Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff1445e0-469f-31d5-a0b0-84a6c9008554.roa
File:                     ff1445e0-469f-31d5-a0b0-84a6c9008554.roa (raw, json)
Hash identifier:          LHJi9xJdyJCtQbSuVMyxnXMAFyUlmzKPP57kEpVcP/g=
Subject key identifier:   51:38:5C:FA:F7:1C:26:FF:1D:3E:42:96:38:85:1D:5C:6C:28:50:ED
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF57014AB9D3315E36AD700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff1445e0-469f-31d5-a0b0-84a6c9008554.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        159.54.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:70:14:ab:9d:33:15:e3:6a:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=31a0be27-373f-4b90-9c36-3da864503a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fa:1a:a0:a6:83:1b:e0:39:ef:77:8d:78:b2:
                    e7:9c:ae:a4:79:c3:23:24:3f:6e:f8:0d:0c:d9:b5:
                    a9:57:86:e4:2e:71:58:a8:80:d5:7d:0b:be:bc:5f:
                    44:6c:0e:77:82:f7:81:3e:3d:bf:54:51:db:c4:67:
                    5a:0e:2a:12:cd:46:61:df:e3:e2:cd:80:fb:28:c7:
                    55:4d:10:e8:94:30:3b:4e:cd:e5:f2:8d:ad:62:46:
                    04:19:cf:d4:53:4a:1a:4e:da:cf:0f:bc:36:fb:0f:
                    a1:79:5c:ec:42:40:4b:c6:dc:de:3d:53:ac:27:bc:
                    a2:bc:bc:da:df:36:b3:51:14:c1:b6:1f:9b:3d:c0:
                    e7:39:f0:c4:30:d4:74:17:3e:37:81:4e:aa:54:2c:
                    12:e2:70:3a:2b:68:7d:80:39:1e:d8:f7:74:cb:7f:
                    dd:bd:b1:1f:53:eb:f0:3c:67:9d:8b:12:73:94:b2:
                    6a:04:ae:8a:51:f9:4b:6e:5c:bc:3d:f0:61:e9:c7:
                    23:a1:b9:c9:57:1b:ae:55:3d:b3:13:5f:0a:ff:5f:
                    ce:b3:c3:05:d6:63:c1:76:f8:a1:d4:c1:55:92:1d:
                    1c:af:86:31:8d:d9:c6:96:f5:7e:f4:25:d9:07:cf:
                    36:5e:4a:85:01:c3:ce:b9:b3:82:1e:09:56:40:e5:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:38:5C:FA:F7:1C:26:FF:1D:3E:42:96:38:85:1D:5C:6C:28:50:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff1445e0-469f-31d5-a0b0-84a6c9008554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.54.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ba:90:1b:b9:13:58:97:9f:da:08:fe:0a:22:05:e9:42:dc:
         03:7f:8f:94:de:c4:de:95:63:70:3c:53:17:65:2f:c4:02:b0:
         7b:73:05:a1:7d:5e:3e:9a:44:b1:32:46:72:a5:d9:9a:07:c5:
         56:02:f2:49:27:38:2f:f7:4e:f5:4b:cb:87:65:20:a4:03:57:
         3c:1f:56:df:65:c3:8c:ab:4d:b3:b4:a4:02:2f:d7:1b:df:2b:
         4c:46:c8:77:c2:1c:8c:8c:11:ac:3e:22:58:b1:b9:fa:e2:eb:
         ab:9f:2f:65:31:43:75:8a:73:6c:09:a3:9f:88:67:ce:49:43:
         3d:35:9c:49:27:f1:15:24:53:94:81:9a:3f:ce:49:61:52:db:
         0a:42:1a:e4:37:e4:b3:a8:69:e0:97:69:68:7b:a6:5c:f2:b0:
         b1:ea:54:b9:b9:5d:0c:f9:e3:35:13:cb:07:08:01:a2:05:b3:
         7e:2e:cd:ed:66:3f:62:40:4c:a0:4b:01:a3:07:a8:cd:35:9f:
         83:32:14:94:8c:46:d0:cc:0d:ba:23:bd:5a:61:a4:64:47:ab:
         ca:17:f8:e7:14:fe:df:c2:d2:b6:35:31:bd:f9:7c:8c:b9:cf:
         cb:d6:2d:cf:b0:9c:bd:ae:e0:d0:08:7f:d2:62:d1:d3:f9:e0:
         6f:7e:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:34 2026 by rpki-client