Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/aebb0e61-7f53-38ef-8368-90f594c6957b.roa
File:                     aebb0e61-7f53-38ef-8368-90f594c6957b.roa (raw, json)
Hash identifier:          UGUlCWmwuHBRws3/VG48gFmPjOWGAcwMO3onsHJrkMU=
Subject key identifier:   A9:11:D4:CA:A1:8A:1C:1E:86:B3:F1:EF:58:CB:88:35:DD:F1:E2:FF
Certificate issuer:       /CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
Certificate serial:       010D0C9F4328584EBB11C4C3DE0701F0FD2647C0
Authority key identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/aebb0e61-7f53-38ef-8368-90f594c6957b.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     30437
IP address blocks:        165.156.31.0/24 maxlen: 24
                          165.156.48.0/24 maxlen: 24
                          165.156.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:c4:c3:de:07:01:f0:fd:26:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=1c6c5c31-9518-4081-a749-8d58fb93064f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:eb:e3:6d:a3:77:5d:38:94:95:47:74:10:
                    42:2a:58:4c:44:c6:00:a7:b9:fb:57:c3:08:35:c7:
                    46:aa:b7:01:cd:ad:76:93:98:7a:57:72:f6:7a:87:
                    ea:ac:0e:82:44:88:5c:f6:af:3e:71:77:d3:77:35:
                    58:32:e8:88:29:df:9b:ff:9b:7e:62:79:4d:66:1f:
                    12:96:4e:a8:e7:6a:a8:4c:fc:c7:c7:93:66:70:dd:
                    e6:4d:da:b3:72:f0:1d:17:53:18:6e:bb:d2:d9:c3:
                    d6:8c:f8:a4:d8:a6:0c:e3:23:58:51:2c:fe:0d:09:
                    b5:ba:b8:d9:bf:6e:55:a0:8a:a2:c4:aa:7c:41:15:
                    94:58:f2:2b:40:a7:28:ab:88:fa:a9:36:2d:d1:22:
                    4f:c0:74:8b:19:31:65:88:42:b3:a7:df:9f:e9:7e:
                    9f:e9:54:5f:dc:8a:0e:f7:63:e5:03:6b:20:b8:f9:
                    1a:b3:30:60:32:24:09:b5:88:21:7f:9a:21:c5:17:
                    f5:3e:db:de:68:8b:a5:85:9b:c7:bd:c7:d5:7e:e1:
                    8e:22:ba:98:c4:40:6c:35:9d:f2:e2:8f:95:c2:55:
                    7d:5c:80:e6:28:3f:ba:a0:99:4e:32:87:9f:05:cf:
                    f0:45:1c:58:01:f7:50:95:a0:d8:6c:0c:33:db:d9:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:11:D4:CA:A1:8A:1C:1E:86:B3:F1:EF:58:CB:88:35:DD:F1:E2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/aebb0e61-7f53-38ef-8368-90f594c6957b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl

            X509v3 Authority Key Identifier:
                keyid:58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.156.31.0/24
                  165.156.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:11:a9:23:1f:5f:42:99:ab:8c:52:c6:ce:24:c0:a4:56:
         b8:98:d7:26:9e:d3:b6:68:ae:38:5d:20:8a:39:f0:73:e6:18:
         78:25:2b:e4:89:01:3f:45:2d:c7:9b:b3:5a:fc:55:7f:1e:b6:
         e0:9a:e8:37:70:8a:7e:b2:46:dd:b7:fb:9f:27:91:19:4a:64:
         14:ce:62:12:ab:b9:fb:5b:60:cc:d9:93:f4:26:f8:58:9f:e3:
         47:b5:90:e2:72:e7:ac:ae:7b:80:22:59:da:08:ad:e4:a4:eb:
         45:ba:c0:bc:e7:d1:3c:d6:e7:25:c1:f8:66:ce:77:49:fa:33:
         ff:6c:af:aa:0f:72:e3:a2:bb:1a:4b:0b:c9:1c:53:4d:8e:3f:
         2e:f6:d7:9a:b1:1a:3c:0c:14:2a:bc:33:a1:db:1c:9b:ab:7b:
         e2:9c:43:eb:9f:21:f3:9d:2b:ac:cc:0a:b0:71:96:98:d5:09:
         dd:08:fb:1e:1f:53:93:0f:ad:4b:27:41:e0:d7:62:ff:0e:ea:
         1f:ef:f0:42:06:ef:22:65:54:af:15:f1:4d:9e:8e:b4:f1:55:
         74:37:73:bb:e5:36:d2:7b:13:66:e2:27:8d:7c:6b:ef:82:72:
         e1:8a:8e:76:21:91:4d:68:b8:f9:f3:56:78:70:88:a8:37:e4:
         70:5f:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:02:01 2026 by rpki-client