Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9fb54415-5788-3b27-a587-d451457eee9a.roa
File:                     9fb54415-5788-3b27-a587-d451457eee9a.roa (raw, json)
Hash identifier:          0bC1vJx3Eqq/ojnqm+fzSIH1Ob4hPCYgE+koo+6bLSo=
Subject key identifier:   0B:DC:F9:9F:6D:9A:52:3C:B4:9B:66:65:C9:49:48:F7:58:2E:33:43
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584D00B26AC91C1F7BD564941A40
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9fb54415-5788-3b27-a587-d451457eee9a.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     54138
IP address blocks:        173.255.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6a:c9:1c:1f:7b:d5:64:94:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=392e2334-d86d-466f-a6de-1eea43dcd03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:d6:88:6b:0b:80:04:b9:bb:cd:c4:f4:55:
                    91:3d:29:d2:19:0c:fd:a7:26:a8:ef:56:9c:e3:68:
                    e1:2b:02:91:37:9a:65:d1:63:c3:91:8d:86:3e:f5:
                    df:b5:e4:41:16:c2:13:ed:ed:d9:0f:c9:aa:c3:aa:
                    54:79:9b:20:89:0a:7b:a0:17:29:fb:a7:f2:6d:96:
                    ee:5d:d6:68:20:d8:25:62:81:aa:7c:cc:d8:48:fb:
                    79:64:f6:f7:8e:0b:79:b9:d3:14:cd:3f:6f:8e:2a:
                    d9:94:52:e1:ca:b3:4b:4f:44:86:ee:92:62:86:41:
                    5f:69:af:33:92:28:f0:b3:9d:5f:7a:28:99:65:5d:
                    26:f9:89:5e:e8:eb:18:e0:90:1b:30:4a:00:13:da:
                    ee:0d:12:a6:54:c1:e2:bd:53:d4:88:10:b9:28:2f:
                    ea:19:e9:a4:d6:cb:96:a1:c2:24:c1:da:95:56:24:
                    f1:2d:19:36:a8:33:c5:a6:a1:8e:5f:df:ce:35:d7:
                    92:bc:31:c5:4f:d8:70:bc:d5:39:02:fd:0d:a3:29:
                    56:e3:38:b4:f7:20:35:1a:07:3c:a4:e3:52:92:54:
                    77:f7:9a:c3:12:3a:ee:2d:78:dc:e7:79:f1:fb:3b:
                    7f:a9:dc:23:54:56:66:31:d5:64:ca:ec:a2:a9:38:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DC:F9:9F:6D:9A:52:3C:B4:9B:66:65:C9:49:48:F7:58:2E:33:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9fb54415-5788-3b27-a587-d451457eee9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c3:ed:fa:2c:a5:b1:1e:7e:df:34:48:a9:77:77:52:fe:11:
         42:c5:d5:7c:05:dd:2f:26:d4:67:61:6a:8f:7c:0d:66:13:af:
         f7:60:0c:f2:03:6a:ae:f7:8d:98:e3:b6:7c:7f:aa:41:af:e7:
         f1:10:d7:d0:d1:86:b4:10:53:0f:3c:7f:ab:c7:44:66:8b:d2:
         9f:65:74:5d:22:9b:09:57:f3:99:a7:8f:09:97:2b:21:9b:56:
         36:5b:dc:b2:48:76:0d:61:07:9c:20:84:f7:e8:fa:17:5b:24:
         0c:67:96:d1:4f:fa:02:c7:9b:c1:b0:1c:14:f2:25:6e:18:0e:
         80:06:fb:91:1f:66:d9:d3:7c:bb:83:ed:a5:6b:4f:e3:76:6c:
         fa:5b:69:29:9d:25:47:5a:90:55:2b:1d:ec:e4:33:0f:51:a6:
         a2:06:67:32:c5:f3:77:b3:53:42:a0:10:3d:6a:41:e2:c9:ab:
         bc:c5:1e:fd:79:dd:43:d1:91:93:2c:13:53:88:c4:d4:18:07:
         44:49:84:6d:6f:dc:e4:75:db:57:a2:91:12:8f:41:1b:c9:a5:
         58:49:d1:62:59:f8:b3:80:00:40:a7:06:ca:3e:33:ed:22:ed:
         96:ff:24:56:f9:b0:db:ac:63:c9:43:ca:e8:bc:1f:99:3e:dd:
         13:d4:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:43:06 2026 by rpki-client