Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd/f1e3c934-3195-3e4c-9831-3093d5cd0654.roa
File:                     f1e3c934-3195-3e4c-9831-3093d5cd0654.roa (raw, json)
Hash identifier:          6NVtYN21355sOO+13WYqurwlgANvSj6Bmiq7N7Vn4Fg=
Subject key identifier:   99:A8:A6:04:29:34:8C:74:FD:6F:F2:60:D4:C4:9A:72:75:51:44:88
Certificate issuer:       /CN=54c30dee-430a-4152-b882-7ac800dd2ebd
Certificate serial:       010D0C9F4328584DCAFB147E8FE7422B33711840
Authority key identifier: 1C:EE:CA:ED:4D:D2:20:60:10:DE:A6:59:C8:FF:13:24:9D:5F:32:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd/f1e3c934-3195-3e4c-9831-3093d5cd0654.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     401656
IP address blocks:        141.193.7.0/24 maxlen: 24
                          170.199.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd/54c30dee-430a-4152-b882-7ac800dd2ebd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd/54c30dee-430a-4152-b882-7ac800dd2ebd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:14:7e:8f:e7:42:2b:33:71:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54c30dee-430a-4152-b882-7ac800dd2ebd
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=966a6ef7-fc28-4cce-b81c-2dfded920de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:79:bd:83:7a:1b:c6:11:43:70:71:b1:ad:da:
                    f0:0a:1d:11:8a:46:cb:07:6d:5b:ab:e3:84:0f:3a:
                    f6:3b:1a:fc:14:bf:68:54:2b:d9:96:a1:74:34:88:
                    ba:c2:d9:af:6a:29:09:c0:a1:92:72:e7:51:56:30:
                    c3:d9:4c:61:20:7c:63:b9:95:ab:3b:8e:80:85:1f:
                    0b:12:65:b9:62:b6:f3:33:59:35:98:44:dc:a0:fc:
                    be:23:a1:ac:99:d9:8b:56:48:cf:4f:ac:c2:66:6e:
                    eb:ce:34:17:76:88:4e:73:78:94:00:6d:0e:5e:88:
                    c2:50:a1:38:20:21:4f:c7:93:5f:4e:03:22:1b:0d:
                    97:d7:c3:8b:f4:f2:80:4b:5f:a5:1b:58:48:69:1a:
                    49:a3:88:26:7a:70:f5:c3:c9:f4:38:c3:24:f7:e8:
                    bc:e3:81:4d:d6:34:6e:71:b3:59:a3:cf:9a:9e:5c:
                    be:1d:d9:c5:bb:56:2c:34:a3:c0:31:bd:99:36:0d:
                    b8:59:b9:1d:de:86:6f:fb:eb:78:d9:14:94:34:50:
                    6a:eb:77:ee:1f:ae:aa:23:ee:f4:6c:18:3c:e8:61:
                    98:b8:59:76:56:23:13:fc:45:1f:b6:c5:ee:19:17:
                    b6:28:5f:c7:81:23:0a:f9:eb:a8:0e:54:08:62:ec:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:A6:04:29:34:8C:74:FD:6F:F2:60:D4:C4:9A:72:75:51:44:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd/f1e3c934-3195-3e4c-9831-3093d5cd0654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd/54c30dee-430a-4152-b882-7ac800dd2ebd.crl

            X509v3 Authority Key Identifier:
                keyid:1C:EE:CA:ED:4D:D2:20:60:10:DE:A6:59:C8:FF:13:24:9D:5F:32:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/54c30dee-430a-4152-b882-7ac800dd2ebd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.7.0/24
                  170.199.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:dd:4b:26:8d:41:9f:08:a7:21:74:d8:4d:58:9f:19:21:
         8c:7f:a8:11:eb:ed:25:17:e8:17:5d:4a:55:ee:6b:b5:16:91:
         56:94:3c:0a:5b:9c:25:07:a9:1c:15:32:42:4d:12:f8:49:a0:
         06:08:45:03:b1:9f:79:5b:a8:c8:75:2e:db:6b:a7:56:d5:5a:
         50:54:18:16:75:77:5a:ae:95:b7:ee:4e:67:92:e7:64:aa:4c:
         65:80:59:f4:dc:cb:56:81:de:d2:30:ce:8a:ff:d1:64:fe:28:
         89:c2:1b:68:ff:e8:ea:6a:cf:c8:a9:7e:aa:e1:11:da:c8:39:
         87:cb:34:2d:93:6a:2a:d6:c7:2d:1d:46:7c:ce:ac:cf:1a:82:
         22:a1:c4:13:7e:d4:8c:99:2e:fc:31:eb:7e:fe:76:1a:16:9a:
         7b:cf:7d:77:b8:2e:63:66:7f:f3:64:00:5d:84:d6:68:d6:15:
         85:c6:01:b9:8d:53:46:1d:d2:fd:4a:6f:d5:ed:b3:c4:7a:32:
         c5:58:f6:02:f3:ac:bc:bc:3e:9a:77:54:bf:a8:25:05:8e:10:
         07:17:7c:cf:5b:df:cd:22:9d:1e:b2:6e:68:87:0d:57:07:c9:
         3a:2e:99:cd:14:f3:fd:72:63:bc:42:64:58:0e:88:7b:05:91:
         f8:e6:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:31:24 2026 by rpki-client