Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e3deaf76-48a2-3843-9f17-2da517c1ddf5.roa
File:                     e3deaf76-48a2-3843-9f17-2da517c1ddf5.roa (raw, json)
Hash identifier:          lBb6wHMj7yRg0CTS6aZqUTOX40zQFdZ/ixVVvi5pceY=
Subject key identifier:   D2:36:52:98:81:32:CC:CD:64:A5:D3:29:5B:CD:93:43:17:A3:88:0F
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584CEA5CC3C9F5FA256D5DF21A18
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e3deaf76-48a2-3843-9f17-2da517c1ddf5.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     140543
IP address blocks:        165.140.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:c3:c9:f5:fa:25:6d:5d:f2:1a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=00901b8b-b529-4ba3-9ef1-6d4153286316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:d0:6d:b4:c6:be:1a:98:23:96:b9:c1:ea:
                    8a:72:f7:17:70:96:c1:ad:db:62:aa:9b:1b:35:d8:
                    6a:7a:05:0b:12:bd:a0:d6:b5:e6:9e:ce:8c:4b:dc:
                    a1:70:ec:5d:3d:0d:0d:cb:07:4b:05:9d:e1:93:a8:
                    cf:f2:b9:03:17:44:84:a7:db:64:d3:1d:a0:5a:2b:
                    1a:0a:a3:01:11:b5:96:0d:8f:e6:9c:eb:79:36:1c:
                    37:67:05:93:e2:01:68:62:3f:4a:38:7e:17:3e:43:
                    13:06:0d:55:2a:b4:ca:ca:71:79:11:8f:e6:a8:e5:
                    f8:96:f8:37:1a:57:85:78:86:92:ab:0d:4d:2c:56:
                    88:a7:8f:c1:cc:fe:a9:82:33:51:75:e9:cd:b5:26:
                    9f:5f:0a:76:04:dc:18:45:97:48:d5:4a:eb:eb:59:
                    51:ae:56:ee:c1:e1:bb:ac:57:ea:6e:cf:96:ec:33:
                    79:1e:e9:0b:fb:c4:37:aa:4e:6f:85:4d:00:dc:e8:
                    bc:16:5e:c1:3c:88:5c:6a:0e:2e:19:41:97:e8:fc:
                    64:36:be:fe:5c:e7:33:ed:c3:b1:be:9c:75:0b:c8:
                    80:8c:a2:bc:13:c0:1f:68:b8:10:3d:78:5d:fe:39:
                    f3:18:15:2c:6d:d3:25:29:06:43:41:9a:11:02:a5:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:52:98:81:32:CC:CD:64:A5:D3:29:5B:CD:93:43:17:A3:88:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e3deaf76-48a2-3843-9f17-2da517c1ddf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f5:0b:6a:9a:65:49:9e:cb:ba:bb:a9:9c:0f:b4:e8:ad:35:
         fe:a4:02:58:14:78:03:0a:a9:df:9c:de:39:b7:46:a3:17:d2:
         28:e2:7e:cf:a6:05:a1:6d:de:98:1c:81:ff:c1:f1:7c:fe:9f:
         4d:46:fb:d6:25:fe:9a:a2:d9:41:ef:97:53:03:62:a5:c8:14:
         2b:71:a6:ef:8e:93:96:c1:f5:cb:6a:f2:40:f2:e3:57:42:12:
         1b:79:89:d2:43:b4:39:fa:06:f7:ae:c8:2d:8f:82:ee:da:7f:
         e0:41:85:8d:d8:6e:24:0e:ed:6e:1c:c2:3d:8b:62:59:f5:dd:
         ea:6e:bb:1a:14:3d:c5:f1:4f:cc:46:eb:1c:b0:ef:30:9c:b2:
         5c:5f:6b:57:71:0f:c7:f7:8a:3c:fc:45:0f:bc:1c:30:ea:f6:
         25:56:16:ad:f6:81:45:44:a2:04:5b:0b:ee:8b:32:35:f5:ac:
         f0:4f:12:24:29:c6:23:30:d7:f8:9b:28:2c:47:58:36:b0:11:
         8f:79:66:a8:ca:05:d8:12:38:56:39:06:41:a1:14:e4:a6:ac:
         1a:37:28:7c:1b:ae:10:f1:27:c5:0d:58:6f:ad:38:6e:af:2b:
         16:6b:60:20:20:a3:f3:b4:32:22:f2:30:ce:3e:31:f3:6d:a0:
         aa:f3:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:44 2026 by rpki-client