Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/167c6897-46d6-3640-a3d9-5ab01ef2d727.roa
File:                     167c6897-46d6-3640-a3d9-5ab01ef2d727.roa (raw, json)
Hash identifier:          aTZiCRe16bkWuXJyPOAUlUCEHOOa4VRkhxTDaUBNstM=
Subject key identifier:   F8:5D:55:36:BC:9F:C1:64:62:20:01:28:D4:FF:98:FB:EE:74:6F:3B
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584F98CFF948BE314F27E9A36700
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/167c6897-46d6-3640-a3d9-5ab01ef2d727.roa
Signing time:             Fri 23 Oct 2026 11:17:22 +0000
ROA not before:           Fri 23 Oct 2026 11:17:22 +0000
ROA not after:            Thu 21 Jan 2027 12:17:22 +0000
asID:                     400384
IP address blocks:        140.235.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:98:cf:f9:48:be:31:4f:27:e9:a3:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Oct 23 11:17:22 2026 GMT
            Not After : Jan 21 12:17:22 2027 GMT
        Subject: CN=6a0096d0-1423-426d-975e-bf25005cc08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:1a:23:9d:b7:95:59:8e:31:fb:ac:47:90:
                    2a:d6:82:c1:dd:98:cd:b6:e7:73:15:62:1a:88:9b:
                    b5:b8:58:59:9e:24:f5:24:23:ef:6f:8f:62:88:05:
                    82:46:74:57:c0:fd:9e:2d:b7:26:62:a7:29:83:6a:
                    e1:70:6a:98:2f:6a:fc:71:8b:34:19:72:69:e2:d6:
                    02:21:5a:7f:e4:99:3d:b7:f1:3a:34:e3:e7:d5:ca:
                    48:5a:e6:79:e7:13:b8:d9:0d:83:ca:f0:17:32:d7:
                    84:77:29:5e:d7:8b:99:d9:07:6c:a2:70:ef:1b:1a:
                    85:3e:70:5f:cd:eb:7f:5d:f1:e1:e4:cf:0b:7e:c7:
                    9f:b8:fa:57:e4:24:99:92:e8:d3:ca:1f:d1:b8:c7:
                    9d:af:a4:c6:76:93:08:dc:c5:a1:80:60:85:93:8c:
                    00:c2:e4:7b:cc:2e:7d:1d:22:36:6d:23:d3:11:10:
                    d6:21:1c:8d:b5:34:22:ed:7a:2d:f3:ed:3b:97:5d:
                    4d:2e:ac:0f:bd:b3:8b:e7:b2:56:a8:17:27:a6:fa:
                    91:04:f9:b5:1a:f0:53:73:57:4b:0c:ed:0e:07:7e:
                    b6:ac:16:7e:f3:74:1e:a3:44:c2:66:cf:80:5b:20:
                    64:a6:ed:f3:b5:2a:65:90:cc:0b:90:6c:60:91:03:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5D:55:36:BC:9F:C1:64:62:20:01:28:D4:FF:98:FB:EE:74:6F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/167c6897-46d6-3640-a3d9-5ab01ef2d727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:fe:f9:58:c0:61:90:8c:8e:28:5a:a7:ab:1d:77:c4:0c:
         79:7b:9b:6d:7c:91:38:8a:12:99:9f:ad:3a:2f:8f:10:fa:5c:
         fb:89:ca:60:19:93:7d:ac:a1:bf:88:67:ab:d2:fb:72:33:72:
         9d:1d:95:d6:f7:68:f1:69:fb:f1:32:43:bb:bb:9d:5a:67:ae:
         18:95:b3:2b:0d:57:88:86:29:4c:17:f6:93:fb:d3:e2:ae:62:
         12:72:9f:b3:04:33:cf:70:25:2e:ef:f5:7a:69:0d:22:8a:47:
         5c:02:5c:0f:33:03:94:af:41:ec:95:ff:8d:84:03:98:f5:c6:
         55:c4:a3:55:68:39:aa:f1:37:56:9a:62:c0:d1:04:d5:a6:aa:
         5d:28:0d:77:2e:39:3e:31:b7:c2:2d:a8:ae:74:4e:04:b8:6d:
         3d:8a:af:cc:94:d4:5a:ab:18:ae:f6:83:a4:a1:e4:25:84:92:
         6c:5f:57:53:61:dc:a2:08:14:05:85:0f:b3:34:47:9f:96:3e:
         84:3b:b4:12:b0:d7:64:42:34:3c:28:c3:a8:f2:2b:0d:88:71:
         a2:eb:72:7a:cf:ba:c7:ff:9b:ca:c0:b1:8e:f8:1c:27:60:f6:
         c1:4d:7a:72:5d:b3:04:bf:96:ac:01:32:0c:40:90:22:2e:be:
         9d:2a:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:40:50 2026 by rpki-client