Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/d665289b-f8c4-3b5f-9afa-a66e0b4fab04.roa
File:                     d665289b-f8c4-3b5f-9afa-a66e0b4fab04.roa (raw, json)
Hash identifier:          gNkSZNIECOSyOMlDcAfmfoZ35PcaTkfzxps7F9RgbOY=
Subject key identifier:   72:06:85:B3:4A:63:38:73:61:B0:C8:93:D9:7B:23:C5:0F:8F:71:12
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584EC63C6D7525F4AC20EDD65680
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/d665289b-f8c4-3b5f-9afa-a66e0b4fab04.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     21949
IP address blocks:        167.254.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:6d:75:25:f4:ac:20:ed:d6:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=fca1fa37-988a-40eb-9870-84858e0815ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:2a:d7:64:40:33:bf:ea:b3:bc:de:a7:8b:
                    0b:54:56:6b:77:2c:59:2b:f8:cf:fd:e1:00:25:35:
                    57:eb:d6:3d:1c:d0:c9:cc:47:20:2d:7c:f3:dd:78:
                    b8:a9:79:90:68:e2:7f:b6:e6:df:a7:34:0c:27:02:
                    66:bd:96:94:66:e8:98:1e:69:31:c6:37:32:2c:9f:
                    e7:5d:eb:3d:33:37:19:59:91:b8:bb:86:1c:36:88:
                    9e:3d:06:f2:b3:77:54:06:2b:ac:4b:c7:a7:58:ac:
                    4e:b3:cd:37:b6:21:c8:0e:6b:19:0c:27:a3:32:7a:
                    28:34:5f:b2:44:da:9e:09:75:a6:db:8b:55:5f:78:
                    a6:df:a3:5f:a3:c6:be:f8:1a:c5:4e:f9:7f:0e:ec:
                    f2:ed:f1:5f:6d:9f:52:2f:c4:ca:57:70:27:53:8f:
                    0a:be:18:ec:de:3a:78:e6:37:91:2a:a4:d9:8d:bc:
                    5e:f2:14:77:ab:f1:6d:52:37:fd:bb:59:dd:ae:c6:
                    ef:51:7f:52:2d:67:05:de:33:93:9f:97:e0:b6:a3:
                    02:cd:6e:7a:2c:cd:ba:90:b3:8a:07:db:92:fa:03:
                    81:c8:a8:9d:6a:d0:a2:bf:f8:2c:93:fb:75:b4:91:
                    c9:45:4c:28:1d:c2:42:cb:76:ab:57:2f:08:59:73:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:06:85:B3:4A:63:38:73:61:B0:C8:93:D9:7B:23:C5:0F:8F:71:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/d665289b-f8c4-3b5f-9afa-a66e0b4fab04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.254.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:05:30:69:ec:1d:4a:82:af:36:14:54:7f:1c:70:6a:fc:
         00:c1:96:2e:56:b2:33:63:f0:7c:65:c5:11:a0:1c:07:88:9c:
         6f:2d:d1:bc:78:8c:7d:92:2f:86:c6:ed:23:16:2d:af:a3:9b:
         62:6d:29:d2:42:47:cf:d3:11:12:04:28:f5:70:54:fb:c7:84:
         ff:cb:98:19:1e:13:61:a6:7c:e9:bd:d1:8b:e2:87:ba:12:85:
         0a:4c:58:e5:c0:da:72:1b:9d:b7:fd:33:b9:34:6e:77:81:10:
         9b:fb:4a:c3:db:0e:aa:1c:d5:5d:21:95:06:32:a2:1f:cc:19:
         0b:d9:92:0b:a3:1c:11:74:e3:97:a1:fe:7b:20:dd:b8:f4:08:
         71:8b:10:ae:a8:ae:ec:fe:b6:3d:0d:f5:3b:75:7c:27:47:ac:
         c9:81:fc:c3:7a:7d:ee:a3:9d:fc:70:7d:66:c7:06:2a:9b:bb:
         31:92:0b:86:8b:1b:69:76:7a:9b:66:cf:ad:24:ca:76:7e:25:
         78:cc:0f:c2:8a:eb:77:c0:6a:d5:d3:05:e0:73:c2:d3:e2:88:
         9f:41:87:f6:63:bf:e5:99:5a:71:ee:da:dc:df:59:6a:86:51:
         ef:dd:fc:46:64:d5:15:c1:e9:81:4f:f4:90:68:ca:67:b6:5b:
         a3:5a:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:51 2026 by rpki-client