Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/65b15e82-f2b7-3973-b841-4e50b4a9a83e.roa
File:                     65b15e82-f2b7-3973-b841-4e50b4a9a83e.roa (raw, json)
Hash identifier:          6Eb10BiRHNUL2cYGNxQQesewv8EzzN65k7g9ryQfNko=
Subject key identifier:   5C:54:D9:CF:35:15:F4:70:8B:E2:50:8C:8F:12:14:77:B1:4D:51:BB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CD6D21F3DFE497BE0ABD77440
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/65b15e82-f2b7-3973-b841-4e50b4a9a83e.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     214054
IP address blocks:        45.40.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:1f:3d:fe:49:7b:e0:ab:d7:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=1be7f4b4-59ea-41d2-a7c3-9c045a805451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:f2:f5:1e:04:40:a5:c3:b0:70:9e:63:23:
                    2e:f9:3b:84:8a:2b:fb:8e:b1:fa:72:75:e1:92:86:
                    95:fd:78:69:8d:15:c0:cb:f1:ea:ef:ab:6c:48:d7:
                    6a:06:e3:d6:df:f0:00:eb:a0:38:55:e0:1b:d3:5f:
                    67:0f:71:99:1b:13:6d:bb:a3:60:1b:c8:38:70:ee:
                    19:9e:d6:b5:02:8e:b3:55:dc:40:82:99:50:5d:de:
                    a3:fe:65:51:90:8b:7a:b2:83:0c:83:c4:03:86:78:
                    42:3c:11:c0:c4:b2:15:75:ef:bf:ed:45:20:2d:8b:
                    8c:ed:4e:88:2f:e5:a8:21:26:97:a6:36:df:a2:42:
                    2e:bc:e5:56:37:f3:a8:7c:36:12:0f:c1:49:8e:25:
                    8b:e6:71:0b:e3:43:d6:1a:44:08:b3:3d:38:51:67:
                    38:4e:46:fd:cc:ab:9e:c5:b7:79:8a:93:80:e8:80:
                    e4:88:1b:cb:e5:9c:32:17:0b:fd:f1:46:24:48:9a:
                    b1:aa:e4:f7:25:36:cd:3d:4a:82:f8:9b:9e:9e:2f:
                    1e:f6:f4:b5:56:87:03:fb:08:a8:31:be:e7:4b:ce:
                    61:27:66:4e:5b:1a:a9:72:30:bc:e8:3e:cf:14:3c:
                    07:08:7f:13:31:47:5a:96:10:56:ee:60:05:9d:92:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:54:D9:CF:35:15:F4:70:8B:E2:50:8C:8F:12:14:77:B1:4D:51:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/65b15e82-f2b7-3973-b841-4e50b4a9a83e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:f4:e7:25:97:9f:9b:cb:f2:0d:61:a9:c5:04:be:e6:1b:
         2a:bf:08:f4:03:c2:a9:d5:cf:80:95:e3:39:60:1e:07:e0:57:
         b7:9f:9a:4e:c7:be:92:40:1b:53:14:f2:73:2b:09:5b:1a:06:
         fd:ab:c7:22:a1:fb:f4:3d:be:2c:f7:85:23:24:e0:f7:c7:87:
         cf:0f:ff:3d:ec:65:fc:45:5b:fc:8e:41:c1:81:95:b0:11:38:
         21:aa:91:f4:69:0b:c1:05:6a:62:95:84:61:69:6a:71:34:e7:
         79:32:4c:c5:60:c7:fc:4b:db:5a:47:55:54:ee:bc:11:f1:c3:
         a8:39:0b:0f:66:73:2c:46:c0:a8:3a:46:e2:6f:ca:d5:2a:1c:
         9c:f8:9d:3d:e0:22:ae:91:96:3e:38:47:0e:b7:21:0d:73:82:
         bb:bc:9e:8c:62:86:80:89:b9:6a:1f:27:e0:4c:8b:4a:a5:f4:
         c2:05:9d:64:8a:07:a0:2b:54:a4:89:e1:d2:cc:00:a8:ba:17:
         4f:2a:13:dd:67:a5:bc:3a:53:3c:88:a2:e7:67:71:30:15:e1:
         86:0e:e1:f5:b5:dd:6c:04:31:9e:b9:a4:b4:9b:81:1e:fb:3e:
         04:80:e4:58:cd:df:00:e1:6e:5d:06:fb:1f:3d:58:8a:3d:6a:
         6c:db:e3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 03:55:38 2026 by rpki-client