Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa
File:                     4e9f50cf-171b-33f5-a287-280df82c96bd.roa (raw, json)
Hash identifier:          GKhbyJPyC+EIYgbQsI/sW2RL0OtRxl8Y7TISLKRRPoA=
Subject key identifier:   17:8E:E7:D3:9C:19:7A:FB:6B:35:08:24:A6:B2:6D:10:E5:5A:34:53
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F4328584E4824BBCD1A09130DE2475F80
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     27395
IP address blocks:        155.254.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:bb:cd:1a:09:13:0d:e2:47:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=ab9bf388-d59c-4605-8c4d-4b0037ff1c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:71:29:b3:66:d4:5b:a9:70:73:06:6f:76:
                    7d:7a:2b:6f:7d:93:a2:79:60:5b:2a:4e:3f:e5:b3:
                    47:4d:04:97:8b:f8:15:a3:b9:19:b0:4b:d5:32:63:
                    9e:ea:3b:bc:06:a1:ef:1c:b8:03:7f:9e:27:48:3c:
                    b4:6d:32:82:12:4e:ca:42:8a:8d:a9:88:0f:ce:75:
                    2e:91:55:b0:f2:9c:20:d4:ab:1e:e2:48:30:1a:90:
                    ae:03:2b:f2:f5:56:88:75:30:0b:57:15:cd:9e:2b:
                    db:39:06:f3:c4:46:78:9c:13:9d:8e:c6:4e:dc:1c:
                    4f:81:f5:6f:67:d8:42:dd:ee:8a:6f:34:65:5f:13:
                    d9:43:dc:3d:ef:35:82:2a:82:e3:2d:30:83:a0:87:
                    85:f3:08:92:e6:40:3c:e7:9f:ee:29:27:4d:1c:19:
                    f9:61:92:51:4a:d6:6d:0b:58:9b:4e:e4:21:76:77:
                    46:30:86:87:3a:fa:6c:7e:7b:31:a3:66:e3:85:47:
                    6b:b0:07:82:25:d0:2c:5d:d0:bb:25:e1:59:33:03:
                    57:15:25:95:0d:93:39:3d:3c:6d:4f:d1:cd:64:e2:
                    d3:1b:c0:f8:29:34:35:c6:02:d7:21:04:cb:81:72:
                    bb:19:4e:7f:17:da:b6:27:98:22:67:c3:4c:ca:2a:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8E:E7:D3:9C:19:7A:FB:6B:35:08:24:A6:B2:6D:10:E5:5A:34:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/4e9f50cf-171b-33f5-a287-280df82c96bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:06:a8:7a:e0:7f:28:8b:02:29:e8:1e:e8:61:a4:20:40:c5:
         41:97:6d:7e:75:e1:60:f8:5c:80:6b:5e:44:bd:ce:a2:3c:0d:
         60:c1:bd:27:08:90:43:4a:d1:32:90:d8:f4:f3:95:04:ff:40:
         5b:13:13:b8:f3:74:da:12:27:ab:e3:89:ad:ab:17:98:58:b9:
         7c:ee:59:a9:05:21:84:ea:36:f4:00:85:e1:c8:8d:c4:5e:2f:
         d9:da:5c:ec:3b:1e:bd:45:86:95:ee:2b:cd:c0:e4:5e:9d:c6:
         9b:c8:68:70:e9:21:b0:55:41:27:8d:4b:f0:b2:d9:a3:2e:6f:
         93:d2:57:01:7a:a9:1c:50:7f:1e:10:5c:52:e3:1c:0e:d1:3f:
         e8:15:fb:2e:cf:b4:12:29:00:3b:68:d2:5d:f3:e8:f3:e6:77:
         52:87:07:e1:64:ec:17:8b:43:3b:20:8a:4f:62:dd:67:f6:6c:
         f0:13:e9:94:3c:af:b4:e7:b3:94:b0:fa:ef:ab:88:f5:f3:34:
         3e:84:00:5f:e1:35:53:19:78:17:ed:91:ba:2c:bd:13:39:37:
         b7:95:4d:b1:0c:e6:b7:03:e2:2b:1b:cc:0a:58:e1:99:06:10:
         73:cf:00:14:24:52:db:12:ce:45:af:b3:b6:21:a3:01:92:17:
         a5:f4:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:37 2026 by rpki-client