Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa
File:                     53e29c51-e37d-313a-8354-995124430718.roa (raw, json)
Hash identifier:          z+oXnXYr7ZHym6FMB2RJUPkizOieDpUb2RuxvHlhE60=
Subject key identifier:   CB:5C:B5:D2:66:93:02:5B:51:1E:74:00:BD:9B:3B:AB:89:49:85:D4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EAE81A5201F30CB52796FD400
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     3949
IP address blocks:        165.254.26.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a5:20:1f:30:cb:52:79:6f:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=706feb6e-aadc-431b-a70e-895625466883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1c:68:23:c8:c8:9c:84:e2:89:54:ac:84:50:
                    58:c5:e2:87:b2:2d:00:3f:8a:5a:03:33:03:f0:ab:
                    b7:8f:54:c5:b2:bc:f6:15:bf:62:b0:5d:bd:7a:93:
                    cd:0d:99:73:78:f0:88:0e:72:e1:5b:bc:55:41:d7:
                    a5:ee:b8:a8:98:1c:c5:fd:7d:62:c2:6a:84:04:04:
                    05:12:09:08:8e:31:a5:f1:4f:a3:e7:a9:21:e7:75:
                    35:ba:09:39:8f:3b:bd:ce:3c:c0:80:89:28:5a:0e:
                    7f:5f:de:57:5f:0f:e7:f7:be:ad:bc:34:b9:62:7c:
                    7c:7f:e3:d1:e8:42:be:c5:05:f7:96:32:23:bc:d3:
                    6b:5b:bf:be:a9:32:e2:1e:47:38:6c:b1:1f:67:44:
                    a7:99:48:92:76:e1:aa:a4:d4:b9:b1:13:fa:45:54:
                    2b:8a:e0:90:d8:5e:6d:bd:95:64:bb:86:2d:09:d5:
                    81:c2:37:47:3c:7d:f3:51:ea:42:34:cb:cf:6d:83:
                    68:db:d0:b4:75:3c:a2:27:3d:12:2c:d1:f8:a1:8f:
                    77:fd:94:07:83:af:b8:55:9f:67:20:e3:e4:bb:d4:
                    84:3a:ff:c8:e9:88:3c:f3:d7:1b:87:f5:d6:0b:cd:
                    85:4f:94:c3:03:04:eb:40:4e:b6:f1:d7:16:ac:1c:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5C:B5:D2:66:93:02:5B:51:1E:74:00:BD:9B:3B:AB:89:49:85:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.26.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5c:ae:60:ff:71:48:1c:9f:16:68:ce:62:e0:3f:4c:c0:6d:
         24:be:bc:f6:b9:20:e9:6f:bd:02:68:0c:b1:20:eb:63:88:ca:
         5b:e8:ee:ba:dd:95:3a:88:9b:a4:fb:a5:77:56:55:ba:a4:4f:
         c8:90:16:42:08:86:e7:e1:3d:31:7d:73:e4:cd:af:f0:39:14:
         07:11:27:86:6a:ca:b4:e5:e9:6a:27:fc:f0:44:42:3a:ce:eb:
         17:30:4b:2d:d3:70:fd:29:b0:4d:fa:14:1c:34:f3:3d:18:67:
         33:db:88:83:f3:cd:15:cd:60:41:78:9c:70:a8:27:27:68:15:
         e1:3f:35:6b:57:d5:07:14:f7:47:58:ec:e1:51:e5:bb:52:3a:
         42:6e:91:14:c0:bd:01:b1:2f:58:7b:2e:5a:90:fc:42:c8:d1:
         f3:d2:69:cf:76:dc:48:6d:5f:00:61:4b:a7:01:0a:a9:a0:a9:
         a7:4b:e3:40:c8:a1:b8:18:b0:41:e0:32:bc:42:14:68:f2:10:
         80:8f:b5:37:0f:f2:13:5d:3e:fc:97:dc:4b:a3:a4:34:81:09:
         5a:ba:3c:0f:35:27:f8:17:ff:e6:0b:56:d1:38:13:0c:0b:ab:
         9e:d9:67:33:5e:cf:00:23:4d:f1:10:d1:38:e4:98:dd:34:c5:
         a8:bc:bb:e3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6ugaUgHzDLUnlv1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
NzA2ZmViNmUtYWFkYy00MzFiLWE3MGUtODk1NjI1NDY2ODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRxoI8jInITiiVSshFBYxeKHsi0AP4paAzMD
8Ku3j1TFsrz2Fb9isF29epPNDZlzePCIDnLhW7xVQdel7riomBzF/X1iwmqEBAQF
EgkIjjGl8U+j56kh53U1ugk5jzu9zjzAgIkoWg5/X95XXw/n976tvDS5Ynx8f+PR
6EK+xQX3ljIjvNNrW7++qTLiHkc4bLEfZ0SnmUiSduGqpNS5sRP6RVQriuCQ2F5t
vZVku4YtCdWBwjdHPH3zUepCNMvPbYNo29C0dTyiJz0SLNH4oY93/ZQHg6+4VZ9n
IOPku9SEOv/I6Yg889cbh/XWC82FT5TDAwTrQE628dcWrBw88QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMtctdJmkwJbUR50AL2bO6uJSYXUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTNlMjljNTEtZTM3ZC0z
MTNhLTgzNTQtOTk1MTI0NDMwNzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf4aADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBfXK5g/3FIHJ8WaM5i4D9MwG0kvrz2uSDpb70CaAyxIOtjiMpb6O66
3ZU6iJuk+6V3VlW6pE/IkBZCCIbn4T0xfXPkza/wORQHESeGasq05elqJ/zwREI6
zusXMEst03D9KbBN+hQcNPM9GGcz24iD880VzWBBeJxwqCcnaBXhPzVrV9UHFPdH
WOzhUeW7UjpCbpEUwL0BsS9Yey5akPxCyNHz0mnPdtxIbV8AYUunAQqpoKmnS+NA
yKG4GLBB4DK8QhRo8hCAj7U3D/ITXT78l9xLo6Q0gQlaujwPNSf4F//mC1bROBMM
C6ue2WczXs8AI03xENE45JjdNMWovLvj
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:42:51 2026 by rpki-client