Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/164bf927-bac8-3209-b6aa-4903d7b3823e.roa
File:                     164bf927-bac8-3209-b6aa-4903d7b3823e.roa (raw, json)
Hash identifier:          bA02P2/y8D1i9Q41eofm9b0NPXY3E1vT3uCvZ4SRDIo=
Subject key identifier:   3E:1C:E8:B1:4B:05:BC:9B:0B:31:27:28:AE:CC:9B:59:37:D6:50:81
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F49891E5C4B20D8404270DE78
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/164bf927-bac8-3209-b6aa-4903d7b3823e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10753
IP address blocks:        23.26.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:1e:5c:4b:20:d8:40:42:70:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c3de4039-85c3-4508-b504-ce8c9cd6c831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:4f:8f:6a:98:ce:0b:eb:27:ee:8e:72:73:
                    8d:66:71:4a:d7:02:44:d0:84:17:0f:3a:27:a4:2b:
                    67:61:70:d6:8d:8a:35:d5:0e:23:4c:ca:f1:73:61:
                    ab:d5:11:10:58:c9:ac:b6:68:86:9c:e7:89:21:09:
                    9d:cf:ae:9b:99:00:4d:68:ed:32:37:58:79:bf:d4:
                    a3:04:37:00:61:3a:10:c1:70:4c:aa:0a:00:d1:fc:
                    32:8b:b2:ad:bb:18:b8:74:53:cc:6b:43:83:7a:3e:
                    55:d8:fa:fe:2b:b8:7e:67:7a:c9:9c:01:7f:2f:a1:
                    94:ba:f6:ef:04:54:02:d5:dc:3c:63:ba:b1:69:62:
                    14:a4:f0:65:6d:c3:6f:b1:d7:0c:92:3e:b2:b0:cd:
                    9e:8d:cc:47:39:64:c3:f2:88:96:b8:68:d3:75:aa:
                    a9:e0:5c:47:d6:6e:5e:b8:9f:f6:60:8d:1e:09:be:
                    cc:60:3d:9a:f2:3a:94:b0:b1:f7:ad:8a:32:c9:82:
                    f7:55:f7:cc:17:83:26:39:d4:47:d1:6a:72:ee:08:
                    76:d6:c5:35:ff:e7:02:c6:f5:24:b9:39:72:ba:6f:
                    9c:88:1b:51:d5:6d:dc:ae:97:c0:ef:05:40:e9:d5:
                    8f:d5:39:2c:07:9c:45:b3:a1:06:94:13:bd:98:30:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1C:E8:B1:4B:05:BC:9B:0B:31:27:28:AE:CC:9B:59:37:D6:50:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/164bf927-bac8-3209-b6aa-4903d7b3823e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:2e:09:85:82:e8:6d:21:f7:0c:e7:36:64:ab:43:65:eb:
         16:41:68:73:bf:3b:80:92:21:f9:34:83:f4:2d:bd:f5:c7:99:
         65:46:d5:54:dd:c4:f4:13:90:2e:89:42:b8:41:2f:66:3e:30:
         cc:33:89:1a:93:29:45:91:c0:16:75:37:01:f0:50:9d:b2:9c:
         94:01:b0:71:5e:62:2b:2b:f4:c2:6c:fb:f5:a2:16:c5:a5:ae:
         4f:a8:0c:28:ae:12:7e:59:a4:ab:e7:ba:ba:57:fa:e0:6b:3d:
         c0:4f:63:59:c5:57:19:11:c0:7d:fe:0f:13:0a:69:14:bd:53:
         23:e1:cf:eb:91:72:12:f6:e2:89:6c:dd:1e:24:20:cb:21:fb:
         e0:f7:25:d4:8d:b2:34:1d:11:c9:ad:54:47:83:75:83:47:7e:
         fa:63:f8:f6:69:4d:87:d0:50:e6:80:ce:a4:1a:89:93:33:68:
         05:3e:9a:f2:86:ce:52:cb:55:9b:3c:ec:60:e8:15:16:59:f9:
         86:f4:7b:89:6a:be:5b:37:d9:c9:3e:13:49:ca:bd:ee:b3:9a:
         e7:e6:2a:fe:6a:0b:94:ab:2c:70:bc:23:b4:c2:64:30:ba:09:
         de:40:fa:b2:83:60:ac:fc:92:24:23:32:9f:5e:51:f1:05:90:
         9b:d5:c4:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiR5cSyDYQEJw3ngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzNkZTQwMzktODVjMy00NTA4LWI1MDQtY2U4YzljZDZjODMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8pPj2qYzgvrJ+6OcnONZnFK1wJE0IQXDzon
pCtnYXDWjYo11Q4jTMrxc2Gr1REQWMmstmiGnOeJIQmdz66bmQBNaO0yN1h5v9Sj
BDcAYToQwXBMqgoA0fwyi7Ktuxi4dFPMa0ODej5V2Pr+K7h+Z3rJnAF/L6GUuvbv
BFQC1dw8Y7qxaWIUpPBlbcNvsdcMkj6ysM2ejcxHOWTD8oiWuGjTdaqp4FxH1m5e
uJ/2YI0eCb7MYD2a8jqUsLH3rYoyyYL3VffMF4MmOdRH0Wpy7gh21sU1/+cCxvUk
uTlyum+ciBtR1W3crpfA7wVA6dWP1TksB5xFs6EGlBO9mDAofQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4c6LFLBbybCzEnKK7Mm1k31lCBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTY0YmY5MjctYmFjOC0z
MjA5LWI2YWEtNDkwM2Q3YjM4MjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGldLgmFguhtIfcM5zZkq0Nl6xZBaHO/O4CSIfk0g/QtvfXHmWVG1VTd
xPQTkC6JQrhBL2Y+MMwziRqTKUWRwBZ1NwHwUJ2ynJQBsHFeYisr9MJs+/WiFsWl
rk+oDCiuEn5ZpKvnurpX+uBrPcBPY1nFVxkRwH3+DxMKaRS9UyPhz+uRchL24ols
3R4kIMsh++D3JdSNsjQdEcmtVEeDdYNHfvpj+PZpTYfQUOaAzqQaiZMzaAU+mvKG
zlLLVZs87GDoFRZZ+Yb0e4lqvls32ck+E0nKve6zmufmKv5qC5SrLHC8I7TCZDC6
Cd5A+rKDYKz8kiQjMp9eUfEFkJvVxLo=
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:08:48 2026 by rpki-client