Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/e2b2df97-ee67-3c17-a393-fa3dce04a933.roa
File:                     e2b2df97-ee67-3c17-a393-fa3dce04a933.roa (raw, json)
Hash identifier:          Txuq9hLzIY5jCzhfgjSM7Qi4Fv8GiUgMBiZM/J3szMQ=
Subject key identifier:   CD:23:D7:B5:FB:BC:4C:F6:FE:6E:4E:36:BF:62:95:62:0A:CB:A4:59
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584F7BB2F33DC6485F556BCC8080
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/e2b2df97-ee67-3c17-a393-fa3dce04a933.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     14114
IP address blocks:        169.145.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f3:3d:c6:48:5f:55:6b:cc:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=4d63e9dc-b0cc-40be-ac5e-d0a6f8b71a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:a8:cb:64:1b:1a:60:6e:36:f1:b4:02:13:
                    6b:10:69:1d:83:e8:da:da:3d:b1:23:15:66:9e:8f:
                    76:55:02:27:40:6e:30:61:8e:f9:0b:93:23:d6:1e:
                    2a:e6:e6:da:5d:96:e0:b9:ad:2b:39:66:24:ca:8a:
                    61:c4:f2:43:3f:eb:81:60:1a:68:36:52:99:b9:19:
                    81:d5:60:02:bf:ca:9e:26:87:72:72:f0:c2:ee:45:
                    c0:5c:e0:b4:ce:cc:70:c6:14:72:cd:55:05:48:97:
                    33:e5:dd:19:d0:e3:cf:7e:96:4c:e4:9c:8a:67:05:
                    2a:04:6d:3e:c5:49:02:6c:01:97:b2:67:8c:0d:4c:
                    a7:32:ff:1a:7c:1c:a4:e9:89:ea:27:e3:13:85:12:
                    4b:22:e2:e7:be:80:38:18:52:ee:7f:c2:30:3c:5d:
                    cb:15:31:86:15:fc:20:e2:f8:f4:52:5a:46:08:1e:
                    1a:6c:a2:9f:28:e5:e3:64:72:7b:fb:d2:40:2b:24:
                    21:b8:ef:f6:10:83:39:7f:42:06:f4:6d:05:20:f3:
                    db:ee:7d:e3:61:b4:f4:f9:dc:35:01:1c:68:74:f7:
                    ee:20:8b:8d:ac:a3:75:f5:7c:1f:55:c5:8f:63:e2:
                    ac:06:50:8e:b0:ed:3d:da:c3:cb:f4:75:fb:82:ef:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:23:D7:B5:FB:BC:4C:F6:FE:6E:4E:36:BF:62:95:62:0A:CB:A4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/e2b2df97-ee67-3c17-a393-fa3dce04a933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:58:e2:88:2f:33:de:36:5a:a3:c5:59:1a:b4:24:d7:f3:de:
         23:21:0c:80:33:06:76:1f:ae:45:e3:70:14:00:66:80:2b:03:
         8b:69:3c:5b:bb:a0:99:81:c0:ae:5d:02:3f:08:de:5d:86:44:
         55:e4:e5:0e:48:fb:31:5f:73:87:a2:f6:68:ee:27:3f:2b:db:
         ce:1b:12:65:27:e7:d9:d4:f9:e5:fa:98:33:f1:62:1a:57:da:
         8d:51:29:7b:d5:66:e1:83:99:81:61:dd:ca:ef:87:0f:69:c2:
         a3:ba:c5:ec:f5:a6:c4:2f:2e:4e:b0:6f:fd:3d:29:e7:33:b4:
         3e:b9:fc:e5:68:fd:6f:b7:58:94:ef:de:f7:a8:8d:02:d9:62:
         6b:c1:85:02:dc:a9:f4:b9:ed:81:3a:6b:13:9c:bf:e5:50:36:
         bb:8b:ab:5e:d0:93:f3:84:d5:60:46:00:8d:f2:7e:0f:cd:b9:
         df:a6:06:ef:ac:d2:f2:3a:eb:5a:5d:bf:db:23:33:ed:f5:6f:
         54:e3:fc:38:cb:7c:a0:f1:39:f9:4b:75:88:2c:24:76:2c:7d:
         5a:76:99:17:13:59:1e:ed:7c:6b:5f:03:6a:b4:22:bc:18:67:
         15:26:4a:3c:cc:33:09:79:7e:b2:f2:81:e5:f8:48:24:b2:01:
         47:1c:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:58:51 2026 by rpki-client