Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa
File:                     4bdc7401-6d0e-314a-aae3-b523f7944319.roa (raw, json)
Hash identifier:          jeSn2E6G18tWH4KEjKqQeycZLAI9lAAFDyyXxKWIt24=
Subject key identifier:   3F:C7:AB:5B:3E:1A:AF:19:52:FE:75:36:C8:EB:3B:C8:C6:BE:97:DD
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584DC6CB0BED2B9F52FF95D18900
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     8987
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:0b:ed:2b:9f:52:ff:95:d1:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=23839dfe-f842-4399-baf8-4266e0b6ff93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:36:5c:df:f3:67:66:0d:2b:92:b2:40:74:
                    40:b0:e6:a6:1f:68:0b:a9:56:4b:45:f5:c7:af:f2:
                    90:d9:4d:79:d2:8f:60:ac:44:55:9a:24:e0:ac:81:
                    03:ba:6a:40:8b:68:22:ef:53:64:00:18:6e:99:f3:
                    01:b3:31:ab:14:ed:a1:cf:66:65:48:b2:35:6f:7a:
                    c8:94:ed:e3:66:e9:18:c4:94:69:9e:d1:7e:b9:77:
                    63:03:80:8b:71:a5:99:e9:b1:c8:be:73:bf:bf:d9:
                    89:38:a8:38:76:05:45:9a:41:00:e4:87:6f:c5:9a:
                    b6:db:e9:9b:52:71:79:49:e2:63:1b:e6:66:de:2b:
                    b3:d6:d8:9e:88:55:cb:7b:86:d4:5f:ca:36:e8:33:
                    06:bd:46:1b:fc:40:2a:e8:49:af:cb:45:71:40:28:
                    46:92:38:71:0b:88:40:8b:6e:ba:91:00:7f:06:28:
                    34:09:5a:16:da:4f:24:f0:55:03:98:e4:e7:68:8e:
                    6c:80:8b:e4:c9:6b:cc:4f:6d:48:26:c5:20:e4:a7:
                    fd:7d:ad:77:ca:30:e5:a3:b9:37:2d:d4:9e:d5:19:
                    f2:57:55:74:34:8f:0d:8d:e4:59:11:1e:e5:e7:05:
                    4f:98:01:5b:bd:5b:35:fa:f2:d5:a8:2e:98:1d:88:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C7:AB:5B:3E:1A:AF:19:52:FE:75:36:C8:EB:3B:C8:C6:BE:97:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ae:ca:bb:25:5c:af:43:af:a8:0c:06:02:a0:ae:e5:08:12:
         f7:f3:27:82:01:c4:13:10:a6:9c:5d:70:b6:46:a1:2e:4d:e2:
         73:d6:6b:dd:d0:d7:14:d7:2d:61:28:8d:5a:66:16:8e:50:6b:
         21:5e:c1:50:40:f5:85:8d:7a:15:8a:25:a3:67:19:a1:86:54:
         54:43:8c:52:23:95:33:1a:8b:75:ed:b4:bc:13:90:ff:b8:d8:
         3a:4a:46:be:c8:51:74:a8:ca:93:24:07:cf:e8:b5:e7:06:6e:
         e5:b0:d2:c8:42:2d:7b:45:45:34:7e:00:f4:30:d5:0c:09:5e:
         03:4a:4d:01:2e:42:63:61:50:6d:1f:a8:bd:1f:d6:ef:da:ad:
         86:45:82:c4:b2:eb:0e:be:23:28:f9:95:c7:00:df:2b:31:26:
         1d:99:1b:d4:0f:0d:6a:7c:fa:49:54:47:02:5c:5a:3a:94:3a:
         28:d3:d0:6a:19:19:91:99:e3:af:a2:b4:81:f4:8d:68:76:86:
         29:ff:4e:60:1d:cd:99:8b:26:a0:25:31:a6:9e:77:53:f0:ff:
         9a:a2:62:d8:78:38:46:c9:14:82:64:eb:fb:6e:42:e8:28:6e:
         eb:c8:57:95:57:62:69:8e:ae:bf:07:3f:6b:38:df:33:4d:e1:
         a2:ea:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:48:41 2026 by rpki-client