Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c91fb1f-b333-31e6-9ac6-92817d32acbc.roa
File:                     7c91fb1f-b333-31e6-9ac6-92817d32acbc.roa (raw, json)
Hash identifier:          C/hwF6UB32AGth6EBFkSUjWKe0rKbuBD1rTxBEb8yqE=
Subject key identifier:   03:0B:1C:A0:53:60:6B:32:FB:85:79:95:87:17:BE:DD:76:DA:E0:86
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC6CAFB35D3EC7F868DDCFC00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c91fb1f-b333-31e6-9ac6-92817d32acbc.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     54253
IP address blocks:        151.104.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:fb:35:d3:ec:7f:86:8d:dc:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=7f3b04ac-7b7c-4059-a465-0dcd23c3083d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:03:5e:82:1d:8c:b0:3b:49:32:f1:e4:43:f6:
                    76:33:ff:54:e5:48:12:cd:60:30:70:48:6e:30:59:
                    d1:2c:02:4a:93:dd:d2:a5:8e:12:48:1e:60:b5:79:
                    a8:24:24:4b:25:51:8f:91:e7:31:b7:8c:14:7c:89:
                    e6:d9:c6:54:c3:3a:3d:e1:f6:0d:68:66:d5:c4:07:
                    31:97:ea:2b:10:8d:4e:c9:45:96:4f:75:17:d8:24:
                    c9:87:c3:ee:21:3f:a0:95:14:ed:3e:66:94:03:2e:
                    c8:53:38:c4:88:b5:14:1b:ce:a1:bf:68:e3:70:7b:
                    cc:42:2a:c7:8f:47:5f:c1:3d:e2:a9:2c:94:c5:3f:
                    36:ac:9e:58:f8:ec:84:5f:ee:ca:43:33:73:5f:f0:
                    78:b8:d7:65:5d:00:db:de:fa:19:69:65:8f:f8:7d:
                    55:d2:b3:ab:d0:ef:14:3c:27:e5:cc:54:f0:fb:bb:
                    96:f3:7a:b7:c8:b2:31:94:ee:52:cd:fa:c4:26:8d:
                    eb:2b:51:15:bf:37:a2:f5:01:4f:6e:49:a6:70:54:
                    75:46:d1:be:68:3f:a6:f0:f0:47:aa:0a:df:1c:01:
                    26:bc:ee:3a:e0:5f:33:87:4f:bd:24:5d:92:6c:ae:
                    36:ed:e2:b1:34:dc:b1:01:d3:50:2d:a6:a5:88:1e:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0B:1C:A0:53:60:6B:32:FB:85:79:95:87:17:BE:DD:76:DA:E0:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c91fb1f-b333-31e6-9ac6-92817d32acbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.104.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:08:42:a3:0d:75:b6:28:97:f6:c9:95:98:39:5f:cc:55:ce:
         b7:04:25:5b:f7:3b:80:62:85:73:22:17:91:c6:0b:bc:a4:c1:
         0b:76:4a:67:dc:43:14:e7:4c:b3:30:a1:68:40:fd:11:6e:62:
         ea:89:60:51:cc:2b:66:2c:da:97:21:c6:a0:2d:bf:2d:68:34:
         66:d0:6c:28:50:65:8b:83:9c:27:10:bb:24:0f:63:bf:ed:c1:
         92:bb:fe:ec:a4:dc:8e:d7:da:70:c3:dc:c1:ee:cf:16:9a:7f:
         02:77:07:13:92:ac:15:21:a1:9b:f4:5d:48:92:ad:cc:4c:bc:
         75:59:95:a4:11:83:79:a6:a6:16:ff:4e:1a:d6:35:d5:d1:a9:
         6f:35:e0:bb:5f:b5:3f:11:af:66:0c:d2:66:28:66:a6:e5:60:
         c4:2b:3e:34:b3:fa:82:a5:92:de:b5:23:06:67:07:27:43:e5:
         58:bf:9c:a1:05:00:a7:c4:5a:65:5e:b8:3a:f1:a8:de:a5:0e:
         60:02:bb:e4:4a:8b:29:31:b0:f9:18:4c:79:d4:36:0e:8a:ec:
         2a:d1:b8:53:bf:14:53:16:8a:11:39:24:1f:aa:8c:7a:b6:ad:
         20:a4:96:e9:93:ec:67:a6:23:a9:03:5a:dd:b6:25:ab:2a:e7:
         eb:93:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:13 2026 by rpki-client