Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/cb8ffa43-91e5-3e4d-af22-802b23ccfd27.roa
File:                     cb8ffa43-91e5-3e4d-af22-802b23ccfd27.roa (raw, json)
Hash identifier:          imYoT9vC05tBKnZarboXsjls6UHQuLIIh3L/U24uu9Q=
Subject key identifier:   33:91:0C:64:DF:2A:66:B0:B0:96:39:14:08:67:A4:18:CA:6C:7F:1E
Certificate issuer:       /CN=2425e15e-d5ff-402a-863b-92cb41a87c57
Certificate serial:       010D0C9F4328584DC995B0877239A58DEE12B09A
Authority key identifier: 53:BB:18:27:B1:0F:0D:C8:CD:7C:0C:BB:0A:F2:A0:21:9C:93:C1:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/cb8ffa43-91e5-3e4d-af22-802b23ccfd27.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     396343
IP address blocks:        64.30.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/2425e15e-d5ff-402a-863b-92cb41a87c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/2425e15e-d5ff-402a-863b-92cb41a87c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:b0:87:72:39:a5:8d:ee:12:b0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2425e15e-d5ff-402a-863b-92cb41a87c57
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=953bc2fd-311c-4673-a7bd-7e7c7c95aa4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:d4:b0:cf:55:ba:a9:d8:3b:f2:24:02:10:
                    b3:62:23:ec:96:42:5c:9b:f8:49:31:d6:64:da:7a:
                    40:44:fc:72:be:58:fd:cd:d9:58:31:94:b9:9e:0e:
                    7a:e5:9b:f1:58:43:44:f8:9f:0b:03:1b:dd:1d:c5:
                    24:eb:a3:31:cb:b0:2e:20:a9:0c:d5:8c:97:c4:fc:
                    6c:c8:91:e4:85:65:9b:0a:c8:3f:7c:01:cc:5d:29:
                    13:31:87:7a:a1:db:12:85:61:1f:25:90:16:2b:16:
                    db:fe:0a:20:41:1b:e2:b4:20:3d:bc:ed:9f:6b:4f:
                    fd:26:48:33:fd:50:93:2d:a4:3e:7c:0f:e6:c4:97:
                    0c:ef:63:2f:04:53:d7:9a:df:95:80:50:b0:e7:b5:
                    6c:c0:15:46:25:cb:d9:13:f1:3e:87:64:03:84:eb:
                    0e:45:dc:c4:80:9b:cf:b0:e0:69:f9:b6:89:81:eb:
                    05:e3:d3:10:18:88:95:29:10:23:70:cd:c0:e8:99:
                    8d:f3:6f:0c:9f:55:ed:e1:16:42:43:08:f3:f7:07:
                    33:a8:30:3b:d1:cf:42:52:1a:98:c3:32:76:9f:65:
                    ec:63:14:31:3e:45:ed:ee:cf:93:d5:39:9e:29:8a:
                    86:09:47:a0:d2:6e:bc:7f:82:59:0f:5b:87:2d:42:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:91:0C:64:DF:2A:66:B0:B0:96:39:14:08:67:A4:18:CA:6C:7F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/cb8ffa43-91e5-3e4d-af22-802b23ccfd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/2425e15e-d5ff-402a-863b-92cb41a87c57.crl

            X509v3 Authority Key Identifier:
                keyid:53:BB:18:27:B1:0F:0D:C8:CD:7C:0C:BB:0A:F2:A0:21:9C:93:C1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.30.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5c:4c:74:1a:d6:dd:1d:67:5f:a9:79:bb:99:9d:09:18:d8:
         37:a8:9a:70:2a:22:9d:4b:62:57:7e:8f:72:e1:fb:1a:26:85:
         ac:70:d2:8b:10:fe:9f:63:0a:42:72:56:74:a9:14:0f:c4:44:
         55:5a:dd:c5:72:6d:a1:51:07:6d:2b:fe:c5:a6:f2:2d:00:36:
         53:d2:5e:f6:f6:43:0c:e8:47:9f:a7:5d:b4:7e:fe:4d:8b:49:
         b0:91:a5:ae:fa:db:03:47:d0:88:18:07:3d:a3:08:15:4a:32:
         74:03:f1:e8:ff:d7:85:b3:7d:a3:6a:81:05:82:38:fd:73:5c:
         3d:e9:d8:7c:a2:2b:2b:a6:45:06:15:32:6e:76:fc:60:c4:b0:
         48:a8:01:d5:a8:36:9b:3e:b1:4b:f9:9f:38:e1:98:2f:8d:9d:
         37:bb:5a:10:78:20:76:5d:09:34:ea:72:fc:ba:4c:50:78:41:
         aa:ed:8b:d0:b7:87:9e:20:08:30:e8:8a:bb:3b:40:9a:56:4a:
         3a:0d:1b:b2:09:23:ab:f0:05:5e:67:c5:2d:b0:e8:a0:9c:87:
         7f:9e:16:b6:c9:d7:86:58:a2:08:52:d9:d3:96:c4:69:70:56:
         2c:e2:b4:01:b9:a2:4f:dd:a4:ae:8e:d2:0e:c1:1b:9d:09:ea:
         86:27:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:03 2026 by rpki-client