Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/5276aa0e-868b-3818-9661-626246ad5487.roa
File:                     5276aa0e-868b-3818-9661-626246ad5487.roa (raw, json)
Hash identifier:          B7xwbnQH3TVPU/9k8UjvLzhfJROQyd8cw8FMAhsfBV0=
Subject key identifier:   34:67:BE:8A:8A:EB:8F:93:70:20:29:1C:FA:74:6D:44:17:D2:E0:16
Certificate issuer:       /CN=2159f759-d1b9-48f6-8b79-5ce42cb086e0
Certificate serial:       010D0C9F4328584F4F07FC61DE0CC4FC8F464D80
Authority key identifier: BC:F6:CE:97:95:8C:6B:D5:1F:D9:B7:8F:5F:BE:74:03:67:76:15:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/5276aa0e-868b-3818-9661-626246ad5487.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     398371
IP address blocks:        134.195.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/2159f759-d1b9-48f6-8b79-5ce42cb086e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/2159f759-d1b9-48f6-8b79-5ce42cb086e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:fc:61:de:0c:c4:fc:8f:46:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2159f759-d1b9-48f6-8b79-5ce42cb086e0
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=3085922e-9f3f-40a7-93bb-c3750834379c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:a0:ee:7b:16:bf:ad:af:f8:3f:83:a4:9e:
                    91:0b:b9:20:02:0e:ee:4a:bf:d5:85:8a:0b:f4:f5:
                    3b:54:f0:1d:d9:62:21:20:fc:cf:23:2f:fa:38:b9:
                    ef:29:61:6c:25:4d:10:cf:a4:48:39:c6:2f:b7:cb:
                    04:10:41:7a:b0:a2:bd:8c:82:db:03:cd:83:21:10:
                    36:d9:92:9d:81:66:12:16:e3:96:f0:66:9b:8d:7c:
                    9c:29:a9:de:b5:05:9f:7d:3c:7b:43:b3:b6:5b:3e:
                    54:1e:6c:c6:be:d6:33:b0:c3:b5:fa:9e:2e:e2:f6:
                    a3:ed:56:8b:f5:c2:f5:f6:68:28:eb:9e:d4:81:3a:
                    02:6d:ad:a0:ee:07:93:46:3a:c8:65:66:64:68:0f:
                    8d:8d:4b:bd:77:39:8b:19:a6:b5:8f:0f:24:f4:aa:
                    ce:18:9e:12:e6:4e:7d:61:de:e0:e7:81:e5:cc:40:
                    fe:18:26:61:ca:5c:79:a8:a7:c4:25:b4:2c:e5:4a:
                    b2:89:15:1e:3c:f6:65:be:ef:3e:b2:7b:87:1e:76:
                    1e:ed:10:db:48:7f:ae:85:07:86:8f:af:d8:46:af:
                    c9:30:01:50:63:78:c7:86:a4:88:74:c7:83:38:de:
                    af:cf:86:b4:c6:95:09:e0:f8:50:45:32:0f:27:af:
                    ad:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:67:BE:8A:8A:EB:8F:93:70:20:29:1C:FA:74:6D:44:17:D2:E0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/5276aa0e-868b-3818-9661-626246ad5487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0/2159f759-d1b9-48f6-8b79-5ce42cb086e0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F6:CE:97:95:8C:6B:D5:1F:D9:B7:8F:5F:BE:74:03:67:76:15:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2159f759-d1b9-48f6-8b79-5ce42cb086e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:84:cd:c5:da:8a:a2:dc:be:f4:30:98:b5:fe:63:35:f7:
         11:c1:94:16:f3:41:48:71:e4:56:b3:14:96:94:ae:a8:34:cf:
         cb:e0:f0:2a:ba:07:56:7d:e2:c2:57:a7:80:61:74:3f:01:09:
         7a:56:5b:c1:a9:00:10:e3:34:7f:d4:b4:be:40:08:88:ef:e6:
         09:ba:aa:1b:49:fa:0c:ef:46:e7:ef:a8:84:18:61:bc:cc:d0:
         20:d3:5a:9d:3f:6f:4d:12:92:b7:b5:e2:2f:67:23:fd:63:14:
         a4:e8:ad:e8:b2:6c:34:6f:36:e3:df:0a:1a:9b:2b:99:1f:2e:
         aa:7c:d2:ea:91:12:65:1a:10:de:2d:81:0c:7f:11:ad:04:76:
         fd:e3:f1:b4:be:9b:9e:91:b7:8a:75:8d:50:3f:75:37:db:7c:
         19:8a:04:7a:9b:69:6a:50:3b:4c:45:20:4b:51:b6:fe:7b:de:
         7a:c8:94:42:2b:f7:04:24:ef:7b:8d:e7:b4:fd:f5:cc:46:96:
         7a:17:64:f1:83:a3:9b:ad:7a:89:e0:ff:30:e1:a2:de:2f:5d:
         e2:ce:ae:02:6b:49:8f:e7:0a:16:50:fb:a7:25:2d:a8:18:ec:
         bb:9b:0f:97:f4:15:1b:f2:3c:4f:6f:f5:2a:26:cc:fe:a4:f6:
         74:14:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:59:29 2026 by rpki-client