Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/3d5f54d8-5171-335e-abdc-6f5c352b45e1.roa
File:                     3d5f54d8-5171-335e-abdc-6f5c352b45e1.roa (raw, json)
Hash identifier:          weRrUkZYFI6Xr4XU+lL9XmstdlU08kLjvuOVF6xrNcM=
Subject key identifier:   BE:39:DE:72:BF:AC:A2:89:DF:FF:11:2A:5E:0C:AD:93:16:87:AB:C6
Certificate issuer:       /CN=f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004
Certificate serial:       010D0C9F4328584F761D7E672521B04329C3D400
Authority key identifier: 37:71:46:B7:1B:96:9B:81:E7:E2:92:EE:46:4C:C1:CF:E8:12:9E:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/3d5f54d8-5171-335e-abdc-6f5c352b45e1.roa
Signing time:             Sun 11 Oct 2026 01:00:13 +0000
ROA not before:           Sun 11 Oct 2026 01:00:13 +0000
ROA not after:            Sat 09 Jan 2027 02:00:13 +0000
asID:                     4186
IP address blocks:        165.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:76:1d:7e:67:25:21:b0:43:29:c3:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004
        Validity
            Not Before: Oct 11 01:00:13 2026 GMT
            Not After : Jan  9 02:00:13 2027 GMT
        Subject: CN=98e889c5-c967-4467-a2ff-b48aebaebdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:6a:2a:ad:6c:eb:cb:c0:3c:4f:88:9a:1b:
                    ea:8b:9c:c7:78:e7:d7:25:0b:3d:8c:30:26:d2:65:
                    44:93:af:cd:4d:a7:aa:aa:fc:13:95:8a:f7:7e:2b:
                    25:3f:78:07:9a:2e:c5:a6:b9:b4:c2:70:33:0c:c8:
                    b2:38:5f:1d:0c:ee:4b:31:34:ca:78:33:81:a6:b5:
                    f1:23:ba:75:12:93:e8:d2:66:0e:ae:db:ca:80:be:
                    c2:08:86:45:44:cd:f0:e9:48:c2:b0:99:a9:fe:5f:
                    ec:f8:23:4d:11:e5:70:57:05:1a:ed:9c:5d:bb:39:
                    ac:15:2d:b5:63:bd:67:52:fe:c8:ab:03:c0:0f:2a:
                    64:07:d0:7d:bf:14:6f:ec:c5:82:a9:77:41:dc:93:
                    06:40:66:87:4a:d4:1e:cc:bf:a0:dd:bc:46:83:e2:
                    ae:cb:94:b3:c3:82:1a:f2:10:9b:3c:d7:82:67:9c:
                    6f:79:a4:54:7c:d2:10:df:35:e2:e1:03:59:d6:cf:
                    e4:74:bd:1b:d7:4d:f6:90:35:ff:be:14:c0:b3:1d:
                    49:49:d1:db:90:74:a6:25:e9:15:0f:67:01:3f:1b:
                    59:7c:ed:a3:d4:15:02:3b:3e:46:5d:fc:3c:61:04:
                    a1:6b:8e:28:37:fe:cb:9a:e8:76:cb:22:69:5a:d3:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:39:DE:72:BF:AC:A2:89:DF:FF:11:2A:5E:0C:AD:93:16:87:AB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/3d5f54d8-5171-335e-abdc-6f5c352b45e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.crl

            X509v3 Authority Key Identifier:
                keyid:37:71:46:B7:1B:96:9B:81:E7:E2:92:EE:46:4C:C1:CF:E8:12:9E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:6b:d3:e8:7c:4f:fb:86:38:00:b4:65:2a:24:04:9c:c3:
         25:80:91:58:4f:4b:9c:8b:e5:a7:98:27:56:5f:76:b4:3d:17:
         3b:92:4f:58:92:66:1f:98:4d:ca:07:c0:77:14:26:a2:78:f4:
         3a:4e:db:35:68:01:83:cc:a4:67:7b:01:0c:e2:e1:b5:70:66:
         ea:4b:3e:33:a4:7a:4f:19:78:d4:c7:0e:76:72:29:c5:ea:19:
         d4:0d:ff:93:f4:8e:b7:8b:e2:26:47:8f:85:37:18:2e:59:62:
         af:e2:c9:3d:f6:71:02:5d:0c:3c:5e:32:cf:12:5a:57:b2:c1:
         8e:63:65:07:72:db:8b:8f:f1:f2:42:e3:14:06:ee:ec:86:42:
         e3:b2:74:28:44:53:bc:41:84:72:8e:a7:64:d3:22:b2:d1:bd:
         56:66:1b:b8:89:bb:0a:1d:2b:98:88:68:96:43:5e:07:eb:3e:
         2b:b2:6b:70:06:83:48:a3:e3:6b:09:0a:d1:d9:be:ab:60:14:
         fd:1c:7e:9b:40:95:75:9f:0b:37:19:d4:65:d8:81:ad:28:f8:
         9d:d1:fb:d3:bc:92:fc:08:49:ce:32:0f:d2:78:0d:f5:6f:95:
         4e:35:5c:1c:d1:20:85:01:b9:73:02:23:94:52:d6:5f:22:d0:
         0c:98:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:42:41 2026 by rpki-client