Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa
File:                     3daa9504-2bdb-32bf-a3b7-989249f38e37.roa (raw, json)
Hash identifier:          U0z/7QrD98cPPkSBNHQGOvWOFS46PsfxMNAsb0mj4Ow=
Subject key identifier:   C5:3D:F4:E5:F2:AB:02:3B:D3:C9:9C:AF:2D:C2:B8:B0:29:7D:4C:82
Certificate issuer:       /CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
Certificate serial:       010D0C9F4328584D00B2890DEEBDE9FDA021AC00
Authority key identifier: 01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     7922
IP address blocks:        165.137.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:89:0d:ee:bd:e9:fd:a0:21:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=9f4a4820-34ae-4dc3-9977-4d92e556afa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:20:36:10:78:f1:ef:eb:57:00:47:0d:cf:
                    05:9d:89:d1:a8:e5:73:aa:2b:64:20:c3:dd:12:3a:
                    5d:63:8a:bf:2e:db:49:60:6b:79:0f:fe:84:8a:08:
                    93:f9:a6:67:e4:ba:78:68:31:18:70:38:11:fa:2e:
                    d1:d8:71:67:25:48:e6:77:c8:54:9d:93:1e:78:37:
                    45:57:7a:9a:2f:31:5e:c8:f6:85:c4:86:42:cd:d1:
                    5b:8c:44:18:64:7f:88:e3:01:3e:56:e1:bc:7e:75:
                    ff:61:05:dd:9f:18:36:1e:9e:4e:29:95:4c:97:0c:
                    e7:2c:44:99:6c:ed:eb:b5:80:8a:9b:dc:8e:f5:7e:
                    99:fa:9a:f8:f3:f2:c7:fe:e8:b8:59:9c:b6:c0:b8:
                    57:46:74:81:b3:ac:c5:72:aa:35:62:bd:53:ca:b3:
                    ab:1d:1f:61:a1:b1:59:01:56:e1:e4:25:3a:6f:86:
                    f8:00:72:55:c4:86:4a:d2:c7:48:ba:d0:3f:f5:eb:
                    55:83:6f:d5:b5:f6:f2:27:c8:e7:a1:13:f4:0d:40:
                    f6:95:e8:d7:c4:d8:9e:68:f5:c9:cf:36:98:a3:d9:
                    17:e6:22:b5:38:b0:4e:2f:ad:a5:69:9a:a5:85:0f:
                    27:19:21:de:59:a9:e9:e6:37:ee:e9:cc:92:04:41:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3D:F4:E5:F2:AB:02:3B:D3:C9:9C:AF:2D:C2:B8:B0:29:7D:4C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl

            X509v3 Authority Key Identifier:
                keyid:01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:bc:10:2c:02:58:b5:c2:6c:d4:f6:c4:73:d4:ca:00:63:
         e8:47:75:a3:fc:33:85:a4:7a:a4:fd:17:98:90:76:57:4c:44:
         18:80:11:36:dc:60:17:13:56:a2:55:44:3e:26:3e:2a:c5:ec:
         6c:4d:13:f2:b8:14:9f:36:1b:5e:5e:37:08:c5:94:77:9f:58:
         6b:f2:31:96:03:f4:bf:c9:7a:f4:a4:06:f7:b8:ed:f5:e4:ea:
         e6:98:9d:83:5d:8d:68:13:f3:44:fe:70:0a:c3:71:5c:24:90:
         88:80:70:32:61:c0:59:3e:29:79:8c:c2:87:6f:8c:f8:b1:a0:
         e6:5b:c4:a0:5d:4a:6a:15:8a:a3:22:38:0d:92:22:cc:45:28:
         35:94:4d:cb:8c:53:1e:ab:c7:e4:8d:3a:40:f3:8c:4b:bc:cc:
         bd:5f:e1:2a:ec:e5:be:26:3c:70:76:9b:bd:40:86:a0:3f:b8:
         3c:46:3d:f4:b2:0e:ab:09:e1:9e:ca:da:ee:07:56:d4:c2:09:
         a9:9b:4f:e2:bd:d3:22:22:5f:44:e0:57:89:a8:b1:66:af:f0:
         94:ab:e2:21:38:d7:b7:63:bb:69:b4:f3:13:6f:80:a3:1d:c3:
         0e:bc:8b:d2:dc:20:d0:df:91:d8:b0:e2:e2:2d:72:0b:7b:5f:
         8e:f5:a4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:16 2026 by rpki-client