Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de28c58e-0ff6-3e4a-b7ca-8ddd10fd5dbe.roa
File:                     de28c58e-0ff6-3e4a-b7ca-8ddd10fd5dbe.roa (raw, json)
Hash identifier:          eroFrX5DH+o8DyttQma+JBmm5prmMRUw0VSZ4q0adpQ=
Subject key identifier:   7D:65:70:5B:44:51:99:DA:9A:C4:E8:20:CA:5A:F3:73:CE:00:42:8F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4050E861D8B8902FDC89A340
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de28c58e-0ff6-3e4a-b7ca-8ddd10fd5dbe.roa
Signing time:             Mon 21 Sep 2026 18:30:12 +0000
ROA not before:           Mon 21 Sep 2026 18:30:12 +0000
ROA not after:            Sun 20 Dec 2026 19:30:12 +0000
asID:                     402732
IP address blocks:        154.6.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:50:e8:61:d8:b8:90:2f:dc:89:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 21 18:30:12 2026 GMT
            Not After : Dec 20 19:30:12 2026 GMT
        Subject: CN=ad5297cd-03f7-4f72-9f2c-220993f93411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:11:a7:da:e4:d0:46:27:7e:96:41:ca:2f:4c:
                    12:ab:03:ea:60:d6:60:6e:61:7f:b7:bb:c9:68:7c:
                    b6:80:47:9e:f5:4f:50:c9:ed:74:a6:53:37:b4:04:
                    17:92:74:91:16:e4:65:45:6f:ed:da:cd:f5:07:71:
                    de:78:f5:5a:b6:01:e5:98:36:32:ec:1b:5a:42:d0:
                    30:e4:f4:a9:46:7f:29:ad:a4:b8:eb:e0:f1:bc:78:
                    49:1f:ba:da:81:f3:63:0b:e4:4c:81:9a:4a:e9:70:
                    a6:76:1e:6a:c5:b6:3f:0c:68:cf:6f:e7:c6:fa:0b:
                    a9:d5:70:e2:e5:76:1d:89:fe:de:6e:65:a9:3e:9c:
                    9d:0c:d5:9a:43:45:8e:4b:e7:f6:74:b0:81:5b:a8:
                    d1:b9:b5:0f:11:bb:dd:4e:b8:6d:2b:eb:c1:74:d2:
                    d2:7e:de:9d:33:15:60:50:89:7e:7d:00:f4:6e:07:
                    a3:5b:68:d8:fa:d5:81:a3:11:08:b5:38:0f:dd:c1:
                    10:a0:c7:a2:ee:a1:80:93:07:f4:66:6b:8f:5b:75:
                    6f:a3:b2:14:da:0d:34:65:65:c1:63:70:c0:9c:15:
                    f0:96:19:38:e4:87:6e:ab:47:ac:33:d8:a0:29:2f:
                    4a:9f:f5:b0:a9:9d:d5:ed:fb:e8:0d:70:50:ed:ba:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:65:70:5B:44:51:99:DA:9A:C4:E8:20:CA:5A:F3:73:CE:00:42:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de28c58e-0ff6-3e4a-b7ca-8ddd10fd5dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.6.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:91:f4:07:d5:fd:50:22:59:d3:79:8c:0e:38:78:7a:9b:b6:
         f0:27:0a:3e:fb:d8:db:c4:81:fe:4f:17:75:7e:52:1c:01:41:
         93:4f:a4:12:df:3c:57:60:fa:17:49:86:45:35:d0:68:0d:84:
         8e:92:fa:e1:f6:47:a6:3b:f8:af:ef:f1:61:83:6d:27:bd:51:
         7b:ac:d5:68:af:42:b5:32:cc:b0:c8:08:7b:f6:ee:bd:c3:87:
         cb:95:85:fc:7d:b0:a5:5c:6f:47:da:81:a3:d4:21:c6:bc:8c:
         d0:38:04:14:36:4a:91:64:62:5d:73:cd:cf:a3:c8:f1:bc:b0:
         fb:87:bc:a1:33:16:53:0f:97:37:1a:75:3a:b6:07:05:b3:74:
         f9:00:ea:e4:92:f7:de:a1:de:6d:02:71:50:79:32:0c:30:55:
         5c:cd:6d:82:6e:83:ef:c6:95:a4:2e:8b:ea:c9:ad:d1:aa:e4:
         cc:ab:1a:c0:e7:73:b1:be:4a:a8:b6:7e:08:33:d6:3d:e0:81:
         b7:40:de:70:59:fb:3f:b5:04:6b:7b:d0:37:af:6e:33:81:be:
         4a:c9:5d:98:59:77:91:f3:66:5c:f9:7c:3e:64:e3:fe:14:dd:
         24:3f:31:d6:8d:b5:09:bd:9e:ae:16:68:9b:c1:d7:82:7b:0f:
         39:16:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:31:38 2026 by rpki-client