Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa
File:                     6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa (raw, json)
Hash identifier:          rPxLkxmVCCWP+f6ZCTmYzw1rh+phbIyiSqUu/2gmws4=
Subject key identifier:   29:41:73:FD:C6:FB:7A:89:C9:2B:A7:C0:B2:58:97:F4:40:3B:D0:81
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B03169ABB3A7696CEF49ED580
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     3477
IP address blocks:        140.90.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:9a:bb:3a:76:96:ce:f4:9e:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=9a6a418f-419a-4e8d-b805-92156a683627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:c6:ab:fb:39:42:05:54:95:7e:e3:a6:29:
                    9b:ca:5e:fe:8a:82:56:63:ff:f9:d7:89:ef:9f:74:
                    44:c0:dd:1d:60:fa:f1:04:97:35:f1:fd:11:3e:c1:
                    90:1d:a0:94:d0:0b:08:5c:73:14:52:df:9c:f8:18:
                    e0:0a:42:4b:13:8e:66:e2:92:4c:7e:5d:29:d4:2e:
                    78:c2:86:d7:6a:2e:b6:af:63:a7:fe:f3:b5:06:b2:
                    1e:a1:a4:c3:a1:90:dc:f5:4e:87:08:1f:4c:13:f4:
                    e6:a6:74:d0:28:c9:b9:d7:e2:a8:27:a6:65:1d:e4:
                    21:53:dd:ac:37:92:95:c4:6f:ca:1c:4b:1f:b9:b3:
                    fb:a5:69:b2:d8:b3:9f:b0:99:d1:45:f7:43:b1:46:
                    d8:df:33:f8:aa:37:3e:42:50:f4:cd:da:5b:cd:03:
                    34:79:c2:42:f3:9b:5e:3d:a0:9a:15:65:e0:66:98:
                    fc:d0:58:af:39:c9:ff:38:b0:8d:2d:d5:25:13:81:
                    ac:01:e3:e3:36:79:11:de:ac:67:54:76:22:eb:65:
                    53:97:ac:11:fe:2a:bd:5d:b7:9b:ee:36:06:f2:ce:
                    66:2b:bf:6f:d6:2a:bd:e8:c5:95:18:ca:05:c1:03:
                    7f:eb:18:52:8a:0c:89:4a:00:4a:cd:45:95:d5:fe:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:73:FD:C6:FB:7A:89:C9:2B:A7:C0:B2:58:97:F4:40:3B:D0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:33:7d:c4:b5:2e:48:a3:8a:8c:bd:a7:b2:be:d9:9a:c4:f8:
         f2:51:e4:47:5e:4e:8f:17:75:4d:da:a0:e2:f2:5b:8b:db:7e:
         0d:4d:3b:40:ea:b5:54:24:6e:ac:ce:a7:99:63:1f:45:ea:06:
         39:12:57:40:48:2e:7d:ab:f8:f3:bc:69:f0:04:02:1b:ee:d3:
         bc:60:12:33:a3:64:89:1f:8b:d6:ad:24:70:c7:96:4e:e7:77:
         38:e9:23:95:b0:02:70:6f:b1:62:21:c7:7d:5f:67:5a:2f:06:
         77:5c:e3:6e:53:d6:ed:d2:bf:f5:f0:ae:cb:dc:3f:7b:ba:cf:
         c6:dd:14:0e:06:61:7b:83:46:f4:61:e8:ed:84:02:37:3d:33:
         9f:cc:e0:3c:c6:fa:3d:0c:74:75:f4:0c:c7:47:24:78:cc:ab:
         76:31:75:5d:32:0a:12:03:00:dc:51:ec:51:bd:b7:68:f0:02:
         4c:93:04:60:fa:d5:e6:98:d4:dc:e9:7f:a3:1d:cd:e6:3c:8f:
         cc:b9:50:ed:c2:e1:a8:57:3a:65:1e:40:c6:c3:59:01:5a:ff:
         b6:88:0e:4f:50:b1:a3:4c:0a:18:a0:ab:92:3a:5b:72:d6:e6:
         2a:a9:35:c1:f1:f1:36:c2:d7:b2:8d:a0:ad:49:fc:31:86:6b:
         4f:6d:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:21:53 2025 by rpki-client