Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7e8669c5-2c92-3d5b-b198-b1542d189d93.roa
File:                     7e8669c5-2c92-3d5b-b198-b1542d189d93.roa (raw, json)
Hash identifier:          +M1+1s21HADWJbvoXS8GMiSjxRrihZ0hUp0I7JjUT1Q=
Subject key identifier:   69:49:58:DE:26:7A:AA:C7:C6:3D:0F:DC:FE:8C:F9:9B:59:42:10:D6
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D2BD9FF8C49F5FAF9A05CFAC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7e8669c5-2c92-3d5b-b198-b1542d189d93.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     10753
IP address blocks:        140.228.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:d9:ff:8c:49:f5:fa:f9:a0:5c:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=a5e871b0-2403-4031-a93e-3063b04e9f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:74:1a:a3:ae:7a:dd:ba:c0:f9:b8:71:27:
                    18:a9:da:46:0b:34:a2:14:d7:18:d8:f7:3a:c7:dd:
                    44:79:16:b4:39:86:1a:eb:f9:e4:98:78:52:27:5f:
                    e4:bf:0e:97:6a:9c:b9:77:32:03:95:71:1d:d0:16:
                    b6:d2:4c:25:7b:07:9e:51:ad:6f:59:db:cd:2c:96:
                    21:e9:c6:66:38:a9:8a:dd:a4:66:f8:7d:f6:fb:6b:
                    08:62:82:c0:2d:50:a2:62:b4:8e:9c:44:28:f0:f6:
                    26:54:41:f4:e0:8c:23:3d:c7:4c:3e:ff:53:57:00:
                    e3:fb:5f:92:be:be:71:6b:55:ca:48:9c:7b:88:f9:
                    a8:63:e2:f2:c5:32:26:b2:09:3e:a3:18:c1:00:16:
                    f4:24:dc:1e:6b:2f:79:fa:86:5f:51:96:18:4a:0a:
                    4c:36:cf:57:d7:83:9d:3a:71:92:45:13:25:06:07:
                    27:6b:18:a3:ca:55:f1:a5:31:5e:06:5c:8c:41:d5:
                    65:b6:39:87:ef:07:35:c8:34:80:b3:19:bc:bd:c6:
                    d0:6b:82:8a:f2:2a:b9:80:c2:d3:5d:3b:ea:b9:32:
                    47:43:ff:73:6a:71:bb:78:b8:f7:3b:05:da:c7:53:
                    ca:66:55:ab:0d:37:2c:44:c9:d4:1e:22:2b:66:ea:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:58:DE:26:7A:AA:C7:C6:3D:0F:DC:FE:8C:F9:9B:59:42:10:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7e8669c5-2c92-3d5b-b198-b1542d189d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:32:a8:d4:dc:70:eb:f5:39:f5:cc:7d:44:53:4a:5c:64:
         f5:28:0f:71:f3:df:6d:bc:5b:df:f8:ed:cc:2a:ef:5d:e9:33:
         46:62:07:f9:db:5b:58:52:96:1d:ad:f4:35:22:02:7d:4d:d2:
         e8:c7:2b:5a:1d:2e:3f:da:65:bf:14:49:3a:c7:c2:ad:a1:3a:
         6f:9b:25:ad:7d:da:59:fd:ac:57:53:df:41:48:4b:66:06:2d:
         3b:98:08:0a:8e:0b:30:9e:b6:e4:9e:9c:f6:b6:84:a6:c2:95:
         f4:d3:bb:26:f0:cb:86:51:61:87:cb:6b:fb:81:5c:85:47:9a:
         b9:66:93:03:d7:9a:e9:ad:5c:8f:e1:8b:05:2a:91:c0:6d:ba:
         cd:4c:42:c6:dc:1e:ad:68:83:fe:b3:17:31:7f:9b:e2:0f:f3:
         81:e0:3d:c0:bc:7b:e9:f6:37:68:6a:c5:c4:a8:98:fd:65:28:
         46:0b:98:eb:57:13:8e:58:23:37:22:65:ff:8b:59:a0:a6:5c:
         5d:4b:7f:fb:2a:f4:0b:4b:2c:79:8f:b9:a0:8e:f8:7c:73:d9:
         4b:ba:5c:79:8d:fb:c7:27:b8:1d:50:0d:4f:06:0f:37:3f:69:
         86:1c:30:8e:dc:9c:cd:59:c7:1f:c7:1c:68:40:2e:e8:66:d6:
         86:82:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:04 2026 by rpki-client