Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5/4a828b5e-7514-3426-8823-64f4fc318988.roa
File:                     4a828b5e-7514-3426-8823-64f4fc318988.roa (raw, json)
Hash identifier:          ECRZcTC0pCtpcwi8vjulnAsmXOYn0HiYXV61+STypeE=
Subject key identifier:   2E:8E:D0:BB:1A:43:9A:8C:84:61:C5:CF:EF:68:0B:E9:77:09:D4:2B
Certificate issuer:       /CN=b34e631e-b593-427f-a8c2-cbb2d89c7fb5
Certificate serial:       010D0C9F4328584D83CB147CBF715B392B2901E0
Authority key identifier: 27:4F:57:15:3A:EF:83:F4:83:12:E2:AF:4F:87:96:56:FB:7D:16:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5/4a828b5e-7514-3426-8823-64f4fc318988.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     401148
IP address blocks:        155.103.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5/b34e631e-b593-427f-a8c2-cbb2d89c7fb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5/b34e631e-b593-427f-a8c2-cbb2d89c7fb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:14:7c:bf:71:5b:39:2b:29:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b34e631e-b593-427f-a8c2-cbb2d89c7fb5
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e11de830-a7c7-4220-b76c-3fc876818c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5f:ae:7c:31:b7:00:d5:9c:d4:e3:de:9c:c8:
                    5e:86:7b:70:22:82:fc:fc:6d:d6:c2:93:c4:61:f9:
                    2f:00:96:c5:ed:3a:de:55:f7:53:af:24:44:6f:b7:
                    c5:f6:39:e6:99:58:a5:c5:4c:9e:93:48:98:cb:d6:
                    5c:70:13:be:fa:19:a7:cc:a2:39:e4:97:91:ec:37:
                    83:65:4f:41:5b:57:dd:d7:20:15:96:46:d0:08:2d:
                    16:6f:80:45:c6:22:e1:0e:d9:b2:ec:e6:1e:28:36:
                    05:e6:51:ef:15:b7:e1:18:f8:bd:16:8c:ad:84:9b:
                    4e:6c:e3:3e:25:a8:de:a7:aa:86:6a:21:46:95:ee:
                    50:68:0c:d8:0b:9b:61:6f:01:8e:e3:06:ee:8d:39:
                    54:5f:8f:34:aa:c5:7c:df:0f:7a:02:b9:fe:c4:c2:
                    c4:37:4c:3e:cb:ea:c8:16:9c:15:23:bf:13:7f:47:
                    e7:66:51:38:e3:11:5e:54:44:f0:82:c0:25:f1:4f:
                    72:1f:01:22:f6:26:87:7f:d0:36:a8:e3:bd:9d:ae:
                    db:16:eb:4b:9e:4f:ed:e1:ca:a0:fd:98:06:1e:52:
                    f0:e7:43:d7:ca:7d:b6:f3:59:39:7f:bd:f0:56:7a:
                    af:5e:c1:d8:1a:d6:85:4e:47:7a:9d:72:d9:34:0c:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:D0:BB:1A:43:9A:8C:84:61:C5:CF:EF:68:0B:E9:77:09:D4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5/4a828b5e-7514-3426-8823-64f4fc318988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5/b34e631e-b593-427f-a8c2-cbb2d89c7fb5.crl

            X509v3 Authority Key Identifier:
                keyid:27:4F:57:15:3A:EF:83:F4:83:12:E2:AF:4F:87:96:56:FB:7D:16:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b34e631e-b593-427f-a8c2-cbb2d89c7fb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:b1:7e:bd:52:80:ab:36:f9:1e:75:c9:ea:fa:ec:d2:74:
         83:e8:7d:9f:b7:d5:c1:99:77:f8:b1:3f:a2:da:72:d2:1f:26:
         39:17:3f:6c:0d:48:97:d1:48:a1:3c:c8:58:78:1a:08:2a:7d:
         4b:de:a2:d4:bf:2d:3f:be:c4:32:02:6b:56:3a:26:65:f4:24:
         57:5b:83:6d:dd:ac:65:5b:60:e1:6f:b2:ac:36:b7:7f:f2:21:
         d7:2b:1b:65:e4:9a:e9:3f:a5:25:ce:00:cf:0a:7c:dc:53:eb:
         41:8e:2b:8d:01:5d:3e:fc:6e:2c:ea:ab:33:1d:dd:99:86:5b:
         a8:fe:43:1d:4a:aa:07:b8:13:d9:78:91:d0:c6:54:68:48:4a:
         09:fb:97:68:4a:f6:29:97:28:56:a8:22:ad:0e:1d:f0:5e:aa:
         2c:01:c3:7a:91:1a:49:23:cc:bf:3a:0d:84:5c:f5:3a:ef:fa:
         cb:b9:fa:b9:da:c5:e1:74:21:dd:d9:dc:ba:d6:3b:55:21:b0:
         85:82:b8:d3:b8:7a:8a:fc:17:90:50:48:57:b6:fd:ea:da:93:
         c0:b1:36:38:8a:be:66:c8:9a:8f:ea:b4:14:7f:0f:08:db:de:
         a4:7e:77:71:46:a4:5e:d8:7e:52:5d:c9:5e:bb:d2:ee:9f:03:
         1e:12:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:06 2026 by rpki-client