Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
File:                     b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa (raw, json)
Hash identifier:          Bto+5jw8T74H98OAXtfIAnDWIoWKBzB5wfi5rSYsYAI=
Subject key identifier:   FD:3A:D0:E5:6C:57:56:31:39:78:EF:32:8A:FE:E0:51:E5:CC:DE:A1
Certificate issuer:       /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial:       010D0C9F4328584F497358107A0C621501CD2280
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400653
IP address blocks:        165.123.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:58:10:7a:0c:62:15:01:cd:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=224c5545-7016-4783-9de9-2b31a1ed2734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cb:dc:59:4d:c0:fc:e6:42:9c:a1:7c:6f:b7:
                    0c:e9:c2:82:d4:3d:10:38:2d:b8:1b:a9:1f:53:1c:
                    7a:ca:cc:05:a6:5d:3a:1b:62:11:8b:85:07:b2:c7:
                    8b:6c:8f:29:c4:48:be:78:69:11:d1:0d:34:52:78:
                    1c:5a:64:c6:91:41:50:b8:88:84:d2:6a:94:38:22:
                    89:75:2d:c9:a6:3d:23:8f:8d:1c:48:17:99:9c:12:
                    b3:d2:ee:ed:2a:19:08:b5:cd:3e:4c:4e:6c:99:89:
                    1a:3c:a1:6a:5f:0d:9e:ce:81:9a:a1:02:e1:d0:9f:
                    86:29:25:31:3d:bb:53:f1:91:5a:4d:40:a8:2e:01:
                    03:af:6d:9b:55:d2:d3:8f:f8:d2:aa:b5:35:38:cd:
                    63:29:9d:1f:e7:b4:49:00:e0:5c:9b:a8:f2:a6:ce:
                    a4:34:46:a6:8e:e7:55:ca:82:52:0f:36:62:64:9b:
                    73:22:f5:dc:91:12:72:07:69:80:3a:7d:18:54:59:
                    55:17:89:15:a4:25:5a:05:b3:01:3c:f6:ef:9b:8a:
                    5e:7d:d5:92:4e:3e:35:b8:58:a8:f0:cb:3d:85:5a:
                    c5:40:15:cc:05:10:75:de:94:c9:2b:de:05:56:44:
                    54:91:b5:7a:bb:c1:aa:e6:36:c2:61:1f:4c:6e:04:
                    7a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3A:D0:E5:6C:57:56:31:39:78:EF:32:8A:FE:E0:51:E5:CC:DE:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.123.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:ae:13:a3:a6:07:54:4c:a7:d6:73:7a:fd:88:b9:07:6f:
         c5:7a:80:e2:3f:9e:6d:15:df:d3:22:b4:31:12:52:f5:7d:37:
         05:fc:9f:63:5b:af:41:ed:5b:3b:6e:ad:26:cc:26:ee:5c:e4:
         8a:73:76:d8:15:09:38:d4:3d:28:34:66:08:0f:2d:47:96:d0:
         f3:48:73:6f:c0:9c:66:be:fc:1f:b0:0f:26:90:fd:8c:97:c6:
         a0:df:64:b4:1c:05:e4:55:f0:65:8c:b6:94:8a:bd:f4:8b:19:
         c9:23:6b:f4:2a:30:42:b2:e9:66:f3:a3:58:b4:b0:51:1f:9f:
         ef:92:82:01:e2:9a:38:41:ab:0f:90:ed:34:62:e6:1c:cb:db:
         64:1b:aa:60:4b:24:07:ad:31:b6:d3:c9:8e:34:e3:88:d1:1e:
         a9:28:da:a6:18:4c:ec:01:29:5f:85:ae:0a:b4:3d:b9:c7:79:
         03:16:11:84:9f:31:4c:4b:62:cc:f9:cd:16:14:36:3e:42:11:
         51:dd:ed:8d:a4:b8:b7:15:b2:c5:2f:ab:68:45:59:e7:f4:9a:
         29:09:16:bf:34:0d:f5:d8:5d:5f:5a:7d:af:21:1a:56:74:4b:
         31:5a:6a:fe:58:95:cf:f0:9a:ff:9b:9b:73:71:68:8c:d7:0c:
         03:6a:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:18:47 2026 by rpki-client