Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/e8971827-03b8-3a83-a866-197e29a5e189.roa
File:                     e8971827-03b8-3a83-a866-197e29a5e189.roa (raw, json)
Hash identifier:          SOoVk8Mie2ZKBf1lJ7tVCs3xR1bKnvFrMrqN+UKTbqo=
Subject key identifier:   14:08:2E:15:84:10:91:2E:4E:20:F2:3E:C7:6B:AA:A5:F0:38:3C:11
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584F498A2095316BF5ED3E3D0340
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/e8971827-03b8-3a83-a866-197e29a5e189.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399122
IP address blocks:        140.235.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:20:95:31:6b:f5:ed:3e:3d:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cc515709-375a-40c6-9214-70241e77955b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:3b:db:15:9f:28:79:fe:b8:ce:92:28:01:
                    ac:31:29:ec:ba:4c:57:8e:72:53:88:f1:86:8e:44:
                    72:df:55:cf:9b:fa:d8:56:21:33:70:ba:7e:e7:77:
                    0f:e1:67:71:f2:7f:32:72:c1:80:03:3c:7e:6c:0d:
                    c4:60:13:82:61:f2:b7:37:2c:d2:22:88:81:59:93:
                    ee:28:ed:87:13:a7:71:b5:8c:dc:83:0c:80:02:5b:
                    42:5e:ee:f3:0a:17:d4:6c:cf:e9:60:95:97:ea:84:
                    0d:cc:1e:6d:9e:5d:1d:73:74:0a:ec:47:d2:4c:aa:
                    14:c3:e7:e0:e9:c4:32:3e:89:91:b9:66:7b:76:ec:
                    c4:65:d7:0c:fb:d2:c7:6e:d5:2d:a4:a9:2e:42:00:
                    00:6f:80:04:f3:09:8a:40:ae:54:cb:36:22:e0:46:
                    19:fd:2c:83:1a:63:ae:e6:08:f9:f7:90:82:1b:a7:
                    7c:d4:09:bd:c1:34:95:10:c5:d3:df:cb:28:0d:64:
                    b8:5b:99:0d:b8:29:51:68:a0:f9:65:ad:7c:40:8a:
                    24:f7:5f:39:9e:98:91:c4:0e:f1:11:cb:39:5d:ad:
                    2a:76:69:d3:2a:89:34:06:f8:a8:31:74:31:3c:e9:
                    3a:c2:ac:e4:76:b6:80:55:14:9a:29:9a:7a:d5:db:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:08:2E:15:84:10:91:2E:4E:20:F2:3E:C7:6B:AA:A5:F0:38:3C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/e8971827-03b8-3a83-a866-197e29a5e189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:41:c1:6d:dc:58:f4:ae:0e:73:f9:3f:72:a9:b2:0c:7c:d9:
         d1:1d:6d:5f:44:f3:a4:13:72:c3:43:6e:d0:e1:49:f1:66:fd:
         24:07:36:d0:73:8a:20:84:d1:28:32:f3:df:91:87:d1:d5:f8:
         35:23:70:a4:c0:a0:83:1c:b6:c4:32:d6:7a:e7:1f:37:f9:7d:
         a3:7a:99:98:e4:0d:d3:21:91:2e:6b:65:0a:79:7c:33:90:47:
         14:64:4c:af:df:c1:26:77:51:25:6a:2e:f0:4b:ff:34:ba:3a:
         e4:5d:16:40:b1:d7:48:a7:d9:74:10:28:78:7d:75:f5:bd:c4:
         44:08:32:61:7e:80:ff:59:6f:df:99:c7:76:a5:f9:7c:05:69:
         3d:8e:f9:c5:53:f4:60:81:df:d7:96:ed:98:f0:83:a6:8f:16:
         a4:d2:8f:f7:78:f2:c1:cb:98:bd:10:d3:59:0b:6b:56:2e:63:
         0a:c0:af:9c:e1:52:ba:4b:b6:3d:11:2d:5c:82:a1:96:90:30:
         fb:85:5e:ee:46:68:3a:29:f9:ca:75:c6:97:45:ee:ce:23:f4:
         4a:e2:56:42:06:a8:f5:95:23:d8:17:7d:40:22:ee:41:19:4e:
         25:cf:83:30:06:b6:0f:1f:01:b2:14:2a:05:b4:b4:6b:33:c4:
         c0:5a:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:36:16 2026 by rpki-client