Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/eda24f9f-3a82-38d2-b5ef-39dd2aaf8ce1.roa
File:                     eda24f9f-3a82-38d2-b5ef-39dd2aaf8ce1.roa (raw, json)
Hash identifier:          BEqB1urPZ5HJLSDx9+GzwIGe1S2lHjzmpllajCTjSiQ=
Subject key identifier:   09:0F:11:36:39:8A:E1:30:C6:21:D7:A7:63:7B:67:9A:56:4E:2B:B0
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584DA6B034EA2162FB86BF5844C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/eda24f9f-3a82-38d2-b5ef-39dd2aaf8ce1.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     3561
IP address blocks:        140.228.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:34:ea:21:62:fb:86:bf:58:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=1bf47018-ac9d-44ed-a6cd-7ae426841446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:8b:d3:32:a4:86:c5:93:ae:50:4a:d0:c1:
                    32:f7:87:eb:04:c8:5c:44:31:6d:e7:be:a3:4f:a3:
                    8a:bc:f9:f0:99:56:58:8b:b9:4b:fa:b9:bd:5f:e0:
                    e6:c0:35:56:86:32:82:bf:08:fb:7c:d1:3b:99:28:
                    81:6b:a2:05:45:df:01:c0:4f:be:fe:83:2e:32:78:
                    e8:5a:db:82:d4:47:7a:39:1c:9b:6d:93:9d:40:04:
                    df:90:56:1c:32:c5:c1:75:93:0f:8f:0b:59:4e:80:
                    30:7b:c4:a5:f9:b0:12:2e:68:d1:25:ec:5f:69:80:
                    67:db:60:75:67:17:d6:0a:a8:4e:69:17:7d:30:85:
                    0f:0e:55:7a:bc:3a:aa:a7:44:3d:e3:a9:f7:09:e1:
                    e4:34:57:c7:c3:aa:e1:a3:98:7a:ec:e5:d9:8b:a7:
                    9a:cf:e6:17:bd:89:a3:ed:1b:67:12:1c:74:0c:f9:
                    e8:df:8a:f8:cd:a7:c9:2d:6b:e5:4a:f2:45:1c:b7:
                    e9:5e:f1:cc:91:d8:c6:16:ca:45:1f:9d:26:04:5f:
                    2d:ad:27:b7:c8:54:0e:be:ca:7a:3c:b6:9d:c5:6c:
                    71:2b:cc:b1:65:c2:63:32:fa:29:1d:7a:8f:ed:89:
                    26:5a:ca:ba:df:e2:ed:48:87:8d:bb:75:82:14:31:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0F:11:36:39:8A:E1:30:C6:21:D7:A7:63:7B:67:9A:56:4E:2B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/eda24f9f-3a82-38d2-b5ef-39dd2aaf8ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:cf:ca:8a:11:c1:d8:52:c3:b1:8c:3f:0d:0f:6d:7b:cc:
         bb:20:85:e3:36:ba:32:7b:ea:c2:38:93:ed:c8:b9:f2:90:3f:
         d9:ba:d8:a4:c1:8b:fa:52:ed:fd:48:5b:fd:cd:8e:f2:b7:8f:
         21:b9:2b:92:b3:64:14:d8:6c:14:69:f0:fa:67:32:fb:af:a4:
         84:0f:62:35:58:eb:da:4a:a1:38:7f:df:b0:e3:be:e2:fe:39:
         d5:bc:2b:83:e5:9f:0f:bf:ab:ee:85:aa:38:68:ea:70:92:a2:
         70:ab:fd:90:79:74:1a:d0:05:99:e5:84:9c:93:69:78:80:6a:
         6d:4f:82:e3:9a:c8:64:74:7c:1e:87:2b:d0:b9:c1:c4:c6:57:
         45:94:49:0f:df:dc:c2:3a:97:9f:03:e3:bc:c9:38:62:fb:cc:
         2e:4b:be:a3:d6:8e:04:dc:7e:9f:bd:d0:31:71:c2:35:66:f1:
         e0:1d:26:86:f7:70:e8:06:7f:35:bc:4f:70:0b:21:96:4e:35:
         e2:5f:20:ba:eb:ae:e9:88:27:2b:76:10:75:9e:22:e8:c7:96:
         df:2b:3d:fc:e4:87:04:4f:37:03:fb:71:9e:2d:85:66:23:24:
         e7:df:2f:4d:5f:cb:22:e7:0b:f4:fd:21:ff:85:5d:fd:fb:9f:
         ed:09:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:43 2026 by rpki-client