Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/53f48359-1a1f-3d76-959a-5341cd58d41d.roa
File:                     53f48359-1a1f-3d76-959a-5341cd58d41d.roa (raw, json)
Hash identifier:          n1UqCuFVFHNijbEDwDVDuU9NVib3d4rjEtCvWXKybTI=
Subject key identifier:   5D:E1:7D:17:10:CC:BE:E7:95:72:BF:2B:31:F9:FB:8C:BE:41:2A:03
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100D04977D5AB891C8E7D0C0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/53f48359-1a1f-3d76-959a-5341cd58d41d.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        140.82.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0d:04:97:7d:5a:b8:91:c8:e7:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=019f5690-c504-4198-b886-89dd9263de8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:a9:34:97:a6:50:c4:8d:3a:52:b5:3b:9c:
                    13:12:5b:ae:ca:fa:44:10:80:b1:5a:23:7c:f5:f0:
                    85:91:d5:ca:c1:55:fb:c2:fa:66:34:e5:d9:7c:c7:
                    fd:f5:61:51:ef:f0:dc:c2:a9:e0:f1:f5:c5:6a:1b:
                    b9:5d:c7:e3:26:ea:89:65:2e:68:44:c5:d2:8b:3c:
                    a6:c4:3e:8e:6c:e2:db:61:30:7c:43:46:60:2d:7f:
                    5b:18:31:e0:df:33:c1:4e:d0:07:91:00:94:25:4a:
                    ce:e4:c9:10:64:40:44:1f:5b:49:7c:dd:33:76:07:
                    8b:18:c7:ca:7a:03:f5:f3:30:15:f7:1a:a4:09:4f:
                    92:7b:e7:35:48:e7:60:ed:97:c7:21:46:ac:f1:82:
                    88:97:ce:ff:45:2e:d6:72:f4:04:2b:2c:4e:28:01:
                    96:21:1c:0c:97:b4:3c:62:28:cb:9f:cd:15:7a:2c:
                    9b:23:0b:1e:16:e6:00:e1:59:59:aa:98:6a:4d:e3:
                    cc:46:b9:d0:56:39:12:f1:b4:6c:89:3a:e9:d9:88:
                    e7:55:32:cc:62:eb:a8:4a:c1:c0:90:bf:66:6b:4d:
                    ae:17:44:e9:81:3b:f9:59:ed:57:92:cc:6d:cc:39:
                    f0:db:44:d7:dd:ad:52:2d:a2:8f:b7:f9:c1:e1:c9:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E1:7D:17:10:CC:BE:E7:95:72:BF:2B:31:F9:FB:8C:BE:41:2A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/53f48359-1a1f-3d76-959a-5341cd58d41d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:e2:f2:6a:76:45:48:d0:dd:93:67:e0:9c:81:d7:64:8f:
         f3:16:c8:44:a1:e9:2e:d7:f1:b4:c6:06:ec:95:6c:bd:71:34:
         50:49:e8:20:6b:34:73:fd:ee:63:bb:9d:a3:79:41:46:59:d7:
         32:58:ed:ef:42:a2:5c:36:6e:a9:c4:a8:84:9e:66:df:a3:8c:
         d7:1e:f3:2d:e9:07:94:3e:d8:56:17:48:da:26:d0:2f:06:25:
         2b:b5:09:a7:6e:2a:26:3d:75:dd:c6:60:cc:90:79:76:61:e1:
         c3:64:96:b0:3e:da:91:7e:69:be:0d:b5:f7:9e:9e:85:df:a3:
         82:07:ab:38:f0:e1:c5:2d:0d:14:38:a4:31:80:66:6c:a5:f2:
         88:38:15:c1:76:0e:18:31:42:d1:3d:81:31:46:77:4f:e7:ac:
         23:41:48:b6:a9:0a:35:f4:6a:f5:a4:a7:64:c4:a5:bf:00:d4:
         a5:49:c0:ac:96:50:fa:8f:db:d7:b7:ff:45:17:78:e2:b8:90:
         17:a4:36:63:6a:34:af:1c:a9:e6:86:2b:b4:70:5f:26:00:01:
         56:39:0f:90:5e:70:83:39:58:eb:b3:2d:ea:aa:9f:3f:e4:8e:
         33:3a:6e:c2:85:ab:ca:b4:b1:5b:e2:e2:e5:cc:60:00:09:b9:
         9f:0f:fc:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDQSXfVq4kcjn0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk
MDE5ZjU2OTAtYzUwNC00MTk4LWI4ODYtODlkZDkyNjNkZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+pNJemUMSNOlK1O5wTEluuyvpEEICxWiN8
9fCFkdXKwVX7wvpmNOXZfMf99WFR7/Dcwqng8fXFahu5XcfjJuqJZS5oRMXSizym
xD6ObOLbYTB8Q0ZgLX9bGDHg3zPBTtAHkQCUJUrO5MkQZEBEH1tJfN0zdgeLGMfK
egP18zAV9xqkCU+Se+c1SOdg7ZfHIUas8YKIl87/RS7WcvQEKyxOKAGWIRwMl7Q8
YijLn80VeiybIwseFuYA4VlZqphqTePMRrnQVjkS8bRsiTrp2YjnVTLMYuuoSsHA
kL9ma02uF0TpgTv5We1XksxtzDnw20TX3a1SLaKPt/nB4cmenQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3hfRcQzL7nlXK/KzH5+4y+QSoDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTNmNDgzNTktMWExZi0z
ZDc2LTk1OWEtNTM0MWNkNThkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFKqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ844vJqdkVI0N2TZ+Ccgddkj/MWyESh6S7X8bTGBuyVbL1xNFBJ6CBr
NHP97mO7naN5QUZZ1zJY7e9Colw2bqnEqISeZt+jjNce8y3pB5Q+2FYXSNom0C8G
JSu1CaduKiY9dd3GYMyQeXZh4cNklrA+2pF+ab4NtfeenoXfo4IHqzjw4cUtDRQ4
pDGAZmyl8og4FcF2DhgxQtE9gTFGd0/nrCNBSLapCjX0avWkp2TEpb8A1KVJwKyW
UPqP29e3/0UXeOK4kBekNmNqNK8cqeaGK7RwXyYAAVY5D5BecIM5WOuzLeqqnz/k
jjM6bsKFq8q0sVvi4uXMYAAJuZ8P/L4=
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:35:17 2026 by rpki-client