Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa
File:                     53e29c51-e37d-313a-8354-995124430718.roa (raw, json)
Hash identifier:          5jWUIfpzDPGdsngatl750Csb4dn7X0u+WVrR2fMj3/A=
Subject key identifier:   6B:E6:FC:65:F3:B5:C7:DF:38:BA:78:60:5E:40:F6:CA:E7:B8:2D:C9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F506D54C209C9EAC84B0EC700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     3949
IP address blocks:        165.254.26.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:54:c2:09:c9:ea:c8:4b:0e:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=038dce30-bf0a-40d9-927a-6483241b7c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:28:72:dd:0c:ac:67:5e:fd:3b:5c:da:b7:
                    00:f4:58:c2:92:70:1b:3d:6e:a2:c1:4c:10:bc:6a:
                    d8:48:a3:04:e4:90:cc:52:39:0d:d7:f0:ab:39:9d:
                    d5:d5:aa:a3:f0:62:48:01:e6:b6:b9:ab:04:65:97:
                    4b:06:ca:79:da:86:63:ab:f4:1a:fc:39:8e:33:15:
                    52:27:0a:80:00:e7:24:25:33:9e:30:56:19:1e:2c:
                    1c:66:61:2b:43:d7:55:3a:7b:18:bc:78:04:8b:59:
                    c8:62:f2:51:ed:02:90:8d:75:fa:51:40:81:b0:4b:
                    d4:dc:13:0a:91:fd:9a:16:20:a1:68:a9:3b:ce:41:
                    cf:d8:20:eb:80:92:b2:8c:b2:06:fc:5e:6e:f3:25:
                    cb:d8:35:a1:78:ce:16:83:bd:78:1e:c7:b7:79:65:
                    1f:19:ac:74:91:9b:5c:c6:ac:c2:aa:e8:02:b9:66:
                    fe:83:32:f6:3a:83:ff:4a:82:c7:e8:c5:a9:dd:3b:
                    fd:11:ff:09:78:75:3f:d6:3d:b1:3a:98:fa:6b:c2:
                    f9:8c:6c:f1:cb:4a:77:23:de:a0:fd:98:72:64:05:
                    6e:60:c8:d1:98:91:dd:6f:6d:98:f7:2a:f1:c7:d6:
                    bf:aa:b6:b1:f3:1c:81:c5:5c:dd:d8:52:2c:47:1f:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:FC:65:F3:B5:C7:DF:38:BA:78:60:5E:40:F6:CA:E7:B8:2D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.26.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:dc:44:c6:cb:a3:36:33:59:ed:27:30:bf:1a:44:91:ca:
         17:2f:f0:99:93:8c:30:b4:88:46:87:24:73:b7:3f:32:9c:7e:
         42:9e:0d:7f:d2:3f:e3:66:33:70:f9:87:4d:d6:9d:25:2c:bf:
         31:54:5c:df:d1:39:9a:e8:e6:11:69:63:5c:eb:46:cf:c4:e9:
         7b:69:df:15:b1:b5:dd:5e:89:67:01:91:6c:90:4d:da:4a:58:
         91:42:5e:3b:b3:c6:2a:49:35:10:57:64:cc:bb:1a:31:df:50:
         08:07:ac:08:b2:3b:4e:03:2b:b9:fe:cf:27:61:db:8f:7b:4d:
         99:e1:83:3b:a9:b5:3c:86:ec:c8:92:ea:5c:b7:5c:45:4b:e9:
         77:fb:0f:1d:ed:db:30:82:3a:dc:db:1f:41:52:62:ab:15:b0:
         40:a8:7e:c0:8d:6a:85:02:08:a3:9a:6d:e1:7b:fe:42:61:24:
         7c:78:07:1c:4a:56:f1:19:df:dc:9c:37:c1:95:15:46:c7:ff:
         09:9f:60:0b:8f:52:37:fb:29:16:80:f0:19:4d:28:9e:56:3b:
         33:43:43:55:34:57:85:ba:0b:f3:d1:7f:1d:ff:f6:8c:21:03:
         d1:32:f4:45:a8:13:e7:cd:49:c0:6d:d3:cd:6d:85:37:2f:21:
         b6:d4:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:45:40 2026 by rpki-client