Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa
File:                     1f9399f9-8607-3d69-88f2-92f70bb947b8.roa (raw, json)
Hash identifier:          2bGYxW5uVwnsUCv3dLkgJT6p9gSdYoPSysQdBvpNbgk=
Subject key identifier:   81:33:63:96:B9:38:6D:E1:D7:9F:0E:5B:3C:F4:CF:C0:84:E5:02:A4
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584F4973BA41B460A7714E21AC80
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14340
IP address blocks:        140.190.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ba:41:b4:60:a7:71:4e:21:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1ecc2b8f-4093-48e9-8fd2-c424f2a73dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:3c:de:e5:c3:c4:0c:97:00:26:b7:d6:d5:
                    33:48:35:e7:38:85:1e:40:74:20:d0:02:a5:3e:09:
                    28:3c:bf:14:54:40:a0:16:6a:29:c5:85:6b:27:fe:
                    32:0a:8a:d3:ba:cf:77:2e:75:67:7f:c6:06:a6:23:
                    f2:68:18:4c:93:00:15:c9:af:8d:3d:47:df:e9:ee:
                    53:61:de:fd:2a:c9:e7:01:ab:ef:cd:92:91:5a:12:
                    d0:c8:a3:fb:72:e0:52:14:1d:64:83:a6:f9:e7:f8:
                    b7:4c:1d:6b:01:c6:22:90:f7:50:3f:5a:0d:f2:f7:
                    7d:ec:61:1c:f8:6f:5b:4e:af:24:57:36:13:7e:0f:
                    e8:05:e8:98:6d:b1:39:70:25:ca:09:1b:52:23:8c:
                    ae:c5:46:69:3f:7d:6e:75:77:45:04:8f:8e:42:f7:
                    66:a8:03:d2:86:f0:74:0e:d8:d0:a5:0f:a3:2b:5e:
                    ec:5e:40:f0:48:12:0a:f1:51:73:f5:9a:d2:b3:9f:
                    b2:e4:0b:0e:0c:b0:06:27:3d:77:a5:18:69:13:34:
                    eb:b7:9a:65:d3:24:55:ea:7d:08:86:7b:f5:83:9d:
                    02:74:89:fd:11:18:ac:23:0c:08:89:8c:27:52:d4:
                    8f:28:1e:2b:03:6d:76:88:c6:44:5d:24:3f:23:0e:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:33:63:96:B9:38:6D:E1:D7:9F:0E:5B:3C:F4:CF:C0:84:E5:02:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.190.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:87:9b:11:78:ef:0c:c0:54:4c:44:08:ba:08:67:23:5b:6b:
         16:db:4d:33:10:db:27:62:ef:ef:fd:7c:62:f9:2c:be:8b:9b:
         27:80:1f:45:fd:8b:a1:af:d8:e5:06:c0:f6:ea:e7:f5:6b:b7:
         52:e7:49:69:7f:ce:36:fc:69:d2:e3:c7:c9:09:74:d8:73:85:
         68:e4:26:02:44:99:47:20:ab:db:05:b0:be:27:57:69:a7:ff:
         16:a7:bf:d2:bf:ac:bd:0c:8a:ea:c8:3f:92:90:9d:e0:5e:e0:
         17:62:56:ad:3a:85:fb:0b:65:13:df:05:53:8a:9a:89:36:ca:
         43:b4:9e:5f:75:45:ec:69:6a:b1:c5:3e:5e:c3:05:d5:0e:70:
         c8:84:ea:a6:ef:23:1b:3a:15:a8:a4:e4:c1:c3:c1:0a:51:ee:
         3e:33:54:22:c3:2f:37:c1:38:c7:c1:ea:ac:80:57:ae:eb:1d:
         8a:35:0d:68:e2:6a:72:86:80:e1:96:88:a2:8b:50:4f:f9:7f:
         03:9a:bb:b4:52:e0:6f:49:a0:5a:80:b0:f8:78:38:54:69:a8:
         91:2b:a4:a9:d9:d6:9c:2f:ec:dd:29:46:26:fd:9c:bc:4f:67:
         44:b9:90:83:3c:2f:db:0e:98:68:85:b7:ba:e6:c7:0e:51:36:
         6c:52:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:35:24 2026 by rpki-client