Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/168c288f-3357-3f43-83d2-a20bb6ff9278.roa
File:                     168c288f-3357-3f43-83d2-a20bb6ff9278.roa (raw, json)
Hash identifier:          O40Qj71xKslw2k+h/W+e5HHg+XxclFUj69PGlY0DXGk=
Subject key identifier:   08:EC:53:A6:5A:15:BA:41:BF:95:25:38:6A:86:72:D8:15:EC:EB:22
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F4328584CDB0211DEB008EE7A78D10310
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/168c288f-3357-3f43-83d2-a20bb6ff9278.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     216425
IP address blocks:        165.140.20.0/22 maxlen: 24
                          2602:fc5d:fe0::/44 maxlen: 48
                          2602:fc5d:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:11:de:b0:08:ee:7a:78:d1:03:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=65820317-374a-43a1-951f-4b766d4f1ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:be:82:49:9c:a1:9b:7f:c7:8d:d6:f3:62:
                    fc:65:4e:96:a1:0d:5e:a4:d4:24:95:5c:38:36:2e:
                    56:6e:a2:06:03:2d:77:14:bd:de:2c:3d:c9:2f:b9:
                    53:18:0c:a3:41:1c:59:11:1c:3d:ae:99:a9:83:2e:
                    f0:ce:33:99:00:94:23:d7:7d:88:4f:aa:bd:55:6a:
                    8e:c0:be:62:93:92:c2:58:58:6a:81:24:92:ed:9b:
                    a4:cb:27:9a:ef:41:3d:13:a6:1d:7b:37:82:6b:56:
                    9e:62:7f:4a:19:4b:38:c2:2a:83:c4:e8:92:10:bf:
                    54:43:91:1e:dd:e5:79:d7:de:12:c4:68:b7:bb:73:
                    84:24:ca:60:05:d7:40:6b:ea:02:98:d7:fb:72:9b:
                    cf:01:af:52:57:50:44:4b:4f:d5:0e:af:63:aa:26:
                    e6:e9:77:58:3f:72:ca:16:7f:93:3f:90:4c:59:6f:
                    19:23:61:44:c5:6f:26:d5:9b:de:a7:49:c1:ad:8a:
                    af:4a:2a:6d:8d:4a:9d:da:60:04:53:f6:d7:2d:35:
                    46:fa:26:a6:c0:c1:93:00:c3:2d:eb:cb:e9:48:75:
                    a7:17:b5:7a:66:0a:40:38:03:ee:e4:52:a6:1f:4d:
                    2b:71:9a:c0:d8:14:e2:d5:e4:1e:88:0d:1e:ee:2d:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EC:53:A6:5A:15:BA:41:BF:95:25:38:6A:86:72:D8:15:EC:EB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/168c288f-3357-3f43-83d2-a20bb6ff9278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.20.0/22
                IPv6:
                  2602:fc5d:fe0::/44
                  2602:fc5d:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:03:bc:dd:99:d8:e7:59:61:65:15:a4:14:a2:24:24:1d:53:
         b2:0c:e4:e8:fa:ce:f6:0a:6c:e9:57:50:d0:d8:f8:ba:ee:d0:
         c4:91:1a:1f:bf:86:d3:47:d5:ea:4a:19:f4:7e:fd:f6:04:0d:
         8b:54:dd:0d:17:ec:9e:7a:64:d7:0a:e4:71:1f:51:6b:e1:72:
         81:95:0a:c5:43:3d:39:a8:b7:fa:07:bc:c3:74:d2:a1:87:c0:
         48:eb:de:2d:cb:fb:eb:24:ef:df:c5:4b:ec:02:11:bd:87:cd:
         e1:a9:4f:5c:59:f4:99:69:63:6a:2d:e0:25:38:37:e8:6d:55:
         18:c5:e3:d4:b3:cb:d3:ae:46:0c:dc:51:04:ae:74:0d:87:80:
         92:81:5b:64:fa:e7:c7:27:a8:99:13:41:38:be:14:20:52:0b:
         92:9e:55:8b:b5:24:8e:dc:ef:6f:07:e6:b9:e7:03:5e:54:06:
         41:55:56:54:92:37:30:3c:82:0c:ab:6f:0e:02:7d:dd:e4:f4:
         16:c3:95:c8:84:5f:d5:6a:53:aa:38:5f:84:0a:5f:a5:c9:41:
         2b:42:38:08:09:30:7a:78:43:d7:59:c6:49:30:f3:4b:02:f3:
         b3:93:be:12:ea:ee:a0:fd:12:b1:6a:c4:23:03:0d:00:58:be:
         e2:a2:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:27 2026 by rpki-client