Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e3deaf76-48a2-3843-9f17-2da517c1ddf5.roa
File:                     e3deaf76-48a2-3843-9f17-2da517c1ddf5.roa (raw, json)
Hash identifier:          PibXsAHCwE+XbFwaQFaItn4QJiJCmD0C18R0M2gWcYs=
Subject key identifier:   90:FA:C6:FD:99:6D:71:4D:D5:AC:45:1B:01:89:9F:96:52:AE:63:9E
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584F4974DCBCFAD8A2F1FDCC5500
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e3deaf76-48a2-3843-9f17-2da517c1ddf5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     140543
IP address blocks:        165.140.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:dc:bc:fa:d8:a2:f1:fd:cc:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ce90e1cf-0c97-4e7c-b48d-ba23c1e5148c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bb:74:5a:80:b5:78:75:d8:9e:c0:33:a2:41:
                    0d:13:57:59:aa:70:e8:a9:38:9e:34:ec:70:c1:25:
                    d5:8e:66:9a:50:3c:33:d0:a2:f4:0d:f3:19:2f:76:
                    1f:fc:f4:a8:97:ca:f1:bc:05:7b:c2:2b:75:1a:7d:
                    62:14:22:9e:6b:80:51:1c:24:26:81:15:9b:e2:2e:
                    7a:2c:4d:a9:56:ec:8a:b1:31:74:b1:06:79:2b:f8:
                    3b:a3:53:c7:0c:a2:4f:bc:47:30:ad:f4:ce:6d:a8:
                    81:dd:42:d5:1b:6e:94:26:fb:e6:67:61:89:b3:2e:
                    d3:4e:9d:dd:a9:7a:03:32:bd:b6:4e:53:ae:3e:19:
                    f9:82:d6:82:04:48:bd:89:65:b8:2a:ae:04:8f:df:
                    e2:2b:2f:5d:b1:44:30:39:4a:20:74:6e:1e:cd:74:
                    ff:c3:48:e6:4a:58:29:56:af:a0:a3:61:69:64:f1:
                    68:21:a3:ae:37:d4:7d:ee:80:51:b5:ba:d5:1b:b2:
                    3b:34:9b:3f:5c:fd:81:3f:c0:81:db:b0:ad:b0:27:
                    9b:ae:72:f0:9d:0a:cc:e2:6b:49:dc:48:f5:cc:2e:
                    2c:95:62:bd:a8:4f:3c:93:8b:40:54:c4:a3:73:85:
                    a1:7c:17:db:aa:c9:99:16:80:0d:3c:08:bf:f9:53:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FA:C6:FD:99:6D:71:4D:D5:AC:45:1B:01:89:9F:96:52:AE:63:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/e3deaf76-48a2-3843-9f17-2da517c1ddf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:95:7e:31:bf:31:6a:62:6f:7f:ad:e8:dd:8f:5b:37:56:96:
         c5:44:a8:9f:f1:c7:70:5f:5d:4c:a2:c9:65:82:8f:2e:8e:35:
         a5:75:76:88:80:e3:8e:80:63:f1:03:d0:89:d0:2d:94:e5:21:
         cb:7e:87:47:f2:13:dd:32:bc:7f:a6:09:88:a0:a1:dc:7d:e2:
         81:75:b6:f2:40:d3:e1:74:14:16:26:89:ce:19:c7:a7:c8:61:
         57:dd:33:2c:83:5e:b8:e3:00:a8:96:5c:0b:7e:7f:08:c5:90:
         81:a0:e4:1d:55:ef:a1:28:85:06:aa:74:f4:40:ff:3f:4b:c9:
         3a:dd:4c:65:9d:6f:00:42:67:39:4d:38:9c:b6:e2:3f:07:b4:
         27:62:1a:55:ee:47:84:4c:bc:26:81:f8:33:03:6e:07:eb:32:
         c4:64:32:01:8c:1a:be:1b:21:51:81:f6:b5:11:13:48:a6:a1:
         d4:21:7e:cd:b6:aa:b2:54:64:f0:ae:1e:b2:f9:2c:41:d6:3e:
         b9:b0:bb:24:81:50:cb:2e:c8:3e:aa:41:cb:7b:fe:70:28:0e:
         77:4f:11:4f:f1:4d:d7:bb:73:c9:9f:b9:a2:02:8b:43:25:4f:
         84:92:9a:8c:2f:d4:2a:a1:d2:7a:51:f6:3b:80:fe:d7:36:d6:
         b6:83:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:26:35 2026 by rpki-client