hash identifier:          GvBap4T/BPRkkkjxiHHOI4kFuDFBgSxibQ9nNQKmyhg=
Subject key identifier:   19:8E:4C:90:60:92:AB:56:D5:A1:5A:FE:97:C4:4A:AD:4E:38:3F:FF
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F4328584F49730F979A0A574DF3CD6940
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/134d2777-4816-3935-bbd3-4bbd9a756ceb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10384
IP address blocks:        152.87.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:0f:97:9a:0a:57:4d:f3:cd:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=07a58423-b57b-42bd-bbd8-65d44433df6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:7a:66:8a:fd:9c:d7:e1:aa:73:55:de:52:
                    bc:87:78:4c:d3:ab:29:ea:25:7d:7d:49:5e:48:78:
                    98:7b:8f:5e:c6:11:23:bb:df:06:81:cf:a4:a6:09:
                    e7:a3:48:e8:07:1a:96:be:20:ad:b0:d6:d0:e9:bb:
                    6e:5e:7f:cd:16:1f:96:44:92:85:01:b6:a6:e7:13:
                    e9:66:71:6f:64:95:1a:f4:39:07:4d:38:8a:4a:59:
                    01:f5:de:0a:47:15:56:8b:bb:48:79:b0:99:92:f7:
                    7c:0b:88:6f:b0:c7:77:b4:c6:38:9f:09:95:7e:de:
                    cd:40:02:bb:c8:98:04:1e:9f:a0:47:e3:11:71:74:
                    24:86:ae:59:f7:3b:47:19:ac:6c:03:b6:8e:a8:79:
                    ac:03:ad:5c:64:d9:d8:ca:9e:cb:1d:7a:e8:b6:14:
                    07:35:65:be:b9:ce:06:27:68:0f:04:2a:71:f8:59:
                    d2:96:89:fc:cd:34:99:86:1f:67:dd:91:08:dc:38:
                    db:75:af:d8:90:45:3c:78:74:aa:b9:64:11:e7:ad:
                    ff:2a:14:a3:4b:6b:97:45:8a:e6:b6:10:90:23:9f:
                    6b:2b:04:d8:94:45:b5:cb:2a:6a:b2:bf:f0:45:5f:
                    3b:be:a0:bd:ae:94:b8:49:65:56:36:a0:26:27:eb:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8E:4C:90:60:92:AB:56:D5:A1:5A:FE:97:C4:4A:AD:4E:38:3F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/134d2777-4816-3935-bbd3-4bbd9a756ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.87.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:61:ee:44:68:4a:2d:25:3d:4e:23:48:e6:33:d7:e8:14:4c:
         09:8e:7c:b9:bc:4d:f3:68:3e:19:a4:e6:ac:69:73:03:4b:2f:
         40:0d:05:de:e6:ae:00:1a:c8:5a:13:cc:3d:c1:af:39:5c:ef:
         2d:26:93:b6:8e:d9:20:f2:65:10:f6:0c:fc:46:11:1a:52:ee:
         ac:77:38:c0:9d:28:01:00:a2:7d:29:c0:a0:a1:dc:b9:b5:a4:
         1b:17:7e:19:db:7d:cb:8f:70:8a:06:e3:43:55:3d:3f:92:fc:
         81:67:1e:b7:3b:f9:4a:a9:3a:7d:7f:82:69:61:9d:2c:0f:2d:
         ee:d8:0c:10:fc:61:61:05:b5:a5:fb:2a:43:4e:cc:e5:f9:74:
         ac:3e:af:4d:4f:06:25:1e:97:eb:9b:65:48:1a:1b:59:03:4b:
         4c:3c:f5:78:a1:53:42:ec:ea:29:0f:fd:e9:fd:10:b8:47:6b:
         69:3f:71:bd:77:25:93:76:49:9a:01:e1:62:04:28:e0:66:f8:
         58:d2:b4:aa:39:31:b9:1c:cd:05:28:ae:e9:3e:07:db:00:60:
         e9:f1:e8:a7:2c:ec:f6:52:f1:42:d7:93:13:9d:9b:a7:59:57:
         4e:83:5a:65:23:3c:18:ca:68:90:df:e7:da:89:6a:19:6e:60:
         d2:b9:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:58:35 2026 by rpki-client