Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/942eca6c-4365-3118-ac32-59f93e1f846c.roa
File:                     942eca6c-4365-3118-ac32-59f93e1f846c.roa (raw, json)
Hash identifier:          GvFvZOdQnoCSfbVaxOv2hWg5IIRmLp20ky/cBQEMtGE=
Subject key identifier:   80:3B:1D:6B:A2:5E:B1:54:1E:C3:50:E5:EB:5E:86:B8:7F:7A:72:96
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E3FC4882E2AF968A030396880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/942eca6c-4365-3118-ac32-59f93e1f846c.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     209242
IP address blocks:        154.51.129.0/24 maxlen: 24
                          154.51.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:88:2e:2a:f9:68:a0:30:39:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=3800d8dc-f4a7-48ad-84d9-db00deed9671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:08:2f:52:86:a6:3a:18:bd:51:cb:08:ef:
                    10:ed:7a:dd:17:9a:05:7f:18:06:30:63:26:55:6d:
                    4d:30:16:db:75:81:34:ac:4f:3d:2f:ae:89:a7:d2:
                    76:be:02:13:d0:18:b9:ee:0b:77:03:6c:6b:32:f5:
                    18:9b:6f:4c:17:f9:70:9e:04:5d:2c:71:ca:94:54:
                    31:9f:93:6d:c6:8a:ad:9b:b3:e5:6a:71:47:9e:a7:
                    33:13:7a:96:97:ad:34:32:40:7a:1c:d0:ea:d2:26:
                    41:df:34:4a:86:9d:a9:76:29:7d:24:48:d7:a7:bc:
                    ba:c6:b7:8b:e6:53:ed:06:e9:ba:88:ab:95:db:98:
                    84:84:cd:07:6b:ef:07:c6:39:58:51:ad:ba:74:89:
                    84:d0:3c:6b:2f:8c:4e:1b:fe:75:83:5c:db:a4:4c:
                    56:e7:e3:ae:3c:6a:a2:84:94:2d:b4:4c:b2:f3:77:
                    b7:31:88:f9:86:e0:91:95:c0:9e:c2:67:62:50:17:
                    e9:26:fe:ed:59:90:95:55:60:67:85:83:e6:aa:7e:
                    b5:09:1d:c2:a0:47:30:f0:c3:57:ee:1e:00:f2:3a:
                    c1:d6:25:54:e2:d4:96:02:81:b8:44:89:0d:d2:0f:
                    70:34:4d:92:c9:2e:16:02:0a:81:55:b0:53:4b:6a:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3B:1D:6B:A2:5E:B1:54:1E:C3:50:E5:EB:5E:86:B8:7F:7A:72:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/942eca6c-4365-3118-ac32-59f93e1f846c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.51.129.0/24
                  154.51.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:6f:3c:55:c9:11:8f:8c:e4:83:4d:9e:4f:fd:9f:ff:6c:
         1f:e3:9d:d8:22:f0:1f:1a:29:ef:12:6c:f5:f4:e9:66:c6:b8:
         f0:e3:22:7a:60:40:25:64:23:a3:c8:07:87:aa:89:80:bb:d4:
         e3:1b:97:78:fe:c3:1d:4d:69:5a:e1:b2:ce:90:ac:08:68:3c:
         fd:aa:a4:84:0b:39:65:b0:8b:8f:c8:4b:5c:89:21:2d:1d:f9:
         78:20:63:f9:ab:dc:cd:44:37:cd:97:f3:8b:50:ed:4a:98:d9:
         7e:12:c1:55:55:be:f8:c2:0c:9d:68:c9:11:80:ca:48:f2:65:
         b6:e3:57:25:f6:10:3b:83:c2:91:6d:b3:98:aa:13:8e:70:21:
         83:59:77:21:fc:8d:a7:85:0f:5a:cb:85:ec:79:3f:d6:91:2b:
         1c:df:6c:a6:22:6d:e8:2c:c2:f7:79:24:16:39:b9:3a:2f:cd:
         b5:77:4f:9a:b6:fb:fb:bb:e1:43:38:d5:c3:e2:57:1f:1f:7f:
         5e:3c:e0:9b:70:44:ec:c9:5b:78:0d:47:1c:20:68:0a:de:9f:
         23:80:e8:15:7b:25:1d:5c:74:f5:81:6f:31:0a:7d:ea:97:77:
         30:c5:9f:3e:41:63:d9:c6:a0:2c:38:3f:01:20:3c:af:52:03:
         1b:75:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:25:54 2026 by rpki-client