Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/cf704735-2c1f-3415-ba58-cd8074a98a85.roa
File:                     cf704735-2c1f-3415-ba58-cd8074a98a85.roa (raw, json)
Hash identifier:          njPjf5uOv1h7UddkYWm7O+OWjJZUKm2o3DyCWQIZctc=
Subject key identifier:   11:D7:40:AE:FE:C1:AB:6A:94:6E:99:4F:E0:65:F3:BA:A6:96:DA:B2
Certificate issuer:       /CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
Certificate serial:       010D0C9F4328584F5E62D186771D8EBD859DC980
Authority key identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/cf704735-2c1f-3415-ba58-cd8074a98a85.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     30437
IP address blocks:        165.156.24.0/24 maxlen: 24
                          165.156.39.0/24 maxlen: 24
                          165.156.54.0/24 maxlen: 24
                          165.156.55.0/24 maxlen: 24
                          165.156.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d1:86:77:1d:8e:bd:85:9d:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=d0586b72-5cae-44f8-991e-661fe4ae5723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ec:84:25:f1:d8:14:f6:77:90:75:35:5d:d1:
                    25:b7:4d:52:14:e8:17:16:63:be:a8:16:97:79:93:
                    41:0f:b1:10:a5:ce:b0:44:6f:a3:9b:ec:16:fc:df:
                    95:87:b9:a6:5d:41:06:b1:4f:cb:bd:3b:3e:75:ec:
                    fc:ec:db:86:2e:22:76:d0:22:49:91:31:3a:f5:55:
                    c1:e8:a3:dc:59:ba:ad:b8:f8:12:10:42:cc:c0:e6:
                    70:35:85:1e:76:e5:7e:8d:2e:ed:b8:16:63:c4:6d:
                    75:e6:cf:a1:bc:94:b4:ac:d1:c9:50:53:79:00:40:
                    6a:58:7c:39:0d:4e:30:e3:aa:bf:27:12:5e:df:3d:
                    72:61:dd:be:77:fc:ad:87:f8:32:3d:20:4b:7a:66:
                    6e:11:ea:ff:b8:3a:9b:f0:a8:0a:a2:1c:58:d2:89:
                    48:ff:1d:a3:34:6a:93:e8:c9:39:4a:b4:e3:15:83:
                    1b:d5:3c:87:6f:1c:2e:4c:4f:7f:e7:03:cc:39:33:
                    42:95:6f:dc:7e:5b:e6:84:0f:10:b7:5b:28:e5:b0:
                    96:b6:10:e3:ab:5d:d5:86:38:39:4f:c3:84:43:ff:
                    84:97:0b:51:f0:16:66:c3:fe:f7:50:f7:b1:3e:cf:
                    0a:75:72:a7:2e:0a:8b:6c:6b:99:e1:43:71:c8:88:
                    03:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:40:AE:FE:C1:AB:6A:94:6E:99:4F:E0:65:F3:BA:A6:96:DA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/cf704735-2c1f-3415-ba58-cd8074a98a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl

            X509v3 Authority Key Identifier:
                keyid:58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.156.24.0/24
                  165.156.39.0/24
                  165.156.54.0/23
                  165.156.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ea:ae:d0:67:45:aa:a2:99:f4:03:ee:30:d5:8a:98:ab:e9:
         20:4a:02:4e:62:2f:69:c1:05:8a:e9:e8:da:62:90:f3:b0:e7:
         63:26:70:61:24:da:86:28:e9:fe:49:12:eb:92:6c:20:63:67:
         4c:3c:50:79:1e:69:79:23:dc:2b:e5:89:3a:91:a1:a3:58:50:
         62:44:db:93:7d:84:ac:55:fe:0e:35:9b:6a:c0:60:c0:a6:fe:
         30:af:ab:5a:76:f6:f1:3a:24:fb:ef:02:18:a2:67:85:08:58:
         e1:60:11:cd:c6:88:b4:db:6a:9e:fc:9c:9b:38:00:c7:a0:d5:
         36:e3:fd:c7:ce:d7:45:79:9b:59:b8:2d:11:1b:37:6c:cb:c4:
         b2:10:d1:3b:b3:2c:5a:53:0e:70:3d:4a:9b:48:ed:15:43:19:
         bb:7a:90:f7:e5:e2:0d:61:37:43:6d:8e:92:c6:8a:4a:2d:5b:
         ab:5d:96:56:46:bb:0d:2b:b7:e7:c2:7f:fa:a7:06:46:56:b5:
         8d:85:ff:1a:0e:02:04:a7:a6:d2:98:6a:ad:83:fb:ce:a5:42:
         68:d3:a7:38:01:f2:16:2e:21:65:47:cd:b4:31:c8:48:23:70:
         76:3b:96:b5:11:6d:91:d7:f4:d3:b2:33:cb:7c:05:63:b7:50:
         91:84:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:13:41 2026 by rpki-client