Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa
File:                     b403408d-4926-31d4-9850-4a8d70ac0328.roa (raw, json)
Hash identifier:          R46LIxM6ZiAqHe/cILw4RF/X0LOlyN/j2GzWVyoU3/I=
Subject key identifier:   50:D7:B4:F3:6B:80:46:AB:CC:E3:82:FB:81:6B:3D:BD:5B:12:27:7B
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584EF7176F9624C3CB7B7A7A8D70
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     398427
IP address blocks:        185.165.213.0/24 maxlen: 24
                          185.165.214.0/24 maxlen: 24
                          185.165.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6f:96:24:c3:cb:7b:7a:7a:8d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=abf6386e-150e-41b4-b54f-657f6912c925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:36:4b:9f:42:95:f9:4f:de:1f:c4:0c:16:
                    95:06:8f:57:be:f1:bd:5a:7c:37:36:f8:93:15:74:
                    b2:1b:fc:ff:a0:be:b0:e0:b8:cf:8c:8c:be:1b:ad:
                    e3:19:18:4e:9d:11:ee:7d:7d:57:4e:47:7b:31:cc:
                    6d:c7:eb:c0:be:9a:d9:82:b3:ba:2d:81:f3:67:97:
                    dc:b1:33:b2:4a:86:7b:a0:17:8a:9f:37:cc:ed:8d:
                    6e:31:27:d8:83:6c:a8:91:32:00:61:56:98:9d:fb:
                    f5:a1:33:5e:c7:b3:e5:75:6f:40:ab:23:d0:d2:97:
                    f8:9a:16:fb:cb:3e:a3:aa:08:60:36:51:37:e5:6f:
                    50:37:89:00:45:ae:8d:4f:d3:44:7c:1e:74:02:46:
                    2f:c9:40:a7:43:52:d4:b2:6f:4d:72:61:f4:67:02:
                    ef:e0:ef:e5:1b:7e:d1:f9:bb:df:e5:f2:70:1e:da:
                    3e:8a:15:54:cf:fc:5c:d7:28:03:14:c1:48:4d:f6:
                    65:f7:ae:b1:93:09:62:d9:b3:b7:3c:3f:37:c2:3e:
                    9b:ee:f3:37:31:8a:ff:51:f0:1f:ba:12:65:b4:48:
                    eb:7f:66:c1:cd:f9:5d:9a:34:02:4b:03:40:a8:46:
                    87:b3:20:8b:5b:bf:42:24:47:d9:1d:f3:51:3c:2b:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:B4:F3:6B:80:46:AB:CC:E3:82:FB:81:6B:3D:BD:5B:12:27:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.213.0-185.165.215.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:aa:c0:5d:ab:a7:48:50:b3:1e:8c:1c:5f:67:27:c7:77:3d:
         78:b3:7c:c9:25:fa:55:63:42:e3:98:54:68:bb:04:fc:ea:7b:
         cd:1c:2f:7f:64:6d:61:2c:c7:08:1d:3f:e6:9b:47:42:6a:f9:
         0e:7d:80:21:4a:0b:fd:e7:cb:0a:83:2f:fd:31:e8:e8:b3:34:
         7f:95:95:17:fe:94:dd:b6:9d:a4:80:28:cd:93:1f:c4:00:50:
         cc:c1:86:67:d7:20:5e:e6:12:f9:d6:65:4e:da:49:e2:ca:1f:
         71:58:5a:7c:3a:93:6b:89:08:31:f2:ff:25:cf:0b:dd:a9:b7:
         37:d5:6e:ea:b2:a2:27:5b:2f:80:96:44:ce:95:ae:d3:df:d5:
         5d:97:53:c1:4a:a2:6a:06:b0:ee:fd:b7:23:a6:e2:f0:7e:c9:
         af:73:70:f3:a0:77:65:a7:9a:08:f7:f5:b2:8a:10:2f:e2:38:
         a6:62:96:66:27:1d:f3:42:9b:7c:1d:ff:58:56:ca:8a:22:18:
         0a:5e:1a:77:44:26:8b:5f:45:02:e5:ac:26:32:3e:e3:4e:a3:
         0e:5a:b7:9b:56:5f:1a:88:7c:20:07:5e:81:cd:89:eb:c6:9a:
         cf:94:aa:5c:80:93:c5:75:92:4b:aa:f0:cd:47:63:bb:83:d2:
         7e:5e:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:23:41 2026 by rpki-client