Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa
File:                     e293fb23-fe2f-324d-8419-24162f79f58e.roa (raw, json)
Hash identifier:          Z2464ZXXKDYkcsigo7gSMxoCD58q0cYh0OnfQZQP7Vw=
Subject key identifier:   24:CC:D4:BF:CD:61:3E:5F:2B:1B:4C:6A:6E:08:D0:D0:AB:FD:E4:36
Certificate issuer:       /CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Certificate serial:       010D0C9F4328584D143D44F99F4D0EBC0FF7AB00
Authority key identifier: 41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        162.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:44:f9:9f:4d:0e:bc:0f:f7:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=c5b47953-8c35-46a4-921a-1db1c2cc8387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:59:cf:6d:34:5d:fb:8e:12:b5:48:19:45:
                    12:4c:0b:33:06:19:4d:f7:47:cd:fa:d6:97:60:f9:
                    fb:73:83:c2:e9:e2:31:12:5e:b9:05:92:79:4c:8d:
                    24:85:79:75:6d:b0:92:f1:be:f6:de:d7:e5:83:60:
                    77:71:ff:97:85:de:23:e8:99:7f:88:92:db:f6:09:
                    fe:4a:44:85:a4:3c:76:e5:e5:4d:ac:16:31:d1:c9:
                    16:d3:df:c8:3e:f1:2a:7f:53:6a:4a:a7:62:0b:23:
                    86:e8:0c:7f:1c:1c:93:2a:d4:a2:a1:dc:72:a7:84:
                    8f:0c:37:b9:4f:cb:de:2f:69:f8:89:6f:25:e5:cc:
                    3a:93:37:c7:7c:0e:9c:f4:49:4c:09:a5:fa:ff:d1:
                    be:5f:f3:4d:f3:98:15:2f:04:4d:1b:67:61:35:82:
                    aa:5b:4b:92:02:1e:80:95:dc:fa:77:7a:bc:82:ee:
                    15:99:f3:14:1b:28:ac:52:c1:a0:41:75:fc:51:21:
                    f6:83:4b:1d:c4:6d:4f:96:35:c8:05:ae:5c:0f:45:
                    34:75:f1:5d:e3:3a:5e:88:84:9b:72:83:25:7b:1a:
                    de:02:14:6a:ef:63:ab:49:17:fd:2c:e6:51:c7:12:
                    61:d0:d5:88:7c:57:67:e7:e1:86:cd:5c:4d:fe:ab:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:D4:BF:CD:61:3E:5F:2B:1B:4C:6A:6E:08:D0:D0:AB:FD:E4:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl

            X509v3 Authority Key Identifier:
                keyid:41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8f:77:a8:0a:c8:30:35:be:02:c5:39:8b:7d:f6:b7:f6:24:
         1a:f6:6c:79:cc:f3:20:dc:3a:e5:ea:da:2e:0c:1a:30:cd:35:
         ac:5f:1d:a5:9f:20:84:e6:71:ca:f8:0e:a1:15:91:2b:23:f3:
         d6:f3:da:e7:74:5e:ec:e6:95:7e:99:db:0a:1e:06:30:7d:4b:
         3e:94:3d:6a:7e:b4:00:08:da:b8:da:9c:35:0f:f5:dd:22:4a:
         ef:9b:2f:34:57:42:62:0a:7a:78:f6:96:68:c2:69:98:9d:3b:
         71:43:87:46:53:ed:7e:29:f9:91:12:22:f7:43:a6:82:2b:97:
         3a:40:f3:e4:41:76:00:74:0b:b8:94:9f:09:5a:32:99:09:2d:
         8b:f8:55:69:2d:ef:90:7a:01:cf:c8:ce:33:ac:ba:b5:f3:0b:
         67:56:0d:c3:99:ac:23:bf:b3:9a:cb:fe:5c:fa:42:7d:8e:19:
         1e:fe:6d:8f:12:8a:61:a1:70:fb:a3:48:45:f0:35:94:35:cd:
         0f:74:f3:b7:cc:2c:6c:7e:94:b3:40:09:51:8f:34:f2:f3:91:
         0b:3f:28:c9:af:ae:1d:bf:3f:c3:15:0e:2a:2c:53:12:ca:bb:
         ff:85:4e:e0:f9:30:7c:14:c2:e2:24:a0:37:b6:61:53:32:ed:
         fa:39:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:34:56 2026 by rpki-client