Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/1c4f3e4e-43eb-39fc-9d9e-5ad902303e96.roa
File:                     1c4f3e4e-43eb-39fc-9d9e-5ad902303e96.roa (raw, json)
Hash identifier:          GWyIskhbQyVFrenfRkhHyhmruskbiMKvaJHcH339Y6Y=
Subject key identifier:   53:5B:B5:7C:D2:2A:4A:3A:01:82:73:4E:26:1A:52:F6:44:46:BB:BA
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F4328584F5EC51A10A53730DB249DF040
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/1c4f3e4e-43eb-39fc-9d9e-5ad902303e96.roa
Signing time:             Fri 02 Oct 2026 16:18:34 +0000
ROA not before:           Fri 02 Oct 2026 16:18:34 +0000
ROA not after:            Thu 31 Dec 2026 17:18:34 +0000
asID:                     54696
IP address blocks:        204.154.152.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:c5:1a:10:a5:37:30:db:24:9d:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Oct  2 16:18:34 2026 GMT
            Not After : Dec 31 17:18:34 2026 GMT
        Subject: CN=0e973e1b-a97e-4d47-a569-40755f04be81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:9b:c4:63:e2:30:34:1d:18:cb:c3:af:0c:
                    b6:f0:b2:90:df:ed:a9:cf:bd:e5:99:86:48:9a:94:
                    9e:93:fd:ac:47:c6:21:ba:f0:40:e4:3e:13:dd:3e:
                    11:da:17:23:d3:c7:99:b8:c4:90:d9:27:da:a3:33:
                    e1:80:aa:6e:d7:59:5d:5e:f5:1d:18:4d:24:b6:d2:
                    38:47:e4:bf:89:f5:7a:d2:50:17:82:5e:55:de:a6:
                    42:a5:0b:c3:7d:d8:88:23:81:b1:45:36:1b:1d:94:
                    25:1c:32:1a:ad:e6:41:b6:1e:ed:b0:b3:eb:03:28:
                    8f:ce:bc:4c:e8:7d:97:ba:dc:46:d9:4a:8c:84:4e:
                    61:d5:f2:50:4f:6d:d9:25:01:63:93:b8:74:e6:11:
                    13:f2:8c:e9:ae:8d:4c:fc:cd:b9:9a:cb:c6:b6:77:
                    5a:dd:1c:36:4f:fb:b6:07:6e:9a:04:bc:25:5a:d1:
                    b6:b6:98:06:7d:aa:44:3f:67:b3:cf:6a:2a:08:3f:
                    a6:d3:1e:00:e4:2a:7a:8f:45:7d:42:17:9a:7c:f1:
                    91:e6:59:10:9b:52:42:ca:d1:87:d0:62:96:fa:db:
                    98:13:aa:09:cc:b9:63:52:06:ae:0e:70:04:69:f5:
                    c4:11:e4:70:b9:6d:da:78:e3:7e:b1:39:dc:1f:84:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5B:B5:7C:D2:2A:4A:3A:01:82:73:4E:26:1A:52:F6:44:46:BB:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/1c4f3e4e-43eb-39fc-9d9e-5ad902303e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:3f:5e:db:fe:0d:63:dd:0c:ca:4b:37:b6:36:0e:d0:1b:ef:
         9a:09:43:f1:d2:8b:8a:24:0c:72:72:98:f9:49:07:bc:57:59:
         c0:d9:f9:1b:2b:9f:7c:6a:0a:ef:e3:fa:62:e0:0a:b9:a4:00:
         b5:c9:48:6c:21:12:7c:38:1c:a7:ab:78:89:4f:7b:78:01:94:
         11:e8:85:c8:7f:98:c9:fd:29:99:06:9c:49:4b:27:3b:fc:c7:
         b5:78:7d:db:6a:7a:04:7a:25:43:ce:ac:cf:74:c1:40:79:ee:
         87:b4:02:15:6c:fb:24:a2:9e:95:81:0e:9a:86:e7:d4:af:c0:
         61:cd:f7:27:9d:ac:07:0c:a1:ad:39:ed:5f:95:41:73:86:ca:
         b0:00:21:cf:8d:da:bf:0d:53:f1:c0:5a:bc:49:f3:b3:41:17:
         5d:d0:fe:ba:5d:0e:9d:a4:71:88:5e:b8:5f:c1:80:74:80:06:
         b1:b8:0c:ff:fa:c5:b3:15:c1:ef:f3:8e:3a:e6:fe:a6:4f:b9:
         b3:d7:2d:0e:cc:19:00:fe:c7:b4:0a:59:80:dc:ae:d7:db:ed:
         ca:b1:eb:76:9c:ce:c8:ae:66:29:ae:fd:d1:83:4c:04:9a:b6:
         a9:92:98:98:8a:33:29:88:a2:11:e3:7a:47:af:4c:18:69:bb:
         52:2d:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:27:35 2026 by rpki-client