Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7ce36004-7e5e-376e-8dd0-23c8cd69282b.roa
File:                     7ce36004-7e5e-376e-8dd0-23c8cd69282b.roa (raw, json)
Hash identifier:          LTkS1jQR62O39IfR7+tYHhPt7zllOdV+W06nFDkDk7Q=
Subject key identifier:   DB:1C:55:B0:E7:A2:55:6B:D9:2F:D2:04:C7:33:DE:D8:A0:2A:7F:1E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584DAF102C3D4B4999CA74837F80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7ce36004-7e5e-376e-8dd0-23c8cd69282b.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     3949
IP address blocks:        165.254.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2c:3d:4b:49:99:ca:74:83:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=e39ad8a7-3ac2-4efa-8bf1-22f32c96f9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:2a:65:c2:74:1b:48:2e:d1:48:33:bb:bd:
                    cb:85:1b:b9:04:e3:f1:c6:20:ac:99:49:bd:2e:93:
                    8e:3e:b5:fc:33:d7:81:3b:9d:df:54:6f:a7:1b:b1:
                    50:12:af:f4:e6:86:b4:ba:4e:ed:3d:da:ca:db:93:
                    ea:98:a6:74:2a:e5:6e:de:7c:71:36:ab:2b:f7:42:
                    05:95:21:17:97:90:4d:6a:d3:a4:d2:54:bc:97:67:
                    73:bf:2d:d3:1b:32:2d:a3:1a:9c:03:2b:16:fd:79:
                    c8:37:55:0d:2f:a5:c8:3a:ca:42:d4:92:79:6b:fd:
                    e5:d5:8a:8a:51:6e:e7:e1:40:47:f3:96:06:3a:cc:
                    0a:fa:a7:54:1f:4a:3a:d6:d7:eb:cd:29:14:cd:af:
                    2a:22:dc:04:a7:93:66:14:ba:4f:e3:52:64:a8:e1:
                    ea:6f:2f:77:d5:de:b6:53:95:48:7a:75:bb:c3:e3:
                    14:67:1b:78:9b:d0:25:d1:6b:95:28:7c:78:68:cc:
                    c1:c3:eb:44:88:31:38:68:94:57:ae:e0:f3:03:06:
                    b6:d6:ad:65:c3:b5:7a:89:5a:aa:bb:65:b8:d5:79:
                    a1:2c:52:e1:a1:4f:01:d7:32:c9:34:ab:ab:47:8f:
                    56:11:cb:fe:8f:79:c7:8f:57:4b:11:72:89:9b:64:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:55:B0:E7:A2:55:6B:D9:2F:D2:04:C7:33:DE:D8:A0:2A:7F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7ce36004-7e5e-376e-8dd0-23c8cd69282b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:98:49:04:eb:ad:2e:06:5a:e4:3b:16:ba:0e:b1:63:a4:a2:
         b7:b7:66:13:af:0f:f1:0e:fb:07:13:2b:6c:22:68:15:73:d5:
         d9:81:34:f6:9a:d5:dd:cc:0f:1b:9a:45:b6:9d:95:dc:bb:98:
         c1:9f:f7:e1:5a:6a:be:cd:bc:78:4a:ac:32:d8:9d:47:ee:1e:
         91:d9:1d:a2:f7:4a:61:02:71:bc:9d:f2:b0:50:be:4a:7d:56:
         c3:2f:6f:89:89:5b:8a:b9:b0:07:aa:92:40:f0:b1:62:18:19:
         f4:04:e6:61:3a:62:51:1c:79:3c:72:00:33:9f:86:92:8f:fe:
         0c:f7:9d:93:34:f3:01:e9:43:98:a6:df:e7:4d:b7:59:c6:04:
         22:39:f5:64:6e:88:d1:75:8e:87:4b:c7:ce:d3:88:7e:54:df:
         28:af:f6:ae:8d:7f:6a:b9:f4:dc:40:e2:e9:4a:0c:8b:77:45:
         34:6b:87:bd:79:29:3b:b8:64:51:a8:c7:0c:9c:a4:a7:c5:64:
         2b:41:06:04:76:58:33:85:73:c8:1c:45:48:e1:62:52:d9:9a:
         e2:1a:2e:fc:d8:2c:a2:04:e8:eb:35:7d:fc:19:60:40:aa:60:
         c7:3f:95:9c:51:e3:99:22:f5:cf:8a:ee:d6:5b:56:05:84:30:
         da:17:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:35 2026 by rpki-client