Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a53edf75-8518-399b-ab65-e492a90e52d2.roa
File:                     a53edf75-8518-399b-ab65-e492a90e52d2.roa (raw, json)
Hash identifier:          jg8TGM0rv9FAt9miVFKUnLCf3nMZ0+dhC0CNPsEyB+U=
Subject key identifier:   E5:AA:ED:81:9A:CB:2F:B8:43:D0:21:E1:14:D6:40:EE:79:A5:76:01
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584F2527A5BF35BE4513118252C0
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a53edf75-8518-399b-ab65-e492a90e52d2.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     16504
IP address blocks:        157.96.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a5:bf:35:be:45:13:11:82:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=d3c6ea02-319e-4019-be7e-ea44ab69eeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:5c:d8:3c:aa:42:63:b7:9c:5b:d8:44:31:
                    26:3d:7a:3b:b9:27:3f:a2:fc:72:80:e9:33:6f:e0:
                    39:51:62:57:c9:ed:27:06:c4:67:02:fe:be:d8:2f:
                    f0:91:82:bf:25:40:4b:d6:4e:73:80:b3:e1:37:2d:
                    75:53:bd:52:e9:77:69:88:22:28:d9:d5:ab:a9:ef:
                    03:86:32:98:58:fa:c8:13:3b:a8:96:fe:42:04:89:
                    6b:16:02:ed:c1:00:f6:a3:7c:3e:4b:ed:b6:52:19:
                    a0:f9:70:73:53:79:11:7f:92:f8:47:e3:0c:b2:3f:
                    b2:25:cb:9b:21:77:36:f9:30:d0:c2:ff:75:06:5c:
                    83:0e:2d:1b:f5:85:d2:0f:47:60:0c:dc:44:af:bd:
                    af:7f:c6:9b:80:59:6c:5b:a9:c9:63:76:3e:18:18:
                    e9:07:a5:02:2c:af:f9:b8:db:f2:4d:43:68:90:12:
                    96:8f:6d:9c:b5:9d:07:ea:8b:fb:32:46:6e:28:9b:
                    0c:a4:8f:ef:5b:fe:a1:3a:8e:85:82:15:3f:59:b2:
                    6f:ef:3f:b2:3d:16:36:09:2c:6c:b8:5b:ef:41:6f:
                    d8:2a:18:d7:7f:32:0a:02:1e:87:78:a2:75:ac:cc:
                    2b:49:ce:18:a8:e8:20:16:1d:f1:12:d5:59:ef:03:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:ED:81:9A:CB:2F:B8:43:D0:21:E1:14:D6:40:EE:79:A5:76:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/a53edf75-8518-399b-ab65-e492a90e52d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:63:f0:8b:02:9c:bf:ee:64:5c:43:89:97:71:9f:c2:e5:d3:
         ee:af:65:96:6b:74:23:75:62:7b:52:e6:7a:b2:df:1f:40:57:
         76:49:23:d2:ba:33:ab:8c:31:77:ea:ab:1d:ae:20:77:3a:d2:
         6e:79:2b:29:f3:3f:ce:bb:be:de:aa:fa:28:b8:ff:95:d3:96:
         36:41:17:ed:2f:f0:5f:be:1a:11:4f:76:40:80:50:2b:1f:3f:
         eb:ff:bb:e7:c7:22:52:c6:b1:58:5f:36:fc:34:17:6f:04:3d:
         a6:df:6d:d2:5d:b7:96:85:d6:e7:7e:c9:e3:2c:23:53:6b:2b:
         46:dd:bf:ba:81:1e:72:e1:f5:f1:f1:cd:17:27:6f:19:b6:66:
         45:d3:11:12:4c:d6:b7:d1:85:09:d0:ed:f6:50:39:b4:a5:52:
         21:2c:a2:9c:98:3d:7b:71:bd:9d:11:95:10:ee:dd:dc:92:4f:
         09:9f:a9:15:16:4f:0f:d0:3b:a7:32:a0:54:36:47:e9:bd:c3:
         75:a0:a3:4d:ce:51:62:b7:bd:49:5d:62:25:7a:66:fb:f0:eb:
         a9:2f:6d:66:b6:df:e3:a7:33:d4:56:c0:0d:f9:44:98:3d:cb:
         8e:f6:29:8c:78:37:ec:41:cd:c7:7e:9c:08:42:dd:43:55:4b:
         94:04:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:38:48 2026 by rpki-client