Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a431ad54-d959-39f7-bd09-17f040c094f2.roa
File:                     a431ad54-d959-39f7-bd09-17f040c094f2.roa (raw, json)
Hash identifier:          dxi9ixYrgZgKsZ20vO/5ApdmLQECqM/pbm6fA+wjBmU=
Subject key identifier:   1E:D5:13:E7:F2:B7:45:CE:F9:29:47:80:EA:44:34:51:4E:FA:6A:E3
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232DE9426EA3F64F792D80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a431ad54-d959-39f7-bd09-17f040c094f2.roa
Signing time:             Wed 19 Aug 2026 18:03:42 +0000
ROA not before:           Wed 19 Aug 2026 18:03:42 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        157.238.195.216/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2d:e9:42:6e:a3:f6:4f:79:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:42 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=234bb9d4-962d-442e-bc44-de406349aa01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:ec:c9:7f:86:70:02:c5:8b:96:1e:fa:05:
                    b7:bf:99:51:f0:71:b3:a6:cf:41:c7:72:0a:34:b9:
                    57:5c:cc:90:af:6c:75:39:b4:41:5d:23:f3:bd:82:
                    5e:d3:7b:b4:9a:5e:bd:90:87:bf:c4:be:21:23:57:
                    66:b2:d2:1a:88:32:16:d0:6b:2c:25:eb:02:a2:f7:
                    93:ad:e6:8a:c2:35:b0:ae:b7:6d:50:a0:79:f1:c3:
                    cd:45:7a:bb:82:55:d2:f2:ea:28:6e:e6:b5:f5:b8:
                    8c:91:82:0d:7f:22:b7:ef:5b:f3:bf:c2:7d:bb:b9:
                    49:ba:c8:fb:3e:03:e5:a5:36:cb:7c:a3:81:94:82:
                    9d:03:c3:e6:aa:f9:1a:5c:d9:c1:cb:dd:a8:ea:c9:
                    e9:10:69:2b:a0:0e:45:4a:e8:95:31:14:ed:74:f7:
                    9e:99:5d:b5:9a:23:98:cf:9a:1f:64:56:47:fc:f3:
                    1f:24:b8:bc:bc:96:79:38:ee:c4:0a:dc:bb:6d:60:
                    7f:12:7d:23:78:fc:15:88:9c:a8:5a:32:dd:50:76:
                    b3:df:a9:c7:a5:b1:39:fe:2e:28:d8:1b:0d:98:87:
                    e2:e8:b9:5a:13:e9:cc:a0:7e:bf:fa:8d:09:79:99:
                    a4:aa:b9:93:b9:d2:6b:14:47:9e:56:80:ca:c0:f0:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D5:13:E7:F2:B7:45:CE:F9:29:47:80:EA:44:34:51:4E:FA:6A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a431ad54-d959-39f7-bd09-17f040c094f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.238.195.216/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:74:6a:4c:e2:bd:d2:20:12:15:2d:2c:45:9a:4b:1c:d8:65:
         da:a1:df:c1:68:71:4f:87:ef:07:65:19:bc:82:0e:31:36:4c:
         20:4a:97:ae:f4:87:bf:b2:33:f7:28:7e:da:36:bd:a0:ee:8c:
         3f:dd:e0:19:24:53:9b:b5:e1:22:de:93:e2:b9:25:d1:77:cd:
         0e:d3:21:44:51:8e:36:a0:85:33:b6:f2:be:28:fb:28:9e:84:
         db:c0:45:6f:a4:9b:67:86:04:6a:dd:7c:57:5f:d4:ed:22:dc:
         32:a5:34:97:0a:d2:70:d2:dc:8f:55:1e:66:57:bf:bb:3f:44:
         5a:38:9b:8f:59:f7:f6:82:6d:07:48:00:1a:88:98:1c:72:35:
         ee:98:de:ff:8c:dd:98:f5:21:6a:33:7d:3f:bd:e4:c1:e7:06:
         ae:9d:54:ab:ff:6a:14:c5:f7:02:d1:59:38:de:86:e5:d5:3b:
         f5:9f:24:11:e1:25:05:f2:eb:7e:20:8a:26:81:e6:7f:9a:48:
         ca:0f:85:ce:a1:7b:c9:55:25:40:94:eb:92:cb:50:2d:b6:92:
         d8:33:85:bb:6b:60:09:52:4f:2e:37:3b:8b:fe:15:02:f9:7a:
         91:99:ad:fe:37:b9:e5:8f:b8:42:17:30:db:54:af:64:42:71:
         6c:fd:c1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:54 2026 by rpki-client