Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/a2ad1d9c-0132-3265-b65a-813f25becdd8.roa
File:                     a2ad1d9c-0132-3265-b65a-813f25becdd8.roa (raw, json)
Hash identifier:          6XrbLc5CukXvhUHlgpQcxtQ6C5z8gWNc9D64KYB/De8=
Subject key identifier:   EB:41:7E:FF:6F:45:E1:3E:72:54:A2:09:01:D4:D0:D3:78:B8:48:62
Certificate issuer:       /CN=ac1693ef-e9a9-469b-9bc9-4fd318a8e897
Certificate serial:       010D0C9F4328584D94E12C0E0E9A41F7A1B55A20
Authority key identifier: 02:1D:0E:99:A4:74:6D:EA:31:08:2C:B0:1A:4D:7F:A6:4D:33:27:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/a2ad1d9c-0132-3265-b65a-813f25becdd8.roa
Signing time:             Tue 21 Apr 2026 15:54:54 +0000
ROA not before:           Tue 21 Apr 2026 15:54:54 +0000
ROA not after:            Mon 20 Jul 2026 15:54:54 +0000
asID:                     6079
IP address blocks:        155.103.254.0/24 maxlen: 24
                          155.103.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:e1:2c:0e:0e:9a:41:f7:a1:b5:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1693ef-e9a9-469b-9bc9-4fd318a8e897
        Validity
            Not Before: Apr 21 15:54:54 2026 GMT
            Not After : Jul 20 15:54:54 2026 GMT
        Subject: CN=b9c3405a-c151-4176-8793-e72380612966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:65:6c:d9:04:8b:8e:bf:9a:ef:19:89:d1:
                    8d:9a:62:f3:44:5e:eb:bb:36:91:be:36:62:2a:7c:
                    65:06:e4:82:c5:66:69:75:92:c5:2f:03:bb:3e:75:
                    8b:48:9a:92:22:40:7a:0e:58:e4:6a:9b:39:ed:f2:
                    f7:fe:b9:cc:af:46:0f:72:99:d2:13:49:86:07:93:
                    94:23:97:13:ea:b0:37:da:e2:1b:f5:0c:ab:b3:f9:
                    9f:42:73:e7:d0:94:2a:1b:22:85:34:f3:85:dd:1a:
                    22:0c:67:ba:57:fc:e9:9e:b4:ad:b9:8d:42:14:37:
                    f5:e0:48:a4:e3:be:5c:46:aa:b4:04:3e:22:80:43:
                    f5:db:e5:f6:46:9f:03:94:36:a2:08:88:a7:1a:c9:
                    df:e7:ad:3f:8e:4c:0f:d8:ca:32:82:ad:8a:fa:69:
                    05:47:89:4c:28:03:c4:a1:a8:55:ee:c9:c8:7c:b0:
                    66:4d:2b:d5:9e:90:75:72:72:24:8e:d2:3c:6b:0d:
                    d7:6c:ab:c4:f2:e6:b4:fd:58:1e:bb:3a:29:6a:b6:
                    d9:6c:1b:b7:37:c8:a1:c3:0b:be:42:40:87:05:85:
                    a3:8e:a8:3e:7c:a4:5e:06:00:a9:7a:6d:f9:64:39:
                    4d:a1:d9:a2:05:6f:d8:fd:35:f8:8e:17:c4:98:f8:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:7E:FF:6F:45:E1:3E:72:54:A2:09:01:D4:D0:D3:78:B8:48:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/a2ad1d9c-0132-3265-b65a-813f25becdd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.crl

            X509v3 Authority Key Identifier:
                keyid:02:1D:0E:99:A4:74:6D:EA:31:08:2C:B0:1A:4D:7F:A6:4D:33:27:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:60:24:c2:69:92:cd:6b:68:52:f6:f3:e7:03:fa:8b:3b:78:
         bb:5b:5b:8c:5d:e8:66:9a:4b:d0:71:da:ed:1f:e6:bb:53:87:
         b1:a9:26:01:2b:ea:8f:ad:43:13:59:42:a9:9a:17:7d:bd:c1:
         15:4b:1b:1c:a7:f4:3e:41:df:6a:30:f7:32:0a:f5:1a:72:44:
         14:42:98:b8:0d:c9:03:33:db:07:87:3f:56:b4:fd:59:2a:5d:
         17:25:da:d2:54:0f:8c:74:d7:6d:85:f6:c6:08:a4:91:29:b2:
         02:65:78:51:33:88:c5:6b:db:86:9c:24:6e:82:e6:17:27:d6:
         5e:08:2b:86:f6:48:f0:87:89:9b:5b:b5:64:2f:3e:b3:da:da:
         21:8e:8c:cf:15:4b:fd:74:78:f7:b9:f0:21:83:b3:eb:b7:0c:
         e5:3c:8e:72:a6:99:77:e1:95:69:c0:25:f8:e6:17:2b:1b:02:
         29:21:a1:32:e6:73:38:08:00:9b:d5:5f:39:26:21:94:48:33:
         42:d4:11:b2:36:f1:19:0a:a9:94:79:86:32:2b:01:6f:d5:06:
         03:db:4a:f1:b1:0a:47:06:ab:5f:bc:7b:99:13:7f:54:82:a0:
         bd:0c:98:bf:71:5f:8d:ae:ab:90:74:4a:3d:29:50:14:ae:77:
         3f:b8:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:04 2026 by rpki-client