Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/5f2de118-1fac-3341-b2be-bd50f32783dd.roa
File:                     5f2de118-1fac-3341-b2be-bd50f32783dd.roa (raw, json)
Hash identifier:          C6KVd2HEgYv5r58F5b6dJlpcS8X6MKE6KF0+YZvulNE=
Subject key identifier:   01:CB:7E:17:06:31:0C:D1:81:9C:92:68:A1:C6:6B:A1:50:6D:F0:42
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584BA9324F3E3B1D4083E747F380
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/5f2de118-1fac-3341-b2be-bd50f32783dd.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     153393
IP address blocks:        165.140.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:4f:3e:3b:1d:40:83:e7:47:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=18113ed3-79e7-41aa-a288-e8d771848ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5f:09:df:c1:4c:f4:b4:ea:5a:98:53:ba:2a:
                    5e:24:be:85:40:79:76:84:21:91:78:59:8f:16:ee:
                    4a:6c:be:a6:7e:f0:3f:7a:cc:ab:eb:ee:40:30:2b:
                    2e:b3:84:74:45:b2:bb:0a:f3:62:3b:e4:5a:a6:64:
                    17:be:ed:6c:07:95:1e:94:16:4f:77:30:c2:41:5e:
                    22:12:27:83:64:8f:f6:3b:91:a6:69:75:af:a7:e1:
                    0d:03:17:cb:50:ab:3f:f8:d4:f1:66:f8:2c:9e:e3:
                    a1:6c:5b:83:1a:e4:55:94:d7:18:52:9e:e6:86:06:
                    78:4a:ab:96:cb:93:75:b7:3b:77:2b:5a:1d:1f:95:
                    4d:08:bd:31:74:d6:35:e1:30:0f:4d:27:3c:46:d6:
                    ce:5d:63:ac:af:0d:07:89:30:87:3b:81:c0:fa:70:
                    c3:3a:f6:80:68:c7:ee:5f:f2:a3:9f:06:c5:e6:08:
                    fe:72:27:f6:e2:c2:8d:00:35:5b:3a:1f:db:0a:54:
                    ad:cf:14:9c:ee:07:b9:c1:30:71:6b:0d:59:ff:09:
                    07:48:04:8a:7b:27:e0:a9:84:52:f0:56:5a:4a:28:
                    dd:b0:36:be:4e:ea:83:31:52:9e:14:47:98:ec:4a:
                    7b:16:78:49:1f:22:84:25:c5:99:0c:5a:50:1c:68:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CB:7E:17:06:31:0C:D1:81:9C:92:68:A1:C6:6B:A1:50:6D:F0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/5f2de118-1fac-3341-b2be-bd50f32783dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:cc:4e:37:44:e4:07:49:fc:24:08:7e:9b:0f:c9:7f:83:
         77:21:f8:bb:92:1e:17:ce:8e:32:c3:7f:09:fb:ed:f7:a9:60:
         e3:82:2d:3d:ce:41:df:54:52:e3:a4:08:c2:3d:4c:4b:05:2f:
         ff:da:c5:14:c0:93:5a:bd:c0:5d:93:76:07:28:27:73:b7:b9:
         da:26:d1:b8:4e:00:8a:40:5c:a3:f9:d9:0e:ea:a1:cd:a5:5f:
         c6:a4:d8:f0:3e:6c:b4:e1:fe:a9:e3:44:be:e0:21:25:bd:e5:
         6c:69:b9:f1:07:0c:7d:6d:9b:1e:be:09:a8:a4:14:88:25:78:
         e3:b5:b1:0b:1e:57:45:6e:28:65:21:e3:4a:48:5a:bc:fc:b1:
         23:39:e3:91:a6:f3:f5:d0:ae:8e:29:22:89:04:ca:92:fb:11:
         00:4b:1c:ad:ac:60:49:5c:06:20:d5:10:36:bc:d7:68:1c:63:
         96:2d:fd:c0:41:75:db:7a:21:99:a1:05:77:d2:86:8e:29:89:
         4f:99:36:13:ad:2c:ea:5a:ce:ec:e3:b2:cd:94:b8:81:95:4a:
         e8:66:57:42:ab:7c:88:75:b3:6f:94:aa:a5:52:bb:8f:19:97:
         ee:01:05:eb:e0:e9:d3:a7:38:ee:e3:e7:96:0e:da:dc:d3:4e:
         76:56:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:12:34 2025 by rpki-client