Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa
File:                     fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa (raw, json)
Hash identifier:          lS0hv2zNqAeT4y0ghA2wEoCtdCwTYOW+IFkVaiKbv0g=
Subject key identifier:   22:62:76:AA:9F:70:7D:E5:34:65:BF:73:3A:35:E2:B2:63:04:06:88
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584D4D5A54A398E9B7D2B993A080
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        155.63.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:54:a3:98:e9:b7:d2:b9:93:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=a4a781b2-66da-4dbf-b43d-7950b1df595c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2a:a0:25:c5:36:3f:7e:49:a6:94:fa:8a:d9:
                    c0:6b:1b:15:c1:5e:80:6d:49:20:6c:03:40:a3:22:
                    cc:e0:4d:ed:4d:c0:5f:ed:9e:ea:1f:8e:0d:d2:50:
                    ad:98:fb:99:30:a6:8e:5c:38:9c:e6:2c:e5:5b:4a:
                    2e:8b:1e:ea:4a:f9:b1:90:5d:66:a6:70:f9:c5:70:
                    23:a0:ca:e8:f9:cd:0f:cf:58:34:b5:d2:10:d2:35:
                    f0:0e:09:ad:25:49:f5:29:2d:ed:f5:ab:48:03:21:
                    94:9d:8d:5a:3e:24:11:0c:f7:48:83:8a:d5:61:d9:
                    9d:ca:8d:c9:37:b3:5d:84:ad:08:a3:c0:e5:b4:5a:
                    06:f5:80:69:20:52:0b:46:97:d8:e1:38:94:70:26:
                    a2:1b:36:2c:b7:e2:34:ed:9f:fb:38:9c:de:b9:24:
                    78:a6:9a:6b:b9:01:58:8e:22:07:18:4e:b6:e3:78:
                    13:21:38:91:cb:25:ab:7d:d8:f1:e6:5a:3f:7d:4d:
                    30:10:c2:d7:b2:47:02:ff:51:1b:5f:8e:66:6e:81:
                    c6:b7:0d:fb:c1:96:c8:00:e5:97:fa:0e:08:7a:e0:
                    7e:98:e5:d0:e0:eb:6c:71:02:3e:b2:d6:2e:e8:a9:
                    cb:5e:28:e6:8d:e4:57:3b:64:78:3f:17:af:02:4a:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:62:76:AA:9F:70:7D:E5:34:65:BF:73:3A:35:E2:B2:63:04:06:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:52:fc:34:1f:a5:73:14:a4:e9:5d:36:69:02:06:05:d9:
         50:43:e3:cd:4d:d5:ce:6c:f0:d1:5a:c1:02:33:f5:99:af:91:
         af:4e:4c:43:c2:88:48:ee:b8:f1:d9:ca:b4:a1:b6:3a:2f:1e:
         25:47:ac:45:a1:01:94:68:97:e8:8c:54:2a:17:2e:17:dd:69:
         f5:ef:e1:06:4e:95:73:15:34:c6:02:57:2a:7b:7a:10:08:86:
         f9:4c:00:26:5e:ac:86:96:cd:02:94:53:66:54:84:40:6a:e8:
         bc:dd:37:26:16:d8:47:7e:c0:4b:74:6b:b0:07:c0:86:bb:81:
         a6:d6:e2:f9:da:bd:63:d4:66:d4:02:ad:36:91:71:5a:43:fb:
         8e:76:82:b5:94:bb:aa:8c:5e:92:94:60:6b:43:8e:65:fb:80:
         32:09:97:b2:65:b9:7d:46:c8:0e:3b:34:1d:15:29:d8:7c:2c:
         7b:fc:d5:7f:de:a8:dd:d3:0f:7e:c6:d4:34:ca:09:f6:62:ce:
         2a:d3:20:da:df:a7:c1:84:20:e9:b9:e3:b5:f8:46:cc:f0:07:
         fe:3e:31:8e:02:6b:bb:1c:47:5e:63:7c:b2:72:78:ab:8a:fc:
         b9:32:83:31:1c:02:8c:1e:c8:05:b5:6c:af:1e:83:da:52:9b:
         b7:4e:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:03 2026 by rpki-client