Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa
File:                     086c1071-1294-3436-beef-cfe7cef951e5.roa (raw, json)
Hash identifier:          zmVg7nlrdEX6/+DhnnTG+MuIwW1a3EJ4AkHDK842IMg=
Subject key identifier:   1F:2A:6A:25:28:F4:95:A4:90:2E:39:9B:85:DB:08:B6:3C:88:38:12
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584CE8F763F144FD20B424E43180
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     136796
IP address blocks:        141.140.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:63:f1:44:fd:20:b4:24:e4:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=dc5f25dc-bf35-4d17-8ff4-d72ed57b0e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:3b:a5:07:cc:6d:2d:ee:3a:fc:22:ce:19:
                    0e:a7:08:3d:a3:f6:5e:59:e5:da:5f:2d:73:67:1b:
                    1d:41:8f:28:17:d0:c9:26:53:cb:22:54:77:d6:a0:
                    41:15:fd:68:28:53:51:56:40:0f:3d:f1:41:66:1e:
                    ae:73:d6:1a:be:ad:12:32:3b:5b:dd:f4:c3:91:28:
                    f2:2f:ce:ed:02:91:ed:dc:d5:b3:f3:bc:8f:46:09:
                    5b:56:45:3c:28:a0:84:45:28:bf:e0:75:b6:28:e8:
                    1a:13:5b:b2:3f:d9:91:b6:da:94:f2:0a:ca:3a:59:
                    f2:01:c5:3b:90:92:e8:9e:f5:83:2a:6a:dd:67:63:
                    31:ab:96:30:ba:b2:c9:d5:1a:19:6b:93:cd:cd:c6:
                    3e:c9:c3:3b:8e:cc:f4:32:65:c5:e5:a6:37:e5:5f:
                    8d:48:e4:ac:f6:ac:1d:f2:91:e9:6f:ec:33:b8:f8:
                    ff:e1:b4:4d:3a:4e:ea:03:16:22:90:cb:48:8b:6d:
                    3b:20:3d:33:9f:07:23:6d:c5:7a:75:16:30:59:07:
                    7a:71:a8:e5:20:aa:ba:ec:9c:f2:67:36:fe:b0:f6:
                    c0:79:b7:69:88:d2:d1:44:c2:6e:ec:8f:d7:33:a9:
                    80:ba:c3:1a:99:22:ac:5d:34:47:9b:06:34:ea:e9:
                    d5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2A:6A:25:28:F4:95:A4:90:2E:39:9B:85:DB:08:B6:3C:88:38:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:1b:2b:f0:da:95:50:ab:39:81:cf:25:07:d5:99:37:46:
         5f:c9:15:a9:76:71:c7:bf:83:57:63:59:b8:b0:9d:fb:5e:6b:
         96:76:df:87:0d:6b:79:f1:44:8a:3f:8a:7c:fa:e9:8d:2e:f3:
         59:bd:4c:c7:1f:c4:fb:ec:fd:6b:b8:59:b3:0a:3d:b5:ac:c4:
         09:78:d8:dd:61:b1:cd:9b:12:cb:89:b3:6a:34:a1:07:d2:10:
         9f:9d:73:4d:cd:d5:9c:24:48:36:97:62:7c:75:7e:90:6d:22:
         26:82:7e:16:3b:7c:e1:ff:55:96:2d:d2:df:3f:25:9a:f3:7b:
         86:4b:69:53:eb:4f:37:ed:d2:5c:8a:cc:ff:fe:2b:ba:73:88:
         5a:69:3d:a2:3a:23:1c:ec:b8:e9:a8:12:b4:1c:d4:a4:22:be:
         67:12:7d:60:a4:9a:fb:fb:50:14:70:27:c1:8b:9b:d7:b5:de:
         ef:38:d4:89:1b:8a:0e:a3:28:dd:33:59:4d:f7:ef:dc:31:42:
         22:54:49:89:b1:7e:74:c6:99:5c:08:04:13:f5:f6:26:50:6a:
         07:ed:81:46:d8:05:99:63:9a:80:b6:d1:2b:d0:7c:3c:76:f5:
         b0:4f:74:4d:cf:1b:9c:69:93:ac:49:72:67:e4:34:89:35:67:
         f1:ca:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:00 2026 by rpki-client