Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c34d22b-6227-322f-aa8a-8b83d98b56c3.roa
File:                     7c34d22b-6227-322f-aa8a-8b83d98b56c3.roa (raw, json)
Hash identifier:          D3sMWrnZEdjdLZMM/5/AOisYt35D5muZ44XJrmeh4OI=
Subject key identifier:   B6:2B:03:7C:04:88:17:3B:41:E8:DF:90:A7:65:04:EA:13:DF:4F:CD
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4972C5FC258A9C1B8A8D52C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c34d22b-6227-322f-aa8a-8b83d98b56c3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        151.104.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:c5:fc:25:8a:9c:1b:8a:8d:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b234c4c1-9411-4253-9056-24cfc1a5ba00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:93:f8:e7:38:a7:b4:32:ca:d2:1b:f5:0e:
                    8a:b9:ca:ce:94:19:2b:b0:df:b2:1d:d2:2e:bc:4c:
                    14:80:9c:98:ae:51:53:ee:f5:93:21:78:b9:b2:cc:
                    94:5e:ca:26:53:be:0a:2e:c0:41:02:61:36:55:79:
                    ee:6d:32:3c:76:e0:7e:05:fb:24:9d:6a:d3:23:75:
                    ed:d8:fe:21:75:7f:93:21:87:22:64:82:b3:40:85:
                    45:9c:35:1d:f2:f0:b2:bd:7c:77:37:de:70:bd:bf:
                    30:6c:06:eb:ce:6d:05:05:f2:42:5a:86:a0:73:b9:
                    a5:f3:76:c3:8b:9d:b9:4e:83:79:d6:3e:5f:84:f4:
                    b0:df:cc:cf:59:ce:de:96:73:3d:9b:f1:a7:b2:48:
                    e1:94:35:b6:30:62:d2:2e:c0:0c:c1:7c:11:74:01:
                    c2:01:f0:a7:1d:37:0a:67:25:09:7a:02:06:78:f8:
                    41:3e:49:ed:6f:3f:62:81:ba:d2:be:cd:8a:03:3d:
                    53:a7:f2:fe:77:52:77:b8:dd:62:c3:e7:54:bf:b1:
                    bd:56:0f:0e:19:0d:44:af:ea:3b:ec:67:f7:23:36:
                    54:57:f4:26:5e:5a:40:2e:92:36:76:d4:83:5e:bf:
                    61:fa:98:6d:2c:4b:a1:56:df:ad:2e:a2:d9:9d:de:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2B:03:7C:04:88:17:3B:41:E8:DF:90:A7:65:04:EA:13:DF:4F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c34d22b-6227-322f-aa8a-8b83d98b56c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.104.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:99:14:13:f2:7b:b5:ed:e5:cb:8d:eb:6c:75:fe:c0:14:cf:
         c9:80:c3:f3:e1:62:44:9e:02:fc:10:80:22:e5:2d:17:c6:d6:
         97:47:70:95:a2:5e:10:6c:c7:c0:62:dc:50:34:9f:c9:bf:01:
         b1:69:ed:67:4b:af:02:42:3f:86:92:c6:d8:0b:a9:6f:75:79:
         0f:e0:ce:9e:a4:85:e4:8f:f2:33:57:29:c1:a3:d4:76:f9:13:
         e2:3a:87:9a:a6:dd:e9:0f:37:12:07:63:e2:9c:42:ba:74:97:
         17:55:ee:f7:0a:87:cf:1f:29:29:67:e1:85:02:bb:51:f1:73:
         ea:94:73:e7:b8:85:8c:16:15:07:2e:38:b3:7d:0a:4c:ac:cb:
         c1:56:24:15:26:e9:a5:b3:93:00:a6:a9:5a:79:15:d0:6c:da:
         f8:0d:ff:d0:a5:9c:ba:e0:ef:ed:81:d2:19:11:3f:cc:73:ad:
         79:cd:08:86:52:b5:48:5e:bb:a9:c7:7b:9f:6b:dc:aa:74:56:
         55:53:54:e4:87:70:3e:db:39:54:3d:c1:7e:e0:72:9f:08:48:
         03:6d:aa:5d:08:41:eb:39:75:02:32:09:bb:9e:d9:26:03:a9:
         74:d1:c0:30:8f:35:4a:33:7e:01:62:65:e9:21:a9:2c:55:f2:
         c7:69:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:42:40 2026 by rpki-client