Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/53505512-2d96-3be6-acbf-7f875eead326.roa
File:                     53505512-2d96-3be6-acbf-7f875eead326.roa (raw, json)
Hash identifier:          yWWB/HjBAj9pDNO4Ii8EQpYXDgxT7DKhLSWaZtQVY8w=
Subject key identifier:   5D:6B:26:BB:4D:06:4F:52:51:42:10:B1:1D:E1:64:B5:92:DD:E8:41
Certificate issuer:       /CN=165a626b-da00-4cde-9359-20f11dac13c2
Certificate serial:       010D0C9F4328584D27AAC15DAD6CECA5AB6A7780
Authority key identifier: 24:A6:28:EA:20:A9:09:28:C9:16:7B:16:1E:8C:5E:54:60:6F:29:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/53505512-2d96-3be6-acbf-7f875eead326.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     21783
IP address blocks:        167.154.0.0/16 maxlen: 16
                          167.154.0.0/17 maxlen: 17
                          167.154.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/165a626b-da00-4cde-9359-20f11dac13c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/165a626b-da00-4cde-9359-20f11dac13c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c1:5d:ad:6c:ec:a5:ab:6a:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165a626b-da00-4cde-9359-20f11dac13c2
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=035f0b7e-172f-4077-ae2c-4fe4c646ce57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:fe:29:a0:a2:e7:95:aa:7e:91:80:e3:40:
                    0c:3f:fc:8d:2e:f3:01:b0:5b:c2:ac:2d:2d:a1:82:
                    5d:01:55:53:36:b9:3c:39:0f:e2:dc:8b:91:a1:ee:
                    50:ae:d1:58:77:03:b3:02:3c:f1:fe:97:fb:f7:a8:
                    3b:25:42:c4:88:6a:64:d7:da:73:07:18:e8:a1:b1:
                    b9:26:c7:43:48:ee:72:42:3c:49:3d:c5:bb:cd:d1:
                    ed:b2:bd:f8:fe:04:a5:ca:10:2b:00:0d:73:e2:7d:
                    87:63:ec:51:f5:02:aa:b5:d7:88:1d:2b:85:4f:98:
                    d4:a1:a8:e9:bd:f2:92:12:f1:72:e3:03:26:2f:c7:
                    f6:e8:ca:d5:a6:9b:56:13:4d:d8:9c:44:17:87:7f:
                    ff:0b:35:66:4b:19:a0:49:ea:26:d2:7c:78:7b:b0:
                    dd:f3:f0:d0:f9:6d:10:f6:22:34:fa:1f:95:36:32:
                    08:a2:51:d2:64:8c:70:87:ad:0b:da:6b:b6:04:3c:
                    1e:7e:e4:7e:a1:c6:35:d9:cd:4b:f6:80:c8:5d:bc:
                    bb:1b:68:2d:9b:c0:40:55:83:76:31:d0:df:bd:2f:
                    b3:0f:50:23:db:20:96:55:52:8c:66:fa:3e:23:fe:
                    37:1e:15:82:1f:3c:09:5a:99:91:a9:7e:2f:40:df:
                    5e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6B:26:BB:4D:06:4F:52:51:42:10:B1:1D:E1:64:B5:92:DD:E8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/53505512-2d96-3be6-acbf-7f875eead326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/165a626b-da00-4cde-9359-20f11dac13c2.crl

            X509v3 Authority Key Identifier:
                keyid:24:A6:28:EA:20:A9:09:28:C9:16:7B:16:1E:8C:5E:54:60:6F:29:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:75:94:38:7d:e8:76:63:4b:7b:39:5a:c4:7b:9b:cf:02:0a:
         dc:fa:48:69:ef:12:6e:42:41:88:a2:eb:25:0f:c1:19:74:39:
         ae:83:bf:a1:7e:50:e8:7d:da:53:f7:80:2a:68:b7:b5:31:ff:
         84:38:1a:c5:d3:45:81:8d:f4:f0:d0:e1:5d:82:5f:a5:d9:12:
         0b:6d:60:24:a9:e7:ce:ef:7f:b0:f5:39:09:6e:53:54:fe:58:
         11:7a:08:cf:40:b8:49:d3:d8:3b:80:74:97:0f:f2:72:aa:e2:
         89:63:51:70:a9:11:75:bf:89:9c:2c:f8:36:0f:50:ef:9b:4d:
         c2:a7:87:0e:f9:5d:8c:9f:46:f1:5c:64:d4:e2:8e:ad:98:c8:
         99:b2:03:08:2a:98:53:2d:ab:70:0e:ee:2e:7d:52:a9:a5:da:
         2f:8b:a7:e8:17:54:6a:ba:bf:71:5d:8e:5f:ef:a9:39:a3:2f:
         a8:5e:19:dc:fd:3e:91:a5:04:be:35:1f:2f:54:1b:ee:ba:53:
         c9:21:4a:01:7c:be:f7:01:db:ef:d6:ba:59:bd:f7:47:ea:93:
         e5:c5:88:c7:49:3b:59:78:ba:fd:00:d7:69:c2:7f:f1:55:2e:
         96:83:fd:c6:ed:34:05:7b:04:7d:ac:55:84:c4:44:24:3e:b3:
         ec:08:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:34 2026 by rpki-client