Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/df86681f-bee9-3581-a5c1-ecf2eefa4954.roa
File:                     df86681f-bee9-3581-a5c1-ecf2eefa4954.roa (raw, json)
Hash identifier:          xpnQvgb+87DJHgmrYb9g+XGSmAtGWQOXjgLRpULyaYU=
Subject key identifier:   58:91:E5:0D:D1:FA:97:B0:8D:4D:79:2A:8D:BF:6C:92:04:39:CE:D2
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584DC29AEC4A9DE31DD16BD1DD80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/df86681f-bee9-3581-a5c1-ecf2eefa4954.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     62616
IP address blocks:        140.174.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:ec:4a:9d:e3:1d:d1:6b:d1:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=2e26d64a-3549-489c-8545-6dc8f10f2060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:03:2a:57:ac:17:3d:1c:e9:35:20:9f:0e:
                    77:64:03:01:7f:86:37:fd:3e:b2:e7:82:42:f2:db:
                    ce:93:ff:e1:74:14:90:8f:b5:73:84:62:ed:19:94:
                    f0:ab:d1:f6:d7:94:b2:d1:34:3d:a2:fb:9f:e4:a4:
                    3a:63:24:85:c3:6a:d1:a5:5f:23:d9:3b:06:05:65:
                    75:f2:03:93:5d:66:12:51:a5:5d:a3:e0:27:8d:01:
                    a2:a7:46:48:3a:d7:8e:dd:b8:11:ff:2f:9f:66:cb:
                    9c:97:9e:ac:87:43:86:a8:02:fe:f9:fa:43:f4:47:
                    45:60:9c:4a:63:43:83:36:75:34:2f:70:7a:71:b2:
                    0a:e8:39:8e:08:84:68:49:0e:47:e1:64:75:a3:44:
                    2d:43:42:5c:6e:eb:13:8c:c0:b9:50:fb:ae:b9:7a:
                    54:86:26:11:db:42:56:2e:73:30:38:58:7b:fd:c2:
                    c7:95:1a:f0:26:0d:8f:e6:aa:26:1b:ce:82:19:3a:
                    7b:56:e9:f9:c8:2e:b2:e5:ce:ba:22:25:b9:98:6b:
                    56:87:24:62:79:87:0c:9d:5b:80:2a:46:d7:49:2e:
                    1c:39:22:83:50:73:55:9c:71:98:36:a6:26:a8:2c:
                    79:bc:37:e9:a6:20:b8:a9:f5:0c:c2:6c:b5:f5:ac:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:91:E5:0D:D1:FA:97:B0:8D:4D:79:2A:8D:BF:6C:92:04:39:CE:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/df86681f-bee9-3581-a5c1-ecf2eefa4954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:ef:ed:81:ba:49:a9:9e:f5:f8:75:f4:64:43:e4:fe:c6:
         fe:3c:86:47:e6:56:e1:c4:29:4e:be:8a:91:bf:00:06:d1:79:
         db:a0:58:e9:0f:e2:33:9b:e0:4b:b7:b0:9b:bc:24:13:bd:8d:
         f3:b8:09:b2:b9:c0:55:0e:b0:ed:71:82:19:a6:af:0a:40:27:
         ec:69:a8:6b:f7:4d:b3:35:9b:dd:d6:44:8f:44:1e:f1:72:30:
         6f:d5:d8:13:c2:bb:08:a8:2b:57:03:b7:d5:e0:ac:b9:b7:7f:
         15:d9:82:ef:b4:d3:a4:4c:b7:19:73:05:b9:f7:1a:f1:07:db:
         e1:20:2d:f1:84:fb:00:be:aa:e0:3c:de:36:c1:8f:86:2c:c3:
         de:4a:cb:85:c1:14:05:78:cd:43:fb:8a:45:32:a4:f8:e9:6c:
         c2:f1:8a:81:70:ba:75:6b:14:e2:e9:55:89:80:4b:55:96:88:
         74:73:8e:39:42:d5:7f:4d:90:f6:75:9e:e6:b8:cf:32:a9:26:
         98:87:bf:2b:83:d7:d1:17:da:1e:ab:ab:2a:f7:db:94:65:2e:
         7f:70:42:6e:84:6a:83:73:9f:88:e0:8d:ac:97:1c:b8:0a:ef:
         6f:38:42:cb:b2:ed:77:12:1f:c1:e6:c4:ec:a7:5b:52:21:09:
         20:39:62:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuxKneMd0WvR3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
MmUyNmQ2NGEtMzU0OS00ODljLTg1NDUtNmRjOGYxMGYyMDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO0DKlesFz0c6TUgnw53ZAMBf4Y3/T6y54JC
8tvOk//hdBSQj7VzhGLtGZTwq9H215Sy0TQ9ovuf5KQ6YySFw2rRpV8j2TsGBWV1
8gOTXWYSUaVdo+AnjQGip0ZIOteO3bgR/y+fZsucl56sh0OGqAL++fpD9EdFYJxK
Y0ODNnU0L3B6cbIK6DmOCIRoSQ5H4WR1o0QtQ0JcbusTjMC5UPuuuXpUhiYR20JW
LnMwOFh7/cLHlRrwJg2P5qomG86CGTp7Vun5yC6y5c66IiW5mGtWhyRieYcMnVuA
KkbXSS4cOSKDUHNVnHGYNqYmqCx5vDfppiC4qfUMwmy19azuLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiR5Q3R+pewjU15Ko2/bJIEOc7SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGY4NjY4MWYtYmVlOS0z
NTgxLWE1YzEtZWNmMmVlZmE0OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK7qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlO7+2BukmpnvX4dfRkQ+T+xv48hkfmVuHEKU6+ipG/AAbRedugWOkP
4jOb4Eu3sJu8JBO9jfO4CbK5wFUOsO1xghmmrwpAJ+xpqGv3TbM1m93WRI9EHvFy
MG/V2BPCuwioK1cDt9XgrLm3fxXZgu+006RMtxlzBbn3GvEH2+EgLfGE+wC+quA8
3jbBj4Ysw95Ky4XBFAV4zUP7ikUypPjpbMLxioFwunVrFOLpVYmAS1WWiHRzjjlC
1X9NkPZ1nua4zzKpJpiHvyuD19EX2h6rqyr325RlLn9wQm6EaoNzn4jgjayXHLgK
7284Qsuy7XcSH8HmxOynW1IhCSA5Yng=
-----END CERTIFICATE-----
Generated at Wed May 13 08:22:05 2026 by rpki-client