Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/61003fd0-00c9-33d9-9102-b7abbc8abd9a.roa
File:                     61003fd0-00c9-33d9-9102-b7abbc8abd9a.roa (raw, json)
Hash identifier:          Vy8xQXLpPBZIAv1Ek5HC2gEp4I21sSWf+ftHNrQ3SXc=
Subject key identifier:   C7:F8:A8:C1:DD:F5:88:90:0D:3A:9A:B9:27:EB:C3:6C:82:07:67:BD
Certificate issuer:       /CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
Certificate serial:       010D0C9F4328584DBF8FC48FE4E7B921BDF08F90
Authority key identifier: 48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/61003fd0-00c9-33d9-9102-b7abbc8abd9a.roa
Signing time:             Wed 06 May 2026 22:50:39 +0000
ROA not before:           Wed 06 May 2026 22:50:39 +0000
ROA not after:            Tue 04 Aug 2026 22:50:39 +0000
asID:                     22056
IP address blocks:        204.153.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:8f:c4:8f:e4:e7:b9:21:bd:f0:8f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
        Validity
            Not Before: May  6 22:50:39 2026 GMT
            Not After : Aug  4 22:50:39 2026 GMT
        Subject: CN=0909c6f4-8530-4ec9-a785-33f9a8a79e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:f3:c8:b3:45:f1:a7:63:3d:18:08:bb:02:
                    71:32:ce:a8:70:77:be:81:31:19:cf:8f:c4:e5:42:
                    0d:aa:86:19:f1:00:83:c4:bb:fa:e0:8a:65:03:74:
                    ba:19:82:d3:af:af:e2:89:45:59:75:42:c5:1f:20:
                    43:67:e7:d3:01:a2:cb:0e:53:30:30:e1:c7:b1:af:
                    90:6f:c5:a5:13:f7:e5:01:3e:61:5e:a4:d5:2e:bf:
                    e7:3a:a4:75:01:a5:0f:f6:93:25:79:5a:ae:b1:4c:
                    43:20:a8:2a:13:70:40:46:4b:a2:be:23:d8:d7:02:
                    0e:96:d4:bd:d3:46:2b:d4:ef:fe:ac:14:e0:f6:db:
                    58:80:b3:b6:5e:1b:5f:ba:9c:66:e1:e6:84:78:c9:
                    9b:44:fa:a4:94:3a:1c:93:6c:14:9b:dc:c5:0e:aa:
                    7e:ec:91:e4:5f:1b:07:28:53:a6:f4:18:c6:ae:68:
                    0d:6c:bd:d7:9c:64:fa:d0:1b:87:cb:9d:b7:51:2b:
                    2d:3a:09:13:a0:7b:c8:8e:40:cc:7f:48:7f:1f:8f:
                    f2:86:92:2b:98:f4:42:9b:9b:04:7e:3f:2e:98:05:
                    6a:de:23:4e:d3:c5:39:7b:77:8e:9f:e3:b1:b4:0f:
                    c5:c2:b3:35:99:b6:67:e2:05:0a:58:6b:b6:0d:f6:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:A8:C1:DD:F5:88:90:0D:3A:9A:B9:27:EB:C3:6C:82:07:67:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/61003fd0-00c9-33d9-9102-b7abbc8abd9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl

            X509v3 Authority Key Identifier:
                keyid:48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:7b:30:3f:71:fd:1a:8b:66:d3:44:fc:5f:96:9c:17:cb:
         3e:cb:99:ec:d3:9b:12:46:d8:75:af:27:9c:04:fb:74:95:da:
         dc:24:58:d1:4a:9d:f8:ab:1b:c8:2c:f9:06:6b:85:5e:21:58:
         19:b1:ea:8f:11:c0:29:5e:67:53:d9:56:72:72:2e:d1:98:9a:
         57:3e:08:e5:c3:20:21:15:c1:ca:56:e4:9f:97:72:79:c8:d0:
         68:07:c7:e8:d8:7c:4b:e7:43:e9:ad:0c:bd:a1:3c:d5:0a:7b:
         63:9b:4d:95:2b:27:12:f1:69:f5:13:46:95:34:79:83:a3:39:
         0b:11:01:86:c4:50:42:b8:51:01:c5:c7:a0:70:e8:3d:1c:d9:
         13:58:ba:ba:5c:cc:4c:e2:97:1b:d5:0d:43:97:9a:55:e1:bf:
         0f:3f:1f:88:e0:cf:ca:fa:d2:1a:3c:a9:19:7a:e5:ad:c9:9a:
         68:18:bc:61:bd:97:fc:9a:fd:44:4e:5a:1d:4d:f3:b6:2c:c6:
         9f:62:3b:08:4d:df:de:90:bc:1c:dc:e4:fd:f3:c3:36:93:ef:
         23:d9:eb:42:77:cc:8f:6d:5e:3b:8c:79:fc:7c:d3:5e:0b:23:
         e0:19:50:ed:d5:79:f5:f0:68:84:37:f2:4a:86:8a:65:d1:5b:
         9e:ad:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:06 2026 by rpki-client