Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/306a86e3-e465-306e-a63a-af539dc41a0c.roa
File:                     306a86e3-e465-306e-a63a-af539dc41a0c.roa (raw, json)
Hash identifier:          R0J8qDt7uNL1xBGuE7GKVu73uGeHzt59NKy3T3c7SW0=
Subject key identifier:   68:63:B5:7C:53:6A:7F:6D:BF:7D:CF:97:73:E7:57:E9:31:2B:4D:8F
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584E921FABB28A89C0F257F64100
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/306a86e3-e465-306e-a63a-af539dc41a0c.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     24429
IP address blocks:        155.102.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:ab:b2:8a:89:c0:f2:57:f6:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=22362e18-2e27-4d2d-ba5c-e21b6a36d773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:58:cf:78:06:d3:3b:57:85:69:bc:2e:d0:
                    bf:99:02:06:59:2f:77:05:c8:ab:75:ca:82:32:cc:
                    1b:17:73:a6:05:24:0b:02:5e:88:47:29:a8:47:8e:
                    2f:a7:5f:7b:31:d1:0f:bb:f6:64:a0:13:ee:1e:58:
                    ea:7b:d8:09:b5:a0:30:1f:db:07:2e:9a:5e:78:b0:
                    a4:f7:2a:2f:9d:25:7e:26:65:0d:1a:e9:77:bb:79:
                    13:0b:0d:18:b1:16:66:21:3b:e1:02:bf:11:03:66:
                    a9:93:47:3e:bb:e1:51:bf:57:3b:75:0c:b5:46:be:
                    83:85:e8:96:16:63:9b:3c:a1:b7:de:6c:63:82:84:
                    35:76:22:12:4c:c1:ba:20:64:76:8f:c2:67:1c:6f:
                    1f:63:40:6d:b3:73:1a:21:3e:0a:04:23:e6:b9:38:
                    06:1e:92:81:c9:7a:59:d6:c0:8b:02:d6:51:9b:db:
                    a3:c4:78:c4:1b:40:b9:60:b5:8c:b5:a9:f8:25:78:
                    97:e4:33:ee:00:7b:47:bf:67:87:66:d2:d9:a7:82:
                    c8:e5:ce:78:3f:e0:bc:d9:90:d3:40:de:4a:d5:6d:
                    2a:a9:50:2b:a8:ad:bc:04:89:4a:ed:ac:63:68:4e:
                    b6:0a:78:01:d6:3a:6b:04:6c:4c:ea:83:5b:69:fd:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:63:B5:7C:53:6A:7F:6D:BF:7D:CF:97:73:E7:57:E9:31:2B:4D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/306a86e3-e465-306e-a63a-af539dc41a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:95:51:74:a1:fa:b8:2c:2d:c1:ed:49:52:93:53:0b:de:2d:
         17:d4:3f:93:e0:4a:39:ee:97:d8:d5:bf:1a:44:58:78:96:b0:
         51:3d:04:20:67:34:44:a3:54:cd:10:0e:f7:bb:e0:bf:1c:c5:
         b6:9e:6f:d1:30:d9:e9:59:c1:12:6c:34:b5:a7:1e:0c:52:0c:
         a5:b5:ba:5b:57:f6:64:ef:26:9f:57:2d:ec:b0:f2:70:72:4b:
         57:c2:6b:69:85:45:4b:b3:eb:c6:0c:4c:fe:a2:18:8b:4c:fa:
         e1:bd:84:8e:ce:5c:c0:e9:5c:90:b5:b1:5a:9f:e9:74:c3:15:
         09:96:ac:72:f8:fb:54:20:80:9f:9a:37:80:02:dd:3e:b6:21:
         cb:d8:6b:09:e7:29:7b:54:e3:15:46:6f:dc:0d:93:5d:f1:6c:
         97:7e:59:93:16:6d:a1:45:5d:e9:f0:8b:6e:48:a7:f5:64:2b:
         d1:3e:8f:08:c1:55:f9:d0:f5:4a:59:75:f4:32:43:6e:c0:33:
         33:b9:b3:db:c8:04:48:8e:f4:2f:9d:6a:d8:17:a4:83:1b:2f:
         39:c2:33:f1:b6:f8:01:02:e8:40:bb:2c:ba:fb:28:e6:43:d8:
         38:1c:be:de:8c:63:ee:64:7b:2e:2e:6c:55:c9:65:02:2c:41:
         1b:08:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:22:30 2026 by rpki-client