Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e/686171df-7585-3879-b76b-43404f6b4a79.roa
File:                     686171df-7585-3879-b76b-43404f6b4a79.roa (raw, json)
Hash identifier:          nOCE3RF5AGidZq0AX6Rmc/d45kC66ALtmVJP5R+y/l8=
Subject key identifier:   C0:B0:8C:63:98:01:E7:36:9B:C9:96:5E:5E:01:E4:74:41:85:88:53
Certificate issuer:       /CN=fc4d414c-c53e-4dc0-9f0c-e03418a7a04e
Certificate serial:       010D0C9F4328584F30A65522AE7FD2D96FFD6200
Authority key identifier: 94:41:96:78:05:C8:A6:A4:CD:0D:89:FB:B1:9E:CD:BF:F7:FC:03:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e/686171df-7585-3879-b76b-43404f6b4a79.roa
Signing time:             Wed 16 Sep 2026 03:49:23 +0000
ROA not before:           Wed 16 Sep 2026 03:49:23 +0000
ROA not after:            Tue 15 Dec 2026 04:49:23 +0000
asID:                     400064
IP address blocks:        165.140.140.0/23 maxlen: 23
                          165.140.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:a6:55:22:ae:7f:d2:d9:6f:fd:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4d414c-c53e-4dc0-9f0c-e03418a7a04e
        Validity
            Not Before: Sep 16 03:49:23 2026 GMT
            Not After : Dec 15 04:49:23 2026 GMT
        Subject: CN=813f1d37-84dd-4e64-8a35-592b86db136a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:90:5a:0e:97:97:a1:d5:26:b4:fa:7d:e8:
                    59:64:24:15:06:e1:db:5b:de:3e:a6:df:31:29:cf:
                    0c:1d:09:e2:d6:7d:b2:69:df:b7:b1:f7:93:1e:d2:
                    16:85:46:9c:7d:a8:51:be:f9:80:69:87:7f:2d:a3:
                    d6:39:22:fb:84:0a:fc:93:33:b7:63:86:62:2f:7a:
                    d6:c8:a6:80:78:c2:90:f0:b0:90:36:d6:16:d9:94:
                    25:52:d4:76:c3:1e:fe:e1:bf:03:6a:02:a4:43:59:
                    ac:37:79:fa:f7:8c:ee:cb:16:ca:ed:23:0e:92:b3:
                    29:58:ae:c5:ee:40:b2:f0:f2:e5:c6:53:46:d3:5a:
                    03:4e:12:e1:ab:c7:7f:27:d8:c1:53:50:1a:5e:6b:
                    aa:6a:bc:8d:fe:28:e7:48:69:20:76:68:62:95:f4:
                    7b:f4:8f:d4:a4:49:c4:cd:d5:32:ca:96:5f:d3:ca:
                    9c:28:ca:55:ea:3d:e4:e2:14:cc:d8:15:6d:94:ad:
                    c0:df:c6:9c:8f:d3:5c:8b:96:8b:b1:63:43:02:0f:
                    e1:82:ed:ce:ee:26:98:f3:e9:59:29:7d:6a:e7:2f:
                    01:5b:15:fd:ae:6d:54:94:1f:18:7b:8b:a3:07:c1:
                    4f:30:9d:96:83:e5:19:58:25:11:2d:ac:1d:dd:ff:
                    5b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:8C:63:98:01:E7:36:9B:C9:96:5E:5E:01:E4:74:41:85:88:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e/686171df-7585-3879-b76b-43404f6b4a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e.crl

            X509v3 Authority Key Identifier:
                keyid:94:41:96:78:05:C8:A6:A4:CD:0D:89:FB:B1:9E:CD:BF:F7:FC:03:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fc4d414c-c53e-4dc0-9f0c-e03418a7a04e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:cd:ee:1e:e6:7d:71:f9:f7:f4:43:9a:ef:2f:4c:86:35:
         be:37:94:8b:52:37:49:13:94:c4:cf:26:ec:05:a0:1f:c4:59:
         bb:26:9d:d1:50:c9:ff:70:36:18:ae:37:c4:c4:e9:ab:8a:0e:
         6c:06:73:76:5d:a5:f2:e5:43:a0:f2:ef:6b:e7:d4:ce:57:3e:
         09:2b:7c:e9:d3:0f:15:d1:26:1a:40:bc:8f:9f:e9:a1:c4:12:
         8f:88:c7:3b:cc:87:5d:33:fa:55:43:ff:91:df:03:66:1f:7e:
         0f:0d:ab:81:5c:58:84:cd:c3:9c:55:1c:c3:6c:32:a1:d8:00:
         05:1e:50:55:e2:f1:6c:2a:d6:4c:a3:35:47:75:76:5d:16:3a:
         10:89:9d:a4:dc:cb:c7:74:f3:71:fe:d3:25:1a:50:63:89:f1:
         e2:7b:dd:80:a4:b6:1a:28:b7:b9:f8:00:1c:db:e8:60:a0:b2:
         c9:6e:47:5e:53:53:64:ff:28:02:cf:0c:4d:28:ab:52:46:45:
         7f:d1:ba:25:88:21:eb:bc:10:34:72:a5:38:01:05:89:e6:d1:
         3c:63:1d:94:58:71:c1:9a:2f:a2:29:25:3b:89:6e:b8:e1:d1:
         0c:a2:f8:a4:30:66:10:24:61:bb:fd:99:fe:97:88:16:4a:5d:
         57:8c:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:16:27 2026 by rpki-client