Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb6f5c24-8ffc-3bd1-9188-09665003c6e2.roa
File:                     fb6f5c24-8ffc-3bd1-9188-09665003c6e2.roa (raw, json)
Hash identifier:          yxCppW6mXeqV3JJxoRKegASoY1TAh3UQFLQAIa9XH8I=
Subject key identifier:   7F:7F:46:ED:C2:A4:2F:54:10:58:FD:34:0D:0A:2F:EB:5D:9F:FF:8F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE62CD413360E2DB6882AFEC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb6f5c24-8ffc-3bd1-9188-09665003c6e2.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        140.245.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:d4:13:36:0e:2d:b6:88:2a:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=00e3f0a5-8288-4a1c-a1fe-40ea4eb17bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:2f:1a:27:1e:38:6b:49:a0:a6:fb:d0:0d:
                    d0:0f:70:c1:a0:67:07:b9:a3:37:6a:75:19:81:db:
                    21:e5:58:fb:a0:ff:cb:01:6c:ae:a4:fa:83:9e:51:
                    b3:0c:45:5e:d2:be:d8:da:bf:f3:3c:db:da:3c:07:
                    b2:0d:21:49:94:de:39:a9:1f:bd:06:93:70:19:49:
                    80:b5:59:cb:80:5c:c1:cd:2e:5e:75:74:93:2f:58:
                    95:86:64:95:17:68:4c:02:19:3f:9d:4d:cf:7e:1f:
                    85:ce:11:ae:1b:3b:5f:c7:2c:6d:6a:7d:c1:c3:ab:
                    e6:09:4e:a6:9b:b4:98:5c:59:26:92:e4:19:0a:73:
                    74:a6:1c:88:8e:a5:54:0d:70:7f:1b:3e:5a:74:d8:
                    bc:19:2f:31:e1:15:f9:28:c6:b6:d4:af:7b:76:76:
                    db:73:63:67:05:a1:52:e9:13:74:44:27:e6:ca:ab:
                    21:19:84:81:16:d1:a4:a1:52:29:d0:63:0c:76:b6:
                    6e:20:21:2f:f3:61:8a:5a:3f:43:40:7d:8e:c5:6f:
                    9c:22:a1:db:3c:fa:87:5b:18:63:8d:9a:65:32:1f:
                    dc:6b:b3:7b:bf:a3:52:69:e5:8d:ed:4b:52:17:10:
                    0b:93:3b:93:f3:37:dd:85:e6:fb:d4:65:4f:f8:14:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:46:ED:C2:A4:2F:54:10:58:FD:34:0D:0A:2F:EB:5D:9F:FF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb6f5c24-8ffc-3bd1-9188-09665003c6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.245.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:79:31:83:10:3a:12:1f:42:ca:39:f9:47:65:7b:68:eb:e9:
         3f:6a:a2:db:d0:d8:84:86:67:64:72:67:cf:14:40:b2:02:c6:
         24:8e:e0:fa:4a:1a:37:48:12:e7:c7:5f:f6:c0:22:35:de:4b:
         dc:34:50:b2:82:03:ee:55:48:ce:4e:3a:83:9b:ef:5d:65:55:
         eb:86:53:61:45:a4:db:02:37:fe:0a:1a:a4:58:44:10:3c:a4:
         e5:c5:9b:46:b6:f7:7a:77:bc:65:be:ce:d1:65:eb:a1:83:6b:
         7e:87:9e:da:fd:98:f1:9f:c6:80:88:02:00:87:ac:35:4e:9f:
         8d:37:03:63:6f:ff:e1:5e:58:1e:95:90:a6:21:16:12:2b:06:
         05:8c:98:84:4d:eb:0f:af:de:bf:e1:71:74:4a:70:25:78:b2:
         fd:38:17:2d:c2:a8:fc:69:23:b3:d2:2a:2f:d4:f6:55:e4:2e:
         ec:27:6c:1e:a5:bf:1e:b5:02:16:d0:a0:09:fb:18:2d:04:6b:
         47:1e:d5:ed:f0:47:20:7a:23:60:c5:35:70:fb:6d:fe:3b:37:
         c1:2a:a6:db:d6:91:90:0e:af:da:40:96:90:11:7e:ca:68:a2:
         8c:b0:c4:6e:50:23:86:e1:ad:99:17:5b:86:51:95:db:31:77:
         cd:24:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:16:57 2026 by rpki-client