Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/0dbfd420-7fcb-3c19-9626-b11dca8ae09f.roa
File:                     0dbfd420-7fcb-3c19-9626-b11dca8ae09f.roa (raw, json)
Hash identifier:          jijvUSsrHQCWRlJ7FOGYjjhHn7wGBrtPgkL8fOMYpWY=
Subject key identifier:   AD:EA:5F:4A:F4:BA:F2:D9:DB:E1:48:5A:3E:B8:68:93:0F:45:C5:DD
Certificate issuer:       /CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
Certificate serial:       010D0C9F4328584F5767F9C739A701AD88120980
Authority key identifier: 00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/0dbfd420-7fcb-3c19-9626-b11dca8ae09f.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     929
IP address blocks:        167.253.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:f9:c7:39:a7:01:ad:88:12:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=e578a685-5bf6-4ad8-b6a4-a35d21b0e757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:5b:03:37:35:0a:3a:4a:d6:3e:f8:45:d8:
                    98:11:4c:93:41:77:35:0a:26:a4:93:8a:12:b6:bb:
                    c0:ce:82:8c:b6:7b:58:97:52:e6:01:c1:b2:51:e0:
                    ed:8d:2f:94:74:b4:58:34:5c:77:71:65:6e:70:a5:
                    5a:eb:82:20:2d:3b:8a:b1:9f:12:c5:32:47:b7:cb:
                    ca:26:96:ea:e5:52:0e:c8:47:1e:3e:aa:c2:18:3c:
                    54:b7:f4:97:9e:05:2f:8a:44:fa:a3:18:2a:be:a8:
                    af:0c:7e:b7:bf:07:03:d5:9e:50:3c:16:d5:2d:6c:
                    ab:03:1a:98:82:83:c8:72:fc:1e:5b:1f:6c:0b:a9:
                    2a:38:f9:7a:fc:4d:b8:33:25:ba:7c:96:a8:7b:ce:
                    f1:fe:3f:94:62:86:34:60:ef:ca:ff:4f:fa:b8:12:
                    6c:b0:d8:52:63:24:b8:ab:f5:16:0a:f5:b4:a5:94:
                    da:88:f3:c6:80:89:08:4b:10:1b:cb:7a:02:9c:01:
                    3b:a3:15:7d:6a:91:aa:96:92:2e:5b:4a:95:5a:28:
                    70:1c:94:8d:26:d9:7e:b8:c3:1e:9e:4f:54:a5:22:
                    02:f8:cf:38:d8:0e:55:44:17:fd:02:37:b9:bc:4b:
                    22:45:11:8c:d6:f8:eb:5c:0f:85:e7:f4:80:a6:16:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EA:5F:4A:F4:BA:F2:D9:DB:E1:48:5A:3E:B8:68:93:0F:45:C5:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/0dbfd420-7fcb-3c19-9626-b11dca8ae09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:08:8c:d5:f0:6d:1c:e6:dc:1e:a1:33:37:e3:f9:01:18:42:
         1d:d2:7f:83:89:c0:75:6d:ff:dc:59:3b:46:09:02:41:71:08:
         ff:28:65:c2:ce:6c:e7:3d:90:df:47:0d:ac:75:30:f8:c8:c9:
         17:c4:52:6f:74:3f:4c:18:0e:4f:1a:f3:55:5c:3c:98:e1:d3:
         39:ad:b9:5b:00:c4:ac:a0:73:d8:d9:32:a9:78:2c:d2:93:f2:
         81:0a:90:e0:37:1c:84:8c:19:5e:3d:f8:c3:1f:44:a7:e0:fd:
         f4:b2:72:ed:4f:70:f8:2a:d2:ef:82:53:7c:5b:24:57:13:bf:
         76:b6:02:27:d1:2c:f2:95:bd:fd:e4:d0:98:2b:f8:e8:6f:35:
         a4:df:98:af:d8:2a:46:16:70:70:4a:1b:4b:b0:f7:2a:0a:b9:
         f5:12:43:12:94:0b:22:11:cf:c9:f5:31:24:6c:de:56:93:d3:
         6e:ab:26:61:fe:77:8d:6b:05:41:52:3b:75:ba:9c:b4:6a:50:
         31:a5:5a:d7:cd:02:59:43:51:cb:4c:a2:e9:70:cc:34:a5:84:
         75:23:6c:1d:7e:16:c1:d0:21:86:3c:00:d2:13:4b:43:75:26:
         ed:0b:93:73:58:d1:16:46:eb:c7:8b:e6:84:63:a9:58:1a:0e:
         6d:52:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:34:36 2026 by rpki-client