Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa
File:                     017a6557-62d6-3351-a77b-bc0a23b230d3.roa (raw, json)
Hash identifier:          jXuNBtB51ao7L3oCPgombtj+D+U+aUZzpmAaeRP4908=
Subject key identifier:   30:5C:17:0F:2B:F9:DD:C9:BF:B1:5F:1F:3B:0C:9A:06:8A:CC:3E:DF
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584F119D1A99383DC5636940DC00
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     1742
IP address blocks:        140.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:1a:99:38:3d:c5:63:69:40:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9061219b-8845-4c12-8ccb-b2a0437f34af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:9b:8a:8a:1c:89:79:b5:cf:7e:86:08:4f:
                    e4:76:b6:44:1d:b5:62:3e:e4:60:28:52:14:1a:74:
                    be:a2:f1:90:42:f5:85:4f:8e:fc:d0:b9:9e:df:9c:
                    f7:55:7c:11:35:da:f8:0f:42:a9:35:5c:e2:ce:48:
                    9f:8c:a5:29:d0:47:a5:e1:5a:27:8e:87:e6:07:d2:
                    02:ed:3e:b9:24:2c:a2:e6:17:18:9a:9e:f8:ce:86:
                    04:28:b3:33:56:d2:d9:d5:9a:26:c8:6f:18:28:f2:
                    ae:27:35:c2:df:a0:01:5e:cc:94:76:78:5a:04:3e:
                    41:a0:bf:55:01:2f:82:1c:5c:e7:24:85:d8:f4:a9:
                    6e:18:9d:61:0d:99:1c:1e:22:0a:de:80:52:4b:ca:
                    36:e7:5a:e4:88:d9:a5:73:ee:23:ee:61:65:cb:0b:
                    93:7a:af:57:8f:ab:c5:a5:74:e5:df:c6:dc:ae:08:
                    f2:76:00:f6:ae:d8:30:06:8f:3b:1b:42:68:ba:c1:
                    01:5b:2d:cb:71:ae:d5:a0:71:de:62:64:2e:ba:74:
                    17:ec:da:06:40:23:46:20:b3:8b:14:88:30:3f:a7:
                    8f:90:b0:ec:30:e3:84:cd:6d:28:2b:c4:c0:9b:30:
                    c2:ee:6a:9e:8b:72:aa:c7:99:8b:c5:a3:3c:aa:ab:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5C:17:0F:2B:F9:DD:C9:BF:B1:5F:1F:3B:0C:9A:06:8A:CC:3E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0e:c2:d4:56:d9:49:fe:15:5f:c4:7d:65:db:58:ea:71:92:
         f3:27:f2:35:f2:fc:c0:f7:0a:d9:fc:1b:5f:d7:da:41:4e:a7:
         05:dd:c0:14:5c:45:48:34:3e:c0:4c:59:8f:5b:60:f1:24:d0:
         18:c3:c4:c2:c6:88:ab:53:ef:6a:cd:14:d1:a3:a0:01:bb:87:
         a4:d4:9e:7c:25:d3:cc:d0:2f:a4:5b:1b:67:00:d7:13:16:53:
         f9:9a:89:f3:f0:79:c6:fb:d2:40:c2:3e:3d:3c:b8:b9:cf:f1:
         04:39:4e:7c:9a:77:1a:6d:2b:63:5d:70:ee:ec:3b:8f:1a:24:
         37:fd:ad:ff:6d:6a:76:26:cb:e9:19:37:ef:14:c0:84:1b:16:
         92:1b:90:94:71:a8:64:f7:78:d4:64:25:44:83:e6:b4:de:73:
         64:6e:16:c5:4a:6f:d4:a8:09:01:17:36:69:8b:45:91:a9:3c:
         d6:75:0b:04:05:0f:48:bd:5c:a1:81:96:99:11:77:40:f2:62:
         5e:b5:25:6d:17:29:50:7e:3c:0d:db:5f:ab:8f:15:39:de:a9:
         9b:bb:30:48:23:bd:38:ac:ef:4f:e0:cf:08:48:03:f1:70:c2:
         13:13:88:89:8f:c7:9c:e6:61:2d:47:c8:9c:40:9a:e2:47:43:
         f3:d1:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:06:06 2026 by rpki-client