Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd37e093-4fac-3c99-bdad-d34a1a7f75cf.roa
File:                     cd37e093-4fac-3c99-bdad-d34a1a7f75cf.roa (raw, json)
Hash identifier:          6aqv9I28P96xQZVQPxukgs43PibGaXjEK6JI1g52hK8=
Subject key identifier:   44:BD:D3:6B:1D:18:7F:A6:A1:A5:7A:82:4F:91:6A:0D:EA:64:C9:46
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9E500F1CECAC1515DB9EE040
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd37e093-4fac-3c99-bdad-d34a1a7f75cf.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        157.151.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:0f:1c:ec:ac:15:15:db:9e:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=523fa18a-1502-430a-9c61-02a778c8d756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b0:0e:a2:0c:4f:34:37:ae:f9:1f:42:e8:a8:
                    7a:57:b1:0d:da:b2:0c:94:5e:a2:ef:0b:d4:65:1d:
                    aa:2c:95:4c:4d:fb:81:ea:59:72:eb:85:66:8e:dc:
                    04:92:66:fc:5f:42:44:38:39:04:7b:45:06:05:35:
                    62:fe:ca:93:b0:78:af:51:55:ba:f8:df:7e:18:98:
                    3d:cb:21:88:43:4c:77:d1:f0:7d:a1:02:50:f0:d7:
                    79:86:b9:ae:12:84:2e:e3:c9:28:98:fd:1f:7b:8c:
                    c8:fc:98:2c:5c:2b:db:8a:81:61:61:ff:b6:10:1e:
                    29:11:fb:a2:cf:6b:62:53:9d:b0:6b:92:8b:31:67:
                    43:00:0d:f0:3f:20:98:70:2e:4f:bd:6e:4c:c8:ae:
                    84:d2:1f:fb:d6:c1:43:eb:f2:f7:9c:a1:b0:04:f5:
                    9f:61:82:96:cf:f0:15:ef:a2:b2:38:13:ce:5a:a9:
                    0d:4f:91:56:f5:47:37:13:12:5f:f0:77:11:ad:26:
                    77:ca:32:58:74:67:00:2f:ca:d4:c8:3a:75:57:b7:
                    8e:c1:ab:70:8b:af:75:c3:41:96:27:e0:68:41:d9:
                    8f:e4:74:87:cf:49:4e:2c:4f:4b:79:ad:e2:b1:b1:
                    52:b4:37:17:67:b5:26:44:34:7d:b6:9f:e5:b3:2e:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BD:D3:6B:1D:18:7F:A6:A1:A5:7A:82:4F:91:6A:0D:EA:64:C9:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd37e093-4fac-3c99-bdad-d34a1a7f75cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.151.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:16:f3:43:cb:87:92:b0:5d:18:24:3a:f9:15:ee:56:75:
         ee:10:c5:15:5e:25:f9:7a:18:9c:0b:b4:d7:5d:47:fe:03:49:
         0a:11:c5:8a:f1:7c:68:f8:ad:c2:f8:00:d7:0c:3d:a0:e9:b4:
         51:ac:65:18:bb:c3:da:82:56:fe:85:28:60:3a:2c:23:56:1a:
         52:69:9e:5d:4b:7a:4c:03:6e:87:a5:e3:db:f9:fa:d3:91:51:
         8e:d0:d2:02:3d:34:f7:78:0b:37:ea:8b:9b:93:5b:d2:09:09:
         a8:49:0c:c2:8c:a0:29:50:58:be:66:8e:7e:c3:56:12:92:65:
         5f:10:42:8c:d2:61:c9:4a:98:4e:31:c1:1f:75:0a:3b:4a:3d:
         da:d5:71:ba:f2:b1:49:3f:84:2d:68:bf:71:cb:17:d7:55:cf:
         0e:35:ff:31:6f:1e:ef:43:f0:a0:1b:5c:e2:b8:d9:01:99:13:
         eb:fd:06:05:ee:76:ba:34:db:ff:6b:1c:e7:5e:eb:cc:26:f6:
         e4:75:1b:13:17:f5:f5:76:20:68:5f:38:15:49:05:b1:91:8f:
         ef:b3:e4:56:74:06:08:72:f2:22:6f:af:68:a0:68:2f:7f:be:
         1e:3c:b5:9a:cd:0e:1e:0e:8b:01:ab:7f:7e:15:98:13:10:b0:
         bf:ac:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:21 2026 by rpki-client