Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa
File:                     04477d9c-7b78-3e6f-8e26-aad090d37c24.roa (raw, json)
Hash identifier:          E7lq3SitWYaKSU3ez+qittp9bg3c3C3xSZMTVW+20cw=
Subject key identifier:   5D:BA:EF:DD:FB:A1:5D:EE:42:14:ED:60:77:3A:F1:E4:E8:03:64:6A
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584ECA6C73639C588165D96CB100
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     5769
IP address blocks:        198.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:73:63:9c:58:81:65:d9:6c:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=c05d117b-9f33-46d7-9b12-9fc15659a74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:15:c3:a9:7e:f3:15:35:46:1e:97:93:e6:
                    26:cf:38:da:25:58:14:a2:2f:e7:c5:31:6e:b8:33:
                    81:c3:97:c6:95:4e:38:ea:7d:0c:5b:43:8b:4b:35:
                    9a:a6:f6:f0:c7:ec:df:27:15:85:ad:fc:10:3b:48:
                    3c:d2:5d:9d:ae:0c:d5:f3:86:94:b0:49:f1:68:6c:
                    27:7c:d4:37:c7:bd:67:18:2c:cd:45:02:05:06:b7:
                    e4:24:f8:39:74:71:77:26:b8:db:da:d4:a6:cf:c5:
                    cb:dc:3e:79:15:bc:32:ff:d5:52:fd:ce:bd:85:b7:
                    f2:9f:14:8a:00:d4:2f:e9:97:a2:98:6f:3b:90:91:
                    91:86:1d:f5:55:81:b3:5c:a2:22:69:eb:57:9d:80:
                    80:91:e3:aa:95:06:4a:6f:b2:66:dc:c0:b7:1d:b1:
                    54:43:b5:33:ae:ae:32:7f:fc:7c:99:93:62:24:a9:
                    4a:57:8a:9e:71:e4:57:31:bc:9d:bb:f6:a3:37:92:
                    47:42:c6:6b:5d:41:95:78:61:ff:8f:20:54:93:c1:
                    31:c0:b7:6e:53:26:75:d2:99:60:8e:78:fd:b2:bd:
                    17:2c:f5:0d:82:69:99:c0:41:73:3c:fa:52:c8:2d:
                    bc:48:b0:84:50:cf:c0:34:20:34:e2:13:0b:7c:c9:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BA:EF:DD:FB:A1:5D:EE:42:14:ED:60:77:3A:F1:E4:E8:03:64:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b6:f9:3b:3a:37:f4:e2:9e:42:f0:bd:1a:2a:e7:cb:3f:0f:
         f9:68:c3:a0:84:dc:e7:ef:42:a8:33:1c:66:f8:05:04:93:a8:
         4d:5b:70:b2:87:05:77:8e:4b:38:31:91:75:be:d5:02:96:98:
         a0:03:fe:6f:f3:bd:ce:fb:fd:66:e7:61:6f:16:cf:90:05:73:
         bf:c1:37:4e:4c:ca:4a:d1:b4:4a:81:4b:99:4b:27:0e:2e:2b:
         f2:21:13:8e:f8:6c:88:4b:eb:45:75:8e:50:5d:1b:c1:bc:e3:
         e7:4f:30:ba:17:09:2c:8d:72:d5:b5:83:17:86:81:cc:fa:90:
         57:d4:54:f4:fa:db:4d:ca:c1:f7:00:0a:c2:5c:86:20:db:40:
         f2:a1:3f:60:2d:f6:18:06:ac:29:ca:14:37:6c:cf:61:e1:17:
         c6:73:a2:6a:05:25:25:7a:cc:25:ec:c3:65:d9:a1:8c:9a:c5:
         31:49:33:6e:27:b6:19:82:9f:bc:8f:ca:0a:9c:d2:b2:0c:d3:
         e1:53:5e:c8:00:a5:64:47:b4:83:a8:61:52:dd:46:aa:ee:f8:
         51:ef:ca:58:df:1f:04:3e:ba:4f:7d:e5:d9:95:62:c9:69:8f:
         8f:18:88:b3:37:39:fd:20:e9:6a:ef:92:76:4c:b1:5a:2d:23:
         f3:3f:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:56:28 2026 by rpki-client