Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/19378ddd-a8db-3830-9f83-fd3ac092db7e.roa
File:                     19378ddd-a8db-3830-9f83-fd3ac092db7e.roa (raw, json)
Hash identifier:          KEG0ACASWgwm0xkIdxnLi3k1rHArW670YHCHDMqksTM=
Subject key identifier:   76:EB:11:3B:A2:E2:29:A0:B3:81:6C:6E:97:24:EF:12:1B:C7:FD:D7
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F4328584D5884EDA23F9C737DDABBDF84
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/19378ddd-a8db-3830-9f83-fd3ac092db7e.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     399250
IP address blocks:        165.140.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:ed:a2:3f:9c:73:7d:da:bb:df:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=91b6b55a-00c8-4fa8-9ef0-e60303c7e936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:80:83:77:5a:2e:2d:4c:65:b8:38:1f:af:
                    60:28:09:4d:ec:a0:73:83:39:71:13:47:7a:6d:36:
                    a6:4f:5b:51:d1:ad:e8:ce:4e:52:d2:c4:5f:b6:9d:
                    8b:69:f9:33:e6:af:74:44:c2:d5:5a:2f:c5:39:ff:
                    01:d8:f5:b6:ed:ff:2f:67:2b:70:32:80:03:bd:43:
                    36:8f:08:f0:95:3a:8d:8a:aa:4e:63:b6:6c:41:59:
                    f3:63:f4:13:b6:78:4b:9e:46:12:d4:b8:69:16:52:
                    08:e0:fb:fb:3a:db:e5:5a:13:89:c0:9e:3d:99:1c:
                    21:54:b9:e8:11:69:0f:49:a1:2c:77:47:a5:5a:97:
                    87:5a:f2:33:68:0f:ce:b2:a4:5b:61:2e:56:89:b5:
                    a6:51:f0:3f:28:09:60:d9:d7:ab:5b:b8:56:d9:c6:
                    09:33:e0:97:c0:71:dc:fe:17:79:a2:9e:5d:91:cb:
                    5b:0c:a3:4e:09:83:b1:4e:ea:f4:be:e4:30:4f:0e:
                    19:34:bf:c5:29:20:ae:50:de:c6:c1:3e:27:0d:46:
                    b0:b7:b7:24:b3:a1:4b:a2:6c:61:0c:3b:b3:22:73:
                    e7:44:dd:5e:1b:29:7d:eb:77:1f:31:77:4e:dd:83:
                    0d:ef:26:e1:81:d2:e6:6e:e4:96:6e:a4:02:42:fb:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EB:11:3B:A2:E2:29:A0:B3:81:6C:6E:97:24:EF:12:1B:C7:FD:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/19378ddd-a8db-3830-9f83-fd3ac092db7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:14:ae:13:d7:a6:c9:5d:39:70:4e:96:fb:83:7d:28:3b:
         51:29:21:5c:f5:0b:9e:fb:14:4f:48:d7:69:54:33:17:3f:2d:
         b0:1e:e9:b4:55:07:97:c8:3e:eb:7b:34:3e:e9:b2:9f:15:c8:
         e2:15:a3:3b:1b:8f:9f:4a:40:03:b6:4b:10:60:4f:60:85:9d:
         09:24:82:4f:5f:80:aa:ed:54:96:9b:42:be:fc:39:f5:9e:81:
         27:b9:d1:d5:e6:58:51:90:68:ba:13:3d:e8:6e:77:ef:ad:41:
         e5:ee:57:26:69:c2:ff:d3:74:ca:73:0a:af:21:0c:59:1b:88:
         64:3b:55:d0:6a:b3:c0:5e:3e:bd:ee:73:55:e0:3f:7f:51:38:
         c3:ea:b4:97:74:99:cd:c5:67:01:d7:eb:4d:8a:06:84:72:5f:
         a8:dd:91:ee:8b:01:c4:e7:30:08:ec:44:87:be:5a:88:8d:9d:
         5e:9c:a2:98:ea:99:c9:6c:b9:60:e4:ad:e2:35:c2:7d:9f:d0:
         7b:1a:73:dd:c6:c7:1a:83:1a:ef:9d:98:a6:0d:6b:91:a7:30:
         e7:88:75:52:85:97:e5:fa:06:00:ce:45:a9:31:a4:1f:d3:62:
         d3:c7:9e:7a:ce:2a:9b:83:53:3d:ac:c0:dd:51:b5:ab:b9:da:
         36:b6:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:35 2026 by rpki-client