Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/543c5650-8637-3f4d-af36-15118bf9130a.roa
File:                     543c5650-8637-3f4d-af36-15118bf9130a.roa (raw, json)
Hash identifier:          jRyOtjKzh2cmuhQnN2ULG9JPz0/UtgbpZ8qPX8gpI8s=
Subject key identifier:   C5:81:EE:FA:4A:DF:ED:A5:AC:86:86:AE:77:C7:07:2B:3A:0B:40:25
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584F3CE2B723D173C3C71BF5A880
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/543c5650-8637-3f4d-af36-15118bf9130a.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     401636
IP address blocks:        165.173.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b7:23:d1:73:c3:c7:1b:f5:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=b00a327e-da62-4ead-b545-0006e2dc46a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:16:57:ca:80:00:64:fa:f2:72:57:99:4a:
                    2a:09:d4:6b:85:23:59:a0:9e:1b:f5:1c:85:11:53:
                    31:46:a3:04:2f:23:9a:13:3f:26:bc:63:eb:fc:a3:
                    8d:1e:2b:fe:7b:bd:fe:5f:47:71:a9:21:3b:99:db:
                    cf:d3:a7:c6:c0:a7:45:cc:45:55:8a:7a:62:1b:64:
                    4f:9d:36:b3:c6:2e:4a:40:c4:55:bc:5f:f2:3d:97:
                    ad:81:49:53:d4:60:90:84:24:48:73:56:c9:cb:94:
                    3d:01:fc:ee:be:9c:4c:10:3a:b2:e8:2d:14:e1:20:
                    52:41:2c:3d:a5:cb:4c:fc:e4:0b:63:1e:5c:42:07:
                    0a:65:fc:d7:50:a5:af:ec:fa:07:5a:ee:07:28:48:
                    94:86:f0:6d:e6:b8:b3:4a:f1:24:79:93:8e:be:5b:
                    d4:2f:e2:7a:86:a9:a4:ff:19:bf:28:e5:48:a5:25:
                    7e:5c:89:90:7f:d7:dd:ec:5d:16:f3:a2:72:1f:18:
                    7b:8a:34:3a:cf:cb:96:f0:fa:b6:2b:5a:4e:96:99:
                    94:6a:a4:32:c0:8b:9a:84:07:1c:6a:e2:b3:56:a4:
                    43:17:fa:0e:87:cc:77:7b:e8:d3:37:96:eb:70:11:
                    72:23:c4:42:c7:53:e3:b1:77:f1:e8:78:65:e8:40:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:81:EE:FA:4A:DF:ED:A5:AC:86:86:AE:77:C7:07:2B:3A:0B:40:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/543c5650-8637-3f4d-af36-15118bf9130a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.173.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:af:48:c1:bc:ba:2d:20:89:7b:39:41:84:ed:12:f4:d1:fc:
         c8:7e:45:e1:b6:f9:d7:98:ca:ac:f1:f1:c6:a8:98:f6:eb:de:
         65:f3:47:f3:aa:d0:f0:3d:26:23:30:18:26:2e:98:55:f0:64:
         2b:8a:b6:f7:6a:52:ca:0f:29:51:f7:fc:e1:9d:01:25:13:c9:
         18:83:9e:27:75:c7:88:f9:26:f6:cd:5f:be:47:22:47:7e:72:
         43:42:fb:4f:67:fc:3e:95:d8:4b:6e:29:f6:98:33:6e:29:3d:
         eb:8d:54:be:63:54:84:44:03:b2:b6:c6:ff:40:28:98:4d:7e:
         a7:51:ae:7a:d6:43:1a:b9:40:80:35:5e:1b:d0:4f:5e:bb:ff:
         b3:9a:0b:1d:76:41:c8:df:42:c5:70:d4:3f:51:d0:3c:c1:70:
         f8:94:ff:76:6d:b1:db:76:99:c9:26:ce:8d:08:d5:9c:4e:b6:
         48:2f:c3:75:0a:d9:b3:a6:ca:1f:76:c2:af:92:43:20:3f:34:
         de:59:4f:0e:48:72:58:98:77:5d:66:73:77:ce:ba:7b:2e:7a:
         d2:93:11:ec:96:41:78:29:c5:9c:ab:b9:ca:cc:76:2b:62:21:
         f7:13:41:67:4c:9f:58:4a:00:2e:1c:89:12:3b:6c:42:eb:86:
         0f:81:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:50:18 2026 by rpki-client