Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17f1266e-290d-329b-a60c-664460287323.roa
File:                     17f1266e-290d-329b-a60c-664460287323.roa (raw, json)
Hash identifier:          hKTZhES5Ync1jaR4K+Ah5FBzYZWNiWLVkVSrcBEkUnA=
Subject key identifier:   65:5F:59:F1:A5:51:C3:EC:63:99:4D:A0:90:D6:68:DE:E2:EE:C2:19
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A6C55D203A98EFF0986019300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17f1266e-290d-329b-a60c-664460287323.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     4470
IP address blocks:        198.53.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d2:03:a9:8e:ff:09:86:01:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=dacddb15-123d-42ec-92a9-00592979b6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:a2:a0:27:2a:23:58:6b:8b:78:a4:ed:e2:
                    08:cd:2e:f2:1a:74:78:d2:21:5e:d6:cc:68:d8:6d:
                    f3:57:b0:d2:a5:2a:8b:07:2a:7d:b0:bb:3b:7e:1c:
                    a2:22:f1:bf:19:03:00:4c:86:17:e9:74:e4:f9:d7:
                    62:c4:5c:8f:de:49:b5:fb:2f:57:9e:56:a3:62:29:
                    87:bc:bd:52:b0:b3:e8:ec:97:29:22:d3:f3:74:4b:
                    5b:dd:e6:46:28:f0:0d:b3:59:c7:fd:1e:c1:80:2c:
                    3e:a2:fe:89:71:0a:14:3e:15:20:08:12:66:11:b3:
                    c0:0b:de:dc:5f:af:5d:3d:df:9e:aa:2c:c7:b9:e5:
                    a9:4d:d1:f5:bc:24:40:47:a4:86:a1:7d:0b:f5:31:
                    1c:47:10:45:ae:d2:0a:e5:7e:da:80:ea:10:dd:40:
                    a2:e9:af:94:d2:55:48:ad:5c:b3:4e:c3:1a:ba:9a:
                    3a:20:86:ef:e9:86:c2:b9:2c:f1:fa:1f:de:ed:e6:
                    a8:a8:6d:e3:4a:71:a4:6b:13:cc:07:72:8d:3e:6b:
                    f5:ad:85:78:71:59:dc:cc:3b:e4:a1:20:b0:db:22:
                    f1:07:c5:57:10:9b:45:37:1d:76:d5:ca:fd:cf:80:
                    ab:71:3f:ce:91:4c:cb:3a:93:26:08:43:c7:f0:ac:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:59:F1:A5:51:C3:EC:63:99:4D:A0:90:D6:68:DE:E2:EE:C2:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17f1266e-290d-329b-a60c-664460287323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.53.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:97:d4:0d:08:78:3d:b5:58:b8:7d:7c:b8:c3:a8:a9:f7:
         ab:df:54:71:e7:ea:c1:d5:8f:93:e0:67:61:40:da:6f:62:48:
         22:81:c7:0c:12:a7:0b:01:48:a1:d4:63:10:e5:04:e2:f8:53:
         b0:bf:dd:54:7b:c8:8d:84:15:f1:25:7d:da:a3:86:ff:c5:fb:
         7d:5f:78:83:09:3f:85:c1:92:90:17:70:27:ab:b9:ec:d9:30:
         ac:27:68:52:84:10:29:bb:68:cb:57:07:00:3e:ee:bd:96:0e:
         66:96:58:56:bd:01:d6:23:f4:cd:f7:7e:65:55:5d:ca:8a:d5:
         71:8e:d2:7d:e0:aa:3c:71:1d:e9:c3:b6:44:b1:e0:bf:7b:84:
         64:2e:bd:90:95:f4:0b:45:cc:bf:a9:20:48:b9:7b:b5:64:5d:
         99:6f:1d:ec:1e:31:34:5a:cc:a6:d2:d7:4e:ac:a3:45:f7:95:
         83:84:b4:60:b1:9a:16:3c:03:70:a3:80:45:0c:ca:ec:0f:b5:
         ee:b0:0d:e6:ed:66:dd:39:bd:f5:4c:c1:1f:17:79:d6:de:ee:
         b0:d1:2b:25:3b:8c:c8:88:84:41:0b:2a:7a:4b:b2:9a:21:ac:
         a7:1a:4b:41:39:72:34:21:a1:1e:57:09:48:e7:d1:4f:48:a9:
         ba:04:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:41:41 2025 by rpki-client