Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa
File:                     8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa (raw, json)
Hash identifier:          dUOszVXN0OATqWqzaJP2T0gSxWVM1XX5J3zbfDsSWSQ=
Subject key identifier:   5C:D9:81:80:25:3F:BC:25:0D:6D:CC:BF:D4:44:52:2D:F3:7E:EF:13
Certificate issuer:       /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial:       010D0C9F4328584E18AEEAA9AF498E2B98AC6880
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     5693
IP address blocks:        165.140.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ea:a9:af:49:8e:2b:98:ac:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=3143ecbb-e205-4d38-8500-c8d438d7dd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:b0:14:0a:f7:65:58:eb:52:16:38:10:79:
                    ca:5e:b7:3e:67:42:54:a3:14:65:f4:6c:03:27:8c:
                    59:82:e5:8d:b8:58:2a:c4:42:f4:e9:ce:bb:07:70:
                    0e:7b:77:d8:ef:b8:5f:fa:31:d1:35:bb:9d:55:26:
                    b4:08:ed:02:b8:da:b0:28:62:10:92:36:37:81:f0:
                    b7:32:5f:10:cf:6b:95:96:94:ca:32:2c:9b:ef:c4:
                    1d:43:58:1e:9b:7b:85:64:4b:41:12:55:db:55:25:
                    bc:f8:8c:2a:00:f5:f9:63:06:82:4b:78:44:68:aa:
                    02:5f:bc:d9:6a:cc:bc:21:af:7e:87:ea:bd:10:60:
                    5c:1c:7d:b7:8f:a5:10:c5:2f:2e:11:93:29:02:53:
                    60:e5:61:35:23:1b:6d:bc:21:74:1f:b0:95:dc:4f:
                    e0:8f:08:3b:f9:8d:cb:51:b7:63:13:a1:5a:cc:76:
                    0e:44:ed:30:8d:7d:4c:23:5f:34:01:e2:61:15:6a:
                    de:ec:f7:21:98:02:5e:77:88:e0:00:1f:42:d6:fa:
                    1a:eb:2e:e4:1e:40:67:32:c2:8c:99:37:ad:e4:70:
                    16:c7:c7:48:f9:4d:8d:ae:b1:1b:5e:b5:ef:6a:71:
                    e1:6f:22:ec:1f:14:cd:44:5a:d6:25:a2:7a:43:8e:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D9:81:80:25:3F:BC:25:0D:6D:CC:BF:D4:44:52:2D:F3:7E:EF:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl

            X509v3 Authority Key Identifier:
                keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:8b:3d:e3:52:2c:39:18:c0:b7:24:34:fb:48:30:b8:4d:
         13:fc:fd:c2:12:c3:f1:6b:dc:62:38:f3:52:93:c9:eb:5e:f2:
         fe:d7:b9:21:38:65:e5:31:05:55:b0:96:2d:07:96:6b:43:b8:
         66:65:51:cd:05:e9:07:2d:86:8c:80:13:e1:23:db:35:06:a7:
         1c:da:38:c8:8f:52:7c:ef:27:a3:f1:f0:a2:10:6d:5d:c6:1b:
         98:3a:ba:7a:e6:7c:4c:8c:16:13:76:ec:7a:08:0b:8d:8b:89:
         31:d6:7b:65:05:99:e7:c1:0d:0d:30:72:ad:e7:c1:1a:74:2c:
         51:0b:90:85:f4:ef:d6:04:0f:6c:51:d4:99:06:ea:e2:f7:c5:
         31:a5:a7:14:36:54:b7:c8:82:b1:3d:18:87:83:3d:71:fd:35:
         65:57:0a:77:11:eb:8d:7a:d8:69:ed:5b:ab:be:d9:37:72:c8:
         1b:f0:0a:1d:ee:a7:05:07:02:cd:a2:9a:53:37:0a:b4:f6:57:
         7c:49:bb:cf:9b:6b:dd:df:7d:85:21:fe:cb:0e:a8:fd:b5:c7:
         62:93:50:54:48:98:d1:78:0d:0e:7d:62:1d:b5:74:52:de:16:
         a7:0e:13:0c:e9:3b:8d:d8:cd:ba:fe:8f:11:05:5f:51:9b:2b:
         16:cb:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:48 2026 by rpki-client