Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/4309dd94-9b51-3e93-b051-db4c471c6d90.roa
File:                     4309dd94-9b51-3e93-b051-db4c471c6d90.roa (raw, json)
Hash identifier:          eMEf42pRm6KYFxZ6g/Tm9ym35M+jGDstQNU1XRjylAc=
Subject key identifier:   17:5F:FB:75:93:14:1D:25:7A:58:0E:C3:2A:88:B0:7B:B7:94:49:62
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D3AB9D52DDD3A282F4F467D50
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/4309dd94-9b51-3e93-b051-db4c471c6d90.roa
Signing time:             Fri 20 Mar 2026 08:52:53 +0000
ROA not before:           Fri 20 Mar 2026 08:52:53 +0000
ROA not after:            Thu 18 Jun 2026 08:52:53 +0000
asID:                     54994
IP address blocks:        153.43.110.0/24 maxlen: 24
                          153.43.111.0/24 maxlen: 24
                          153.43.112.0/24 maxlen: 24
                          153.43.113.0/24 maxlen: 24
                          153.43.114.0/24 maxlen: 24
                          153.43.115.0/24 maxlen: 24
                          153.43.116.0/24 maxlen: 24
                          153.43.117.0/24 maxlen: 24
                          153.43.118.0/24 maxlen: 24
                          153.43.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3a:b9:d5:2d:dd:3a:28:2f:4f:46:7d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Mar 20 08:52:53 2026 GMT
            Not After : Jun 18 08:52:53 2026 GMT
        Subject: CN=21be275c-2606-42f8-863f-c55ff7aef895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:a5:c2:15:7c:c4:8b:52:fb:e1:77:93:10:
                    82:b8:3b:f3:92:4b:fe:b6:07:2a:a8:73:47:ed:83:
                    23:6a:d4:d8:fb:af:d4:87:3c:87:10:76:9e:61:81:
                    8b:67:d6:6e:5f:8d:1e:fa:cc:7d:e8:73:eb:76:f3:
                    6b:ab:ca:fe:a7:3f:c8:3d:86:e2:56:34:61:6f:43:
                    60:2d:1f:0f:43:c9:d6:24:ff:82:80:6a:a0:53:b4:
                    dc:49:37:7b:f0:aa:2f:2c:da:06:cf:59:0d:75:54:
                    b2:e8:2f:f5:13:66:63:73:24:70:95:f5:d7:9d:e9:
                    13:a1:6a:69:01:32:f0:4a:a8:61:26:d9:b5:59:e2:
                    fa:cf:ff:29:b9:5f:61:9d:b1:84:d6:9e:27:ea:00:
                    64:8d:db:3b:ae:e7:ea:0d:92:08:90:4a:e8:c1:2b:
                    ca:5c:46:6d:ea:d5:8b:82:12:bc:d7:de:fb:7a:9f:
                    56:39:b5:23:45:0a:1b:53:e6:7a:48:28:f2:5e:1c:
                    a3:98:9c:dc:f7:88:4e:c1:1b:46:86:2c:e6:c7:3a:
                    1a:86:52:0b:8a:80:5c:9b:68:2d:db:9d:2b:6f:ac:
                    f1:cd:40:32:b9:e8:ce:0b:4c:33:29:ee:d2:6b:21:
                    72:79:b4:db:9e:96:08:43:44:38:e5:47:bf:f0:90:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5F:FB:75:93:14:1D:25:7A:58:0E:C3:2A:88:B0:7B:B7:94:49:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/4309dd94-9b51-3e93-b051-db4c471c6d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.110.0-153.43.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:d5:5d:d9:f1:c1:3c:9c:c4:1e:db:c7:34:02:36:b5:4e:
         2e:43:e6:de:c1:67:67:d4:71:77:3c:18:8e:42:c6:7c:bb:3e:
         9e:85:c4:3a:38:da:a2:66:14:a0:58:77:e0:29:5e:c2:f1:b5:
         46:a6:db:41:e0:a6:d8:f9:32:40:b6:ce:2e:79:35:da:95:f6:
         a8:4f:90:c5:d5:dd:3c:e5:96:85:fc:21:c7:8f:1b:86:95:9e:
         e3:2e:5e:a7:ae:ac:ab:27:f7:eb:eb:a6:01:0c:9f:ee:e2:bc:
         e0:f4:c5:7a:67:0c:6e:86:90:7b:a4:10:3d:92:0a:80:06:f9:
         5c:ef:3f:7f:f9:77:4c:aa:c5:f3:0d:cc:d6:e5:da:9a:1c:76:
         ab:67:19:c6:f0:da:b8:a9:36:51:47:0b:b0:a3:8c:ac:32:85:
         4e:ee:16:b3:04:70:b6:59:23:4d:c6:9a:8b:8b:0b:87:e9:ee:
         ed:8d:cf:9e:03:4b:cd:b7:ab:0c:03:7e:20:cb:2f:a2:dc:a7:
         fa:d4:4d:67:b2:90:e3:3c:8a:d3:5f:3e:b2:db:aa:8e:17:de:
         0b:9f:52:49:4d:92:9d:17:a9:f0:29:de:b9:9e:1c:fd:e6:1d:
         d5:20:b8:72:49:0a:8b:de:64:47:5d:cf:be:d5:a1:9e:4d:c7:
         85:d7:8a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:56 2026 by rpki-client