Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa
File:                     1392b7e6-1885-350f-b7e5-6101dd3690e6.roa (raw, json)
Hash identifier:          q/i8ufQOE6ESIIQNJRl3+HjTkliR2M1gpcTzBBZWteQ=
Subject key identifier:   83:85:3A:32:DB:38:E5:0E:58:25:13:9A:54:F4:38:07:22:18:2D:BB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4542992E4C370F07CC76DD20
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     138890
IP address blocks:        154.21.105.0/24 maxlen: 24
                          154.21.217.0/24 maxlen: 24
                          154.30.158.0/24 maxlen: 24
                          154.47.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:99:2e:4c:37:0f:07:cc:76:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=d594209e-2233-465b-ab6e-58e2f1a2eb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:21:37:5c:74:c7:df:51:2f:9e:c7:58:b6:
                    e7:0c:b8:54:49:3a:28:58:9d:80:73:90:f4:00:cd:
                    f8:02:0c:18:26:dc:72:4e:39:82:d3:95:39:13:ef:
                    a9:db:6d:96:fb:f7:0e:0a:e6:5b:f4:43:34:e3:bb:
                    9d:24:e1:e2:4d:ae:ce:10:a9:db:02:20:63:0b:bf:
                    24:fb:b3:21:5c:4d:2d:5f:28:51:1c:29:04:3e:7a:
                    d9:11:94:1c:e5:94:02:03:1c:1f:6a:b8:b1:dd:38:
                    a7:18:83:92:50:cb:ce:d4:1f:22:02:1a:a4:e8:97:
                    6a:83:ff:3c:d0:04:f8:23:41:e0:66:70:89:e6:1a:
                    50:f0:ba:bc:ba:15:87:a4:17:d3:c4:5a:7b:4a:22:
                    12:2f:e2:b9:b8:f6:11:e4:12:5b:7a:35:fd:95:02:
                    2f:ea:56:2f:01:e2:be:d0:12:b0:b9:9f:bc:81:39:
                    a8:23:5f:6b:56:33:38:59:04:91:9e:50:1e:30:40:
                    ae:8c:9b:6d:78:2e:76:ad:d3:14:cb:3e:2a:dc:ab:
                    47:f4:7e:ca:8e:e1:4c:28:ea:c4:55:c1:d4:de:a8:
                    c4:a3:80:66:2c:a0:01:f4:6d:42:b4:30:f1:8e:5c:
                    47:20:eb:39:63:9a:e0:c1:e7:47:81:81:89:e0:30:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:85:3A:32:DB:38:E5:0E:58:25:13:9A:54:F4:38:07:22:18:2D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1392b7e6-1885-350f-b7e5-6101dd3690e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.21.105.0/24
                  154.21.217.0/24
                  154.30.158.0/24
                  154.47.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:11:e6:77:9d:ef:ae:2a:c2:8d:6d:09:91:5c:d1:93:94:
         78:6f:1f:ba:39:12:5a:7a:53:09:44:fe:35:7e:a0:63:62:24:
         56:ad:0d:bb:0b:71:a4:0f:ea:9b:f5:89:1d:1e:4e:1b:c8:2d:
         4a:21:2c:1c:a8:45:b8:3f:71:22:41:1c:f4:75:0e:63:77:b4:
         56:9b:85:df:3e:f3:c6:be:a1:38:25:df:eb:5d:99:0c:b7:98:
         21:0d:bd:e2:18:02:69:dd:dd:19:29:ab:1a:53:ab:b2:71:16:
         b5:b0:90:c1:00:37:e8:0b:01:b1:b1:d2:1f:e5:e4:c7:87:6b:
         45:16:db:4e:1c:c3:0c:10:0a:f9:e9:6e:bb:21:ab:28:6a:db:
         d4:f8:a3:4f:e0:24:56:8b:6c:f5:a1:d1:94:d7:c9:32:23:f2:
         80:45:44:61:3a:e4:3d:a9:00:01:af:95:6b:84:b4:57:33:40:
         50:1f:4d:6b:53:26:25:3e:20:28:13:89:4e:ee:88:42:22:8b:
         fd:f1:b9:6d:e0:da:ac:0b:6c:c9:1a:af:0b:2f:94:4e:cd:69:
         5a:17:ec:69:98:27:a8:b0:13:d5:e8:0b:85:d1:14:76:bc:27:
         64:c5:fa:05:cf:55:72:15:4f:6d:38:ab:91:0f:71:d8:e4:94:
         ee:53:0e:ca
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9FQpkuTDcPB8x23SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk
ZDU5NDIwOWUtMjIzMy00NjViLWFiNmUtNThlMmYxYTJlYjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO4hN1x0x99RL57HWLbnDLhUSTooWJ2Ac5D0
AM34AgwYJtxyTjmC05U5E++p222W+/cOCuZb9EM047udJOHiTa7OEKnbAiBjC78k
+7MhXE0tXyhRHCkEPnrZEZQc5ZQCAxwfarix3TinGIOSUMvO1B8iAhqk6Jdqg/88
0AT4I0HgZnCJ5hpQ8Lq8uhWHpBfTxFp7SiISL+K5uPYR5BJbejX9lQIv6lYvAeK+
0BKwuZ+8gTmoI19rVjM4WQSRnlAeMECujJtteC52rdMUyz4q3KtH9H7KjuFMKOrE
VcHU3qjEo4BmLKAB9G1CtDDxjlxHIOs5Y5rgwedHgYGJ4DD0KQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFIOFOjLbOOUOWCUTmlT0OAciGC27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTM5MmI3ZTYtMTg4NS0z
NTBmLWI3ZTUtNjEwMWRkMzY5MGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmhVpAwQA
mhXZAwQAmh6eAwQAmi+ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI+DEeZ3ne+uKsKNbQmRXNGTlHhvH7o5
Elp6UwlE/jV+oGNiJFatDbsLcaQP6pv1iR0eThvILUohLByoRbg/cSJBHPR1DmN3
tFabhd8+88a+oTgl3+tdmQy3mCENveIYAmnd3RkpqxpTq7JxFrWwkMEAN+gLAbGx
0h/l5MeHa0UW204cwwwQCvnpbrshqyhq29T4o0/gJFaLbPWh0ZTXyTIj8oBFRGE6
5D2pAAGvlWuEtFczQFAfTWtTJiU+ICgTiU7uiEIii/3xuW3g2qwLbMkarwsvlE7N
aVoX7GmYJ6iwE9XoC4XRFHa8J2TF+gXPVXIVT204q5EPcdjklO5TDso=
-----END CERTIFICATE-----
Generated at Wed Sep 30 02:12:45 2026 by rpki-client