Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa
File:                     9137315f-e06c-3852-8f0f-5067ab5e516a.roa (raw, json)
Hash identifier:          rbRaEbRegNwWEpawYLpoZuAyPeWAgJKuyaz/r5vCDw4=
Subject key identifier:   96:A2:39:17:EC:5A:97:F6:5B:33:EB:B0:53:1B:B8:AE:98:9A:C6:9E
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584F4989056465D3F81F2447D380
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:05:64:65:d3:f8:1f:24:47:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7e7d2d03-809a-4034-845c-4507fa8d1e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:4e:1b:57:da:d7:74:32:54:f8:dc:96:23:
                    11:24:4c:ca:e8:b9:c0:b2:6b:03:97:bf:8a:e6:45:
                    5e:11:b3:be:ad:0f:f5:a7:7f:92:f8:64:a1:a8:99:
                    71:de:33:10:65:e1:4e:88:d6:c4:14:d5:24:76:8e:
                    62:84:71:9b:78:25:e1:34:f9:f3:10:0e:e2:ee:90:
                    4a:f5:1b:c1:5a:a0:f9:8c:f8:f9:da:4e:81:7e:e5:
                    ae:19:f0:67:34:18:9f:da:5d:81:b8:a3:68:6c:00:
                    7e:a0:9a:6f:7a:dc:12:fb:71:48:76:e1:85:7d:86:
                    84:bc:f3:36:66:f6:29:5b:fd:eb:16:a3:f2:03:d0:
                    28:57:ca:79:ab:06:ae:c4:87:93:68:d6:0c:ef:be:
                    8c:aa:41:53:fa:92:3d:c2:76:7f:9f:b6:6a:b6:81:
                    4b:18:7b:f9:4d:1a:de:8d:2c:ff:0d:c1:b2:f6:4e:
                    8b:03:03:79:9a:b8:a2:bc:2a:13:a7:ec:bb:c2:d8:
                    2e:fb:71:75:1f:81:d1:00:80:66:86:12:ab:ee:2a:
                    68:19:0b:d1:c1:28:ea:95:2c:7e:49:cb:b7:58:e7:
                    32:c3:9a:bd:3f:c6:2f:47:2a:00:90:00:57:3f:d6:
                    6f:cb:4e:ad:cd:2f:de:04:98:4a:b4:34:e3:a6:15:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A2:39:17:EC:5A:97:F6:5B:33:EB:B0:53:1B:B8:AE:98:9A:C6:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0b:4a:08:8e:4b:49:1d:d9:83:47:cd:94:ce:73:c0:f2:20:
         30:a2:b1:95:7b:91:f9:2c:04:5a:f4:17:06:cc:87:ef:1f:ae:
         5f:d2:6b:d2:73:21:a3:78:4b:ff:a4:be:37:6d:41:0b:16:ef:
         d9:08:28:16:f4:21:72:5b:81:9b:5c:c0:de:90:a3:7c:2c:39:
         9b:99:a2:f4:33:9a:91:0d:41:fe:29:5c:9e:3e:f1:ef:bd:c2:
         ac:6f:ac:e3:9c:ad:39:82:d8:76:f1:f8:79:f1:82:5b:4f:23:
         b0:74:aa:43:7e:97:d8:0a:e2:5f:de:71:cc:88:a6:41:f2:fc:
         a3:93:9e:b3:04:42:30:6c:ce:88:21:44:42:23:c7:1d:c8:13:
         60:a1:ea:6f:b2:9c:5d:75:2c:ae:68:54:b8:be:7d:12:75:97:
         8d:35:a2:e5:bc:0c:ce:15:ce:8d:c7:86:96:8d:85:48:99:d8:
         fa:27:63:78:01:c0:29:09:1f:68:2e:a5:be:88:db:06:4f:2e:
         c1:d7:de:00:65:9f:49:b9:6c:37:df:cb:92:11:61:86:b4:49:
         4d:c8:1f:35:75:d6:47:71:bf:88:3c:95:d3:71:b1:c8:11:1e:
         8a:e2:7b:3c:29:2d:ab:a5:ef:a9:04:75:c1:e7:8e:8f:b7:c7:
         21:c9:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:52:31 2026 by rpki-client