Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/518ee888-049d-3574-b313-fd6a0a4da901.roa
File:                     518ee888-049d-3574-b313-fd6a0a4da901.roa (raw, json)
Hash identifier:          mWuks8a6M7ti49FjlAK/PNpPvdr4Q/CWn8dpMMGrYNc=
Subject key identifier:   C6:66:D4:D8:6F:E6:36:92:F7:84:7C:BC:81:F2:8C:24:1B:2F:97:3D
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584CDF3243D2F503996ACE2F5700
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/518ee888-049d-3574-b313-fd6a0a4da901.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     2639
IP address blocks:        165.173.128.0/19 maxlen: 24
                          165.173.164.0/22 maxlen: 24
                          165.173.168.0/21 maxlen: 24
                          165.173.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:43:d2:f5:03:99:6a:ce:2f:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=ec3b1079-d6d4-4704-a6b3-dc2f7a02c34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:af:3a:77:6d:2a:af:ac:c3:c7:c8:47:ca:
                    98:b6:15:ce:98:42:d1:1e:18:ee:7d:5a:e4:56:1e:
                    9b:91:03:21:f6:a2:f6:39:91:a5:aa:99:17:6b:4c:
                    a7:61:07:a5:25:6f:17:ae:f4:c8:ab:29:b7:65:a0:
                    1b:d9:26:68:f7:f1:b1:fd:56:b9:0c:f0:09:7a:1a:
                    8d:95:52:ef:17:d2:f4:ca:9c:22:11:bb:c7:37:cb:
                    39:b5:0f:38:69:e2:3e:79:65:07:9a:90:c5:48:86:
                    24:75:a8:dc:f1:35:1e:51:18:2f:6a:95:2a:f1:3e:
                    2f:fe:d7:1b:ee:2b:5d:32:58:97:a9:d5:f5:6a:b6:
                    78:7e:a0:43:f4:97:a4:9a:90:4a:d5:7c:70:80:a0:
                    36:85:91:b5:06:b9:65:58:ab:9d:c4:90:6e:be:93:
                    5b:2c:68:af:ca:6f:f0:56:c2:70:a9:a8:fe:b5:3b:
                    df:c1:07:6c:48:2f:ec:af:40:30:b0:ef:3b:fe:52:
                    68:ce:19:ae:48:64:42:22:e7:7a:78:58:c2:84:13:
                    92:6a:8b:37:8d:a0:5e:52:c4:5d:ee:26:44:e4:a8:
                    53:1c:4f:38:f0:f3:60:7b:bc:3b:e3:23:de:1a:3b:
                    d2:65:b4:d3:92:d9:3b:c1:fa:41:28:4b:9a:c6:bd:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:66:D4:D8:6F:E6:36:92:F7:84:7C:BC:81:F2:8C:24:1B:2F:97:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/518ee888-049d-3574-b313-fd6a0a4da901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.173.128.0/19
                  165.173.164.0-165.173.183.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b9:67:75:fe:e4:68:92:c0:5d:74:4d:a2:1e:16:6f:b3:02:
         68:65:3b:1a:32:99:aa:63:37:19:d0:31:1a:f8:96:f9:1d:75:
         76:39:69:d8:ee:70:81:18:7d:e3:6e:6d:cd:50:b4:b7:c8:27:
         25:09:c3:41:83:e7:47:4e:5f:d1:4f:ca:1c:9d:4d:70:7c:7a:
         bf:51:64:ca:23:67:c1:53:4f:dc:c0:d7:d8:6d:cd:04:52:c8:
         66:2d:63:50:1d:78:da:0f:b7:5d:d3:16:9a:da:40:33:f0:d7:
         58:e5:f8:df:9a:ef:84:47:9f:08:97:40:ea:f6:ae:2f:b3:a8:
         d9:d1:eb:b0:95:16:11:97:13:50:df:51:65:34:05:19:77:77:
         d7:37:c0:ec:14:ee:46:73:65:04:26:42:ff:e5:d6:6d:14:96:
         22:0d:6f:ec:f0:e3:8d:3d:cb:99:82:7f:4c:f7:02:c9:9f:b3:
         6d:81:8e:26:dd:4f:93:59:9f:46:ae:86:ef:cb:ef:c3:28:a5:
         85:ed:9d:72:2b:cc:68:58:bb:1d:8f:4b:e2:cd:30:2c:d5:46:
         84:1a:a8:01:9d:5c:1f:c7:d0:a2:44:ab:05:25:b2:57:c7:ca:
         cd:7b:70:99:23:0c:05:c0:0f:36:96:a7:ba:d4:7e:86:6a:5f:
         e8:f0:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:19 2026 by rpki-client