Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/6d48f0be-703f-362c-bd9a-c9a9566636b5.roa
File:                     6d48f0be-703f-362c-bd9a-c9a9566636b5.roa (raw, json)
Hash identifier:          jGils6M9OT90d8HyxbDivVv8jEsVk5ywkNsBYrfXs8Y=
Subject key identifier:   C8:6D:63:8A:2E:84:89:B6:A4:D1:99:AC:9D:EF:74:83:30:21:1F:50
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584F4277F8BD3D50993418111E00
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/6d48f0be-703f-362c-bd9a-c9a9566636b5.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     2639
IP address blocks:        165.173.186.0/23 maxlen: 24
                          165.173.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:f8:bd:3d:50:99:34:18:11:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=cd968bee-6ef0-4302-8c5f-3177b78f26fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:c0:17:2f:20:31:bc:f5:49:5e:30:ef:26:
                    6f:42:5c:11:99:0e:ec:e3:c1:cc:82:28:2e:54:3d:
                    8e:6b:d6:9f:c0:1e:94:96:aa:44:06:86:22:85:52:
                    2c:05:92:ad:da:c2:f1:09:c7:e1:9c:3a:5f:13:ae:
                    24:16:bd:07:22:7e:a1:68:ee:d4:b7:3a:11:27:78:
                    6c:e8:29:af:82:a8:5f:e2:4c:38:72:2c:cd:5e:a5:
                    26:54:13:0b:f1:b6:4c:4c:08:12:0c:46:02:c9:ef:
                    b5:87:33:c2:ef:93:37:bd:34:5d:2b:77:7c:a6:a5:
                    00:b3:1a:2c:d1:6e:40:5d:16:08:0e:ca:89:60:6b:
                    4c:1f:d6:89:3a:50:92:ca:df:c0:e1:30:00:40:df:
                    1c:1c:90:0f:36:b7:db:36:47:2c:23:12:24:c9:16:
                    55:34:ee:79:c7:fa:62:2a:ac:77:70:21:ce:b4:66:
                    e8:4f:7f:dc:01:db:83:e8:1f:f2:b7:a1:b5:ae:97:
                    2d:7f:e3:59:fc:ab:88:a4:7d:94:44:c2:76:32:70:
                    ed:0f:b1:9b:e6:46:39:c3:98:cb:8a:38:cc:30:64:
                    1a:f5:46:a7:d0:44:1b:af:e0:a4:c6:1a:d0:6a:c6:
                    db:7c:5c:1a:bc:bf:c1:8d:3b:8d:2b:be:20:4e:fa:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:63:8A:2E:84:89:B6:A4:D1:99:AC:9D:EF:74:83:30:21:1F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/6d48f0be-703f-362c-bd9a-c9a9566636b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.173.186.0-165.173.189.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:5e:93:13:76:e0:f9:bf:de:f2:8a:ae:a7:4c:81:32:32:
         e9:5b:2d:1b:50:19:44:28:ae:fd:23:9e:93:8d:6a:57:9b:84:
         93:58:09:cb:82:08:91:4e:b0:f5:cc:14:ca:d6:71:eb:48:b8:
         5d:cd:86:7c:09:01:d3:0d:bd:75:2c:a1:d7:e7:82:48:44:a9:
         39:fc:2c:08:51:9f:ab:11:fb:c0:50:b9:71:eb:5c:7c:77:31:
         07:b5:4a:94:dc:e8:66:7c:56:a8:30:e3:5d:f3:09:a3:ef:f1:
         5b:ac:05:1c:ff:a0:3e:75:d8:7c:26:f0:2b:75:ee:17:d0:cf:
         7f:8d:96:7e:e9:9c:65:1e:ad:9e:e9:ba:83:7d:c7:d5:05:06:
         a0:aa:92:22:c5:0f:9a:b2:b6:ba:bb:64:ba:66:de:82:b4:d2:
         7c:3f:fb:5c:b0:b1:32:44:8f:2e:1f:b8:7f:d9:a1:ef:67:15:
         1c:9f:03:7c:3c:58:ab:bb:66:05:80:bc:ba:9e:6a:b1:70:14:
         8f:0e:65:9f:e3:ec:fc:9c:6b:4a:fd:fc:4e:e4:ef:41:d7:e1:
         06:6f:d1:58:ca:28:c7:55:7a:03:7c:1e:46:e3:43:17:4e:d2:
         80:8a:f6:e6:f1:57:9d:e7:4b:16:95:5a:26:0d:22:79:ee:f5:
         fb:b5:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:50:55 2026 by rpki-client