Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/326ce21f-a360-3fad-b2de-69bd5e884293.roa
File:                     326ce21f-a360-3fad-b2de-69bd5e884293.roa (raw, json)
Hash identifier:          u0HI64hF0bQQT432w2CQ7Eq/yXVU9eQlhtd6jA1perU=
Subject key identifier:   79:25:25:83:A2:2E:B1:3E:B3:2D:F0:A7:48:43:D5:8C:DC:F1:FD:43
Certificate issuer:       /CN=1ff41215-3026-434d-963c-327afdcf5cbe
Certificate serial:       010D0C9F4328584D39CFA1D1DE7B8F7974250300
Authority key identifier: AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/326ce21f-a360-3fad-b2de-69bd5e884293.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     40450
IP address blocks:        164.153.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:a1:d1:de:7b:8f:79:74:25:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff41215-3026-434d-963c-327afdcf5cbe
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=1f98bd23-109a-48e1-af57-03004b92e81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e3:31:88:a6:7b:62:21:49:9c:04:ec:22:8b:
                    bc:dd:e2:85:80:98:67:2d:07:ba:40:c7:54:80:ac:
                    c5:34:1b:22:63:15:3b:66:80:bd:a8:75:48:f1:89:
                    b8:f1:4e:f5:05:6e:bb:5f:e1:ed:5c:d9:21:d1:55:
                    05:85:28:a2:ce:37:d2:20:6d:8f:ab:c9:c4:2e:5d:
                    15:51:24:13:01:c8:7f:90:7c:3a:aa:7b:d0:6f:41:
                    aa:f6:3d:ed:c8:06:09:84:70:5a:1c:45:f0:10:ba:
                    10:6d:d9:66:92:1f:77:72:1d:6c:4d:6d:5e:48:e6:
                    df:97:c4:21:a3:62:1a:eb:2b:48:84:c5:70:da:a6:
                    03:4a:9d:3f:51:63:fa:e0:02:0e:3a:a3:d0:04:ce:
                    50:9b:30:fb:0a:9e:dd:56:14:f4:b0:5b:fb:ac:58:
                    06:38:85:5f:76:c0:36:4b:d0:b5:40:29:93:c1:f0:
                    c1:39:f6:8f:c3:53:fa:c1:27:89:3f:31:77:fc:03:
                    1b:ea:87:ac:b8:c3:47:2f:c6:3c:53:6e:cf:f4:a8:
                    46:f9:60:7b:b5:f1:25:41:a3:78:56:83:7d:4d:dd:
                    ff:e4:9c:a7:5f:a5:be:9c:30:cf:2e:d9:39:84:f8:
                    e7:95:b5:33:69:a7:30:f9:71:77:7b:72:37:24:db:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:25:25:83:A2:2E:B1:3E:B3:2D:F0:A7:48:43:D5:8C:DC:F1:FD:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/326ce21f-a360-3fad-b2de-69bd5e884293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl

            X509v3 Authority Key Identifier:
                keyid:AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f2:0c:8d:9a:94:d6:9f:35:cd:c3:92:11:7a:2c:df:38:9b:
         1a:b6:5d:ed:bb:3f:58:61:af:62:15:db:5b:67:fc:94:66:f9:
         5c:bb:50:58:b4:5e:c6:77:6b:d7:cd:f7:69:ae:fc:f8:2f:c7:
         47:fb:7c:eb:04:73:76:a9:a1:19:2d:95:6d:30:f6:0d:ef:4b:
         da:13:63:e4:36:53:f0:fd:37:62:a8:e0:c7:b2:32:cb:78:93:
         6b:0a:44:b3:ec:57:1d:0a:d3:a8:52:55:48:33:49:7c:13:54:
         35:6c:63:1b:2d:db:76:4b:90:a1:24:95:1b:8a:74:48:9d:a5:
         c4:1a:50:a8:b6:f5:2c:5e:d6:9c:1a:b0:dc:af:58:c7:35:ce:
         c4:74:eb:12:7f:e8:0e:78:5c:40:5d:3e:a6:5b:24:46:2b:34:
         be:9d:dd:88:e8:f0:dd:fd:1d:4d:26:ee:ea:8d:c2:10:94:9b:
         e4:57:72:2f:93:20:be:45:59:a8:a7:69:69:7c:09:68:a6:98:
         11:81:e2:9f:63:a1:8b:94:c7:e4:08:c2:d5:92:8f:90:30:f1:
         58:b4:2f:82:5a:81:50:d5:55:24:07:97:09:d1:66:c1:1e:a7:
         ab:b6:15:f3:e5:4e:c0:ff:c3:17:d6:a9:4b:74:ca:fc:99:ad:
         5e:23:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:04:38 2026 by rpki-client