Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/a5b33da0-e381-3ac3-8371-77d861fcfe5b.roa
File:                     a5b33da0-e381-3ac3-8371-77d861fcfe5b.roa (raw, json)
Hash identifier:          PdZaLJdOUDGGfNG2vOM7d2zyo1fO+s9ftBwHjdPYuKU=
Subject key identifier:   25:1A:69:9E:46:13:B5:B9:2E:DA:E2:06:54:6F:97:21:E7:7C:46:99
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F5BF0D1F164AAF0E8A7382A00
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/a5b33da0-e381-3ac3-8371-77d861fcfe5b.roa
Signing time:             Thu 01 Oct 2026 15:59:14 +0000
ROA not before:           Thu 01 Oct 2026 15:59:14 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     152868
IP address blocks:        170.75.154.0/24 maxlen: 24
                          172.82.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:f0:d1:f1:64:aa:f0:e8:a7:38:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Oct  1 15:59:14 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=eb73399e-62d0-4668-b872-f41fd3e38c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:2b:87:3d:35:57:63:f5:83:05:f3:88:5a:
                    50:7a:06:7f:16:4e:09:bb:60:4b:e1:1b:91:05:2d:
                    7d:18:95:d3:46:b9:de:5b:ab:0f:cb:dd:03:e3:2d:
                    91:3c:ee:7b:22:bd:ea:bd:27:78:76:42:56:b9:78:
                    62:ae:4d:b4:f1:55:bf:1c:0c:bb:ff:02:a6:c9:45:
                    6f:d2:bc:76:3c:a9:d2:f8:20:43:3e:a0:58:fa:eb:
                    33:77:cc:67:e6:8f:60:21:c9:bd:b7:59:95:3c:f2:
                    34:89:e9:be:98:32:4d:d8:48:ca:59:86:5f:01:65:
                    d2:44:54:6a:85:6b:91:7d:99:58:de:e0:61:17:b3:
                    c0:0a:ca:43:da:e2:02:f2:c9:c4:1a:b5:80:43:fd:
                    df:b4:ea:72:cd:b6:d5:a9:5a:a9:a3:71:86:06:1b:
                    9a:ee:34:67:92:bd:67:14:11:3d:92:90:78:2c:7d:
                    44:02:22:28:80:bc:4c:1d:ce:40:a0:04:57:cc:0e:
                    2c:72:c5:cf:30:af:d6:d0:be:67:4c:a9:e6:23:0d:
                    76:28:a1:31:b0:0f:44:cb:72:0e:c2:d9:f4:fe:dc:
                    12:99:f5:8b:bd:b0:fb:5f:2a:2d:ab:63:67:65:ea:
                    3a:02:d8:1a:3b:81:e1:c4:00:86:00:b7:b4:8c:05:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1A:69:9E:46:13:B5:B9:2E:DA:E2:06:54:6F:97:21:E7:7C:46:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/a5b33da0-e381-3ac3-8371-77d861fcfe5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.154.0/24
                  172.82.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6e:29:4e:d0:3e:e9:25:6f:e3:44:bb:5e:02:02:51:f6:74:
         04:01:b7:8e:b0:39:50:5e:e1:cf:63:2a:c2:7a:87:20:c6:9a:
         e3:ac:fc:50:bc:bb:45:4e:f2:06:37:e1:04:28:96:e8:74:ee:
         d4:35:82:4c:5e:07:41:22:92:e9:de:3c:4d:60:2d:cb:83:d9:
         44:9a:53:1e:9d:f0:a7:3c:47:4f:90:79:49:a6:f2:ea:9f:8b:
         57:a9:ba:49:38:0b:0f:e4:2a:9b:6d:8e:9d:ba:b0:eb:86:6f:
         ff:f0:78:4d:2b:70:e7:6d:15:8d:b0:52:e5:2a:22:62:a1:2c:
         64:79:b8:73:af:aa:e4:5d:ba:a7:67:36:45:a7:b7:9a:f9:2d:
         68:04:f1:2a:e8:d7:e9:84:39:9e:d6:3b:16:5d:56:6e:94:fb:
         d6:10:f5:e9:00:ad:5f:66:c5:de:1d:14:62:e4:e5:25:a8:7e:
         63:22:26:72:a1:eb:c0:46:e0:16:33:3e:f0:bc:93:2b:5c:e3:
         f6:a5:10:bb:a4:d3:93:de:b1:e5:21:40:3e:ef:c4:d8:7e:e8:
         3b:5d:b9:b2:aa:d0:27:e1:16:9d:cf:da:36:78:1b:0f:ca:24:
         86:45:98:8c:0f:4f:ce:88:5d:a0:fa:75:6c:90:98:0a:9e:aa:
         7d:6c:fd:ad
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9b8NHxZKrw6Kc4KgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI2MTAwMTE1NTkxNFoXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZWI3MzM5OWUtNjJkMC00NjY4LWI4NzItZjQxZmQzZTM4YzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidwrhz01V2P1gwXziFpQegZ/Fk4Ju2BL4RuR
BS19GJXTRrneW6sPy90D4y2RPO57Ir3qvSd4dkJWuXhirk208VW/HAy7/wKmyUVv
0rx2PKnS+CBDPqBY+uszd8xn5o9gIcm9t1mVPPI0iem+mDJN2EjKWYZfAWXSRFRq
hWuRfZlY3uBhF7PACspD2uIC8snEGrWAQ/3ftOpyzbbVqVqpo3GGBhua7jRnkr1n
FBE9kpB4LH1EAiIogLxMHc5AoARXzA4scsXPMK/W0L5nTKnmIw12KKExsA9Ey3IO
wtn0/twSmfWLvbD7Xyotq2NnZeo6AtgaO4HhxACGALe0jAVRAQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCUaaZ5GE7W5LtriBlRvlyHnfEaZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvYTViMzNkYTAtZTM4MS0z
YWMzLTgzNzEtNzdkODYxZmNmZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqkuaAwQA
rFK9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABluKU7QPuklb+NEu14CAlH2dAQBt46wOVBe4c9jKsJ6hyDG
muOs/FC8u0VO8gY34QQoluh07tQ1gkxeB0EikunePE1gLcuD2USaUx6d8Kc8R0+Q
eUmm8uqfi1epukk4Cw/kKpttjp26sOuGb//weE0rcOdtFY2wUuUqImKhLGR5uHOv
quRduqdnNkWnt5r5LWgE8Sro1+mEOZ7WOxZdVm6U+9YQ9ekArV9mxd4dFGLk5SWo
fmMiJnKh68BG4BYzPvC8kytc4/alELuk05PeseUhQD7vxNh+6DtdubKq0CfhFp3P
2jZ4Gw/KJIZFmIwPT86IXaD6dWyQmAqeqn1s/a0=
-----END CERTIFICATE-----
Generated at Sun Oct 25 04:56:29 2026 by rpki-client