Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9f668862-4d25-3ab2-9983-94f0252dfcb6.roa
File:                     9f668862-4d25-3ab2-9983-94f0252dfcb6.roa (raw, json)
Hash identifier:          vWi3kJjmi27BQ0nIkUeECqxTA2JQuBojTkW7ti/r+iA=
Subject key identifier:   1D:86:89:85:66:E2:63:55:BF:8E:70:DF:D7:13:91:6C:40:A6:DC:5F
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584DBD5D0D4C5B65F6C29A699580
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9f668862-4d25-3ab2-9983-94f0252dfcb6.roa
Signing time:             Wed 06 May 2026 03:56:50 +0000
ROA not before:           Wed 06 May 2026 03:56:50 +0000
ROA not after:            Tue 04 Aug 2026 03:56:50 +0000
asID:                     54994
IP address blocks:        153.43.150.0/24 maxlen: 24
                          153.43.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:5d:0d:4c:5b:65:f6:c2:9a:69:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May  6 03:56:50 2026 GMT
            Not After : Aug  4 03:56:50 2026 GMT
        Subject: CN=55db79f7-4ab9-4758-b6b0-2c8331914197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:75:23:d3:a2:59:67:0f:0f:0e:e8:c3:54:
                    18:96:db:a4:35:7a:b4:a0:39:f1:69:0b:d1:0d:23:
                    8c:1f:31:cd:28:de:90:db:6a:35:7d:a2:77:e1:b0:
                    ed:50:b3:ed:f2:78:58:21:c2:e9:5f:1d:5d:8d:34:
                    71:8b:36:09:81:c5:19:7d:5c:3c:11:7f:1c:65:bd:
                    63:d4:0e:ef:c4:78:d8:f6:fb:b5:93:b0:58:d9:91:
                    1a:3f:91:92:1f:18:7a:c0:e4:a5:ab:45:55:d4:ab:
                    95:b5:84:4a:93:8a:e6:9e:13:4d:20:1d:af:3b:28:
                    87:0a:35:0a:06:09:f4:0c:30:d7:c4:32:0c:58:42:
                    64:2d:2a:fd:59:7b:ef:42:4e:1c:75:7a:c3:5c:4f:
                    60:34:fa:96:a7:30:8c:fb:ab:dd:75:81:32:64:9d:
                    3e:4c:07:7c:d7:24:fb:31:94:62:d6:c6:e5:36:a5:
                    32:aa:3c:aa:04:75:81:53:02:de:aa:cf:5e:63:fe:
                    c4:04:73:01:eb:53:b6:3d:38:18:cc:b4:dd:34:2b:
                    04:99:3d:63:6e:f2:9c:eb:ee:67:59:05:fd:3a:5d:
                    d5:df:71:e4:62:98:d6:22:92:ba:9a:47:d0:ba:8f:
                    20:04:14:a5:19:43:f3:58:00:19:80:82:1e:e3:98:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:86:89:85:66:E2:63:55:BF:8E:70:DF:D7:13:91:6C:40:A6:DC:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9f668862-4d25-3ab2-9983-94f0252dfcb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a8:18:15:a4:a7:2e:ec:60:56:ae:a9:a2:51:44:55:00:f2:
         36:63:d1:3b:0b:ab:f9:f8:ea:a9:83:8c:c3:9f:fa:f3:56:7a:
         9a:6f:05:68:2f:1a:22:f8:76:fe:3a:e1:d7:3c:f9:34:84:88:
         72:08:bb:8f:8e:41:df:92:82:dd:01:39:d8:03:dc:5f:07:10:
         c1:6f:c0:3d:1e:75:c4:54:34:03:89:9e:74:7f:4b:d0:4c:03:
         ce:f1:92:53:6b:b6:d8:14:0a:3d:96:88:00:fa:f0:71:46:a3:
         91:3d:96:ad:fd:5a:4c:6c:15:09:37:9a:ac:c1:f4:25:82:45:
         0e:a4:80:3e:0f:94:45:4c:1e:e6:9e:81:58:b3:0c:6f:e7:e0:
         ee:6c:e9:63:95:38:50:93:58:2c:08:9f:4b:ab:fa:f8:54:1c:
         90:03:ae:a4:07:81:94:ca:24:19:03:1b:84:15:fb:c5:3a:cd:
         fe:c2:91:ef:32:ab:50:db:2f:b1:5f:d5:21:5c:82:ee:ab:7a:
         3b:c1:9e:e9:8d:73:f1:f4:05:0f:a0:91:26:72:61:cd:4f:1d:
         a4:9a:ea:97:4f:17:ce:9f:41:74:64:5c:fc:47:b1:31:80:f3:
         bc:51:95:be:8e:c4:c1:77:19:2d:e8:e7:3c:b6:35:22:0b:fe:
         a4:2f:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:04 2026 by rpki-client