Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ebe014-e418-389c-b13a-4c816f81db84.roa
File:                     e4ebe014-e418-389c-b13a-4c816f81db84.roa (raw, json)
Hash identifier:          kXVcbwbjoZLdOYO4bDs+LtpX3FENw5/WetliX/dzeHs=
Subject key identifier:   B5:49:01:57:64:94:D4:A1:DA:23:C5:5A:CB:9D:E2:F4:28:52:38:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F2957CEB869983E3C60C1E540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ebe014-e418-389c-b13a-4c816f81db84.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     213120
IP address blocks:        209.200.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ce:b8:69:98:3e:3c:60:c1:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=6f52a1f6-39a4-4bb1-838f-4bd4fdefb48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:2a:a8:42:fd:20:d0:22:c7:43:01:48:20:
                    23:49:1a:76:eb:8a:b1:b9:b4:a5:6d:60:79:90:f4:
                    8a:10:08:d4:da:b7:3d:66:28:88:a2:d0:c7:7f:cf:
                    73:1f:f3:ab:3d:d8:1b:23:0f:33:c6:e4:90:f2:b6:
                    d0:bd:37:0f:00:52:16:ef:43:c4:e6:c3:0e:34:bf:
                    e8:e1:ad:90:e6:4c:a3:a5:b6:09:94:89:e5:77:15:
                    d7:52:74:52:cb:4f:77:46:2e:4e:0b:51:b9:8f:27:
                    16:96:d8:f0:7a:2b:8a:40:d4:f0:62:55:bc:90:7b:
                    8e:ab:26:58:45:24:31:de:79:8d:50:ef:b4:ca:b8:
                    21:47:f9:f5:0e:2a:d6:d7:e2:df:ef:3e:80:20:09:
                    53:fa:e8:af:de:bd:02:fd:76:0c:0c:00:c1:0a:d9:
                    b8:9e:f3:20:c0:98:7a:ee:8f:06:d1:cb:54:fc:84:
                    ea:84:9d:0e:e1:08:9c:fe:0f:2f:73:78:80:c3:db:
                    65:16:b2:d3:5b:10:cb:e7:d5:6e:52:56:64:45:b5:
                    5c:50:96:48:53:01:51:b9:d8:f9:f9:90:3c:41:b1:
                    2c:15:2d:31:61:34:0f:2c:33:32:db:91:13:fe:af:
                    21:77:09:b4:da:d7:ff:fa:92:21:25:5f:e6:b0:16:
                    82:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:49:01:57:64:94:D4:A1:DA:23:C5:5A:CB:9D:E2:F4:28:52:38:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ebe014-e418-389c-b13a-4c816f81db84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:b7:88:66:b1:08:1a:49:2c:63:13:8e:4c:ae:84:2b:7e:
         7b:b6:31:2e:bb:72:12:22:14:e9:16:ee:14:8c:dc:b1:d4:c8:
         1b:16:3d:dc:e6:5b:ec:a3:ca:26:56:4d:c9:0c:5a:db:06:db:
         73:48:4d:87:e9:31:bd:ab:87:29:0e:6f:c7:36:03:82:fc:10:
         40:17:89:7e:40:f6:cf:70:f2:15:3b:19:28:a4:c7:9c:c1:86:
         e2:8d:2e:d5:ad:d5:18:95:ec:7c:3f:d8:26:96:41:59:1e:4e:
         56:dd:a4:ef:d5:3f:1f:a8:07:73:9b:0a:cb:7a:16:d1:3c:6a:
         89:f8:35:ba:5b:0b:0c:af:12:84:66:6a:31:10:19:77:75:1c:
         6e:fc:e2:fb:7c:24:78:e7:8f:82:a0:6f:93:2e:bd:dc:f4:f0:
         c0:54:7a:fc:f0:60:d1:eb:44:ec:72:0f:7d:cb:96:7d:80:e4:
         79:4b:71:36:a8:b4:fa:30:5d:29:18:a2:90:20:7e:5c:be:59:
         b4:c4:46:a0:e4:1f:ec:7a:9a:f8:4b:da:78:0e:63:0e:2a:e5:
         84:68:47:36:6e:fa:cb:0d:33:be:f2:a1:d9:7a:0a:f2:f3:7a:
         04:ed:1b:4a:a0:0b:01:3a:de:d8:d4:ed:b6:67:ab:18:be:f5:
         a7:b2:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:02:47 2026 by rpki-client