Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/53982829-96a6-3c3c-8bbf-bfc6a153846c.roa
File:                     53982829-96a6-3c3c-8bbf-bfc6a153846c.roa (raw, json)
Hash identifier:          mOD92128bSTf1gUyRRAse8KccSLg91eqGs8GxngwqTQ=
Subject key identifier:   20:27:88:CB:18:FC:B2:EE:00:56:6E:43:69:D9:38:EA:B4:15:65:22
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584ECBD1CB576539ABE4FEE28000
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/53982829-96a6-3c3c-8bbf-bfc6a153846c.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     54535
IP address blocks:        156.53.242.0/23 maxlen: 23
                          156.53.242.0/24 maxlen: 24
                          156.53.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:cb:57:65:39:ab:e4:fe:e2:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=02d2a4c8-b2c6-4485-af80-a1c78fceeeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:37:ab:e4:27:96:98:b0:29:22:6c:22:b4:
                    41:10:ea:cc:3f:a3:4f:e7:00:9d:60:29:3a:6b:9e:
                    bd:88:42:d9:10:7e:f6:dc:cb:57:93:60:07:24:3d:
                    10:96:b7:54:b3:a0:2d:3f:7f:39:56:1d:c8:bb:48:
                    6e:50:e6:37:42:6d:f3:24:79:41:30:8b:d0:85:6d:
                    b1:6f:d6:42:89:23:08:9c:ad:94:71:db:26:16:b0:
                    37:ac:e2:81:b8:21:fa:87:c1:2f:98:2d:71:b4:91:
                    db:01:fe:b8:f3:60:b1:52:f4:5f:b7:a4:ac:7a:e7:
                    8d:20:8a:5d:4b:d7:dd:ac:15:aa:ca:29:1b:a9:7e:
                    66:9d:6b:1c:e8:ff:3b:d6:0d:9a:a7:cb:6d:06:d9:
                    2a:8b:8a:40:e8:e6:c1:38:85:f1:d4:0f:68:a3:75:
                    43:b4:79:a6:4a:17:05:f4:50:ec:74:7d:7f:98:c1:
                    ca:5a:1e:06:4f:26:13:40:eb:73:ef:f8:65:0b:1d:
                    f9:94:56:03:fe:e9:de:fc:72:e8:3d:10:14:fe:65:
                    9f:66:79:87:ff:76:40:de:96:b1:08:78:97:46:c2:
                    a8:f3:57:0a:6a:d9:6d:86:e0:2d:ef:51:2e:cc:bb:
                    f7:7a:f7:04:64:47:b6:a5:b5:e4:73:a6:1d:4b:46:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:27:88:CB:18:FC:B2:EE:00:56:6E:43:69:D9:38:EA:B4:15:65:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/53982829-96a6-3c3c-8bbf-bfc6a153846c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.53.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ba:0d:61:15:0d:bc:3c:87:dc:0e:2c:d2:29:8d:bf:62:0b:
         57:1e:a5:27:fa:12:1e:f5:6a:73:ca:be:03:b2:1c:d8:2d:35:
         1e:71:fa:87:7b:c9:1d:fa:6d:8b:d0:43:68:72:87:78:4e:21:
         5c:d6:29:2e:82:1d:d0:fc:29:f0:04:f4:93:6e:f3:b6:7c:2e:
         53:b3:ca:78:4b:bf:74:ca:29:2a:44:87:1c:ac:4d:ba:fe:ac:
         8d:ae:67:d8:b3:db:d7:eb:f9:f1:bc:c5:d8:dd:b6:c0:e6:5a:
         b4:3f:58:e1:54:d3:e4:a5:a8:9e:e8:5a:85:98:e8:85:c3:b4:
         68:f9:3a:48:04:17:e7:0a:3e:91:41:be:19:0f:8a:d5:e7:53:
         97:42:60:ae:6c:77:b5:a0:1d:ee:aa:a3:d7:67:5f:25:ec:da:
         f4:80:8b:42:35:9a:d2:12:2c:d2:5c:39:22:d5:62:2b:ff:9b:
         42:af:02:56:9f:fb:ba:a7:9f:ed:25:10:43:33:05:db:b3:33:
         e5:19:a9:e9:df:5d:44:92:04:c1:f2:52:5c:04:00:c4:3d:fb:
         c6:bf:8a:19:4c:57:47:26:f8:de:9f:af:27:f7:67:1b:84:48:
         21:a7:de:77:32:9d:aa:2e:53:24:19:90:66:2d:d5:38:80:d7:
         82:9b:e4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:10:08 2026 by rpki-client