Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/22423f2a-e8ec-343c-9b73-caee86fb75cf.roa
File:                     22423f2a-e8ec-343c-9b73-caee86fb75cf.roa (raw, json)
Hash identifier:          E3QDlF/TH/ukTYKi0uF1YLyk/Z1yFb6mmKbrq5rD5IM=
Subject key identifier:   A5:FD:EB:80:AB:E2:5B:0B:6F:57:06:80:B4:D4:23:E6:49:E8:AC:C2
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584FBD6BBDB3038D1B8496AC2280
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/22423f2a-e8ec-343c-9b73-caee86fb75cf.roa
Signing time:             Thu 05 Nov 2026 14:00:14 +0000
ROA not before:           Thu 05 Nov 2026 14:00:14 +0000
ROA not after:            Wed 03 Feb 2027 14:00:14 +0000
asID:                     10753
IP address blocks:        141.140.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:bd:6b:bd:b3:03:8d:1b:84:96:ac:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Nov  5 14:00:14 2026 GMT
            Not After : Feb  3 14:00:14 2027 GMT
        Subject: CN=887d5753-bd21-4925-97cb-c594236b2ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:06:b9:a9:db:be:5b:73:6a:4d:0e:9a:e7:
                    dd:ca:a5:e6:c6:ec:e4:5f:75:43:14:ec:85:13:82:
                    22:a9:2d:aa:18:88:17:1d:a3:2a:ff:50:d8:c8:9b:
                    26:11:72:ed:27:10:8f:53:00:37:70:fd:68:2b:7f:
                    9c:e5:68:31:28:ff:9b:25:99:5a:f8:c4:67:cd:ae:
                    8d:a4:0e:da:c9:a9:86:09:f5:f3:9d:2c:6f:f8:fb:
                    e5:f7:b9:93:82:48:f0:71:2c:b9:3f:7b:37:4c:06:
                    cf:e7:01:97:4b:6c:43:71:a3:65:41:47:47:91:d2:
                    52:07:fc:ec:dd:51:42:5d:70:1c:25:b6:2a:33:e0:
                    a9:60:1d:64:c0:73:9c:6d:c0:20:ef:6f:28:05:c5:
                    dd:9d:04:fb:b6:54:2e:84:f8:a5:cd:0a:b8:4f:04:
                    e7:49:e5:dc:8a:e6:4c:fa:32:9f:15:bd:74:19:42:
                    e4:4a:27:55:e6:05:cf:ea:54:c0:cd:30:3c:59:0c:
                    71:f2:01:58:b5:6a:01:87:cb:3d:4b:4d:d7:14:d4:
                    77:05:35:7b:93:cd:3e:4f:a5:59:31:79:dc:90:16:
                    2b:4c:cd:bb:2f:a7:09:91:6b:f2:78:a4:94:7b:23:
                    c2:ab:a0:3f:36:c0:0e:b6:73:a1:2f:06:4c:78:49:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:EB:80:AB:E2:5B:0B:6F:57:06:80:B4:D4:23:E6:49:E8:AC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/22423f2a-e8ec-343c-9b73-caee86fb75cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:0c:b6:47:bf:78:d8:1a:b0:eb:d4:a8:b0:77:7c:af:cc:
         ed:1d:ed:b0:3a:ca:53:5b:98:a8:8b:7b:d4:e9:1f:78:4c:85:
         5d:71:33:59:33:33:5c:33:ec:4f:82:1d:fa:37:78:37:0b:7c:
         f7:57:db:c5:bc:2e:b7:cd:b4:d4:06:95:5f:80:0c:9c:93:1b:
         99:10:24:90:0f:58:e3:19:13:4c:32:b0:f5:18:7e:80:42:4f:
         d1:1b:63:16:a8:27:6a:b6:e8:05:4d:1c:a5:ae:9d:d4:6e:46:
         f5:8c:05:90:1b:e1:e3:51:9c:b3:3c:bf:4d:25:98:7c:21:48:
         39:f7:20:55:1b:9d:dd:84:06:8e:7d:76:24:ae:7d:b9:10:dd:
         51:31:87:78:94:1b:8d:01:5d:00:82:c3:a8:3d:d6:11:52:ba:
         30:1b:9c:73:95:39:43:11:41:1a:2d:60:22:e0:f2:04:ea:84:
         92:e1:50:ab:6c:d8:7b:f9:26:58:cc:72:e1:bf:a8:c7:1c:67:
         d0:b2:84:da:9e:31:38:1d:02:d9:21:87:d4:7b:22:7a:10:9a:
         50:ea:ae:38:b6:55:69:f2:c8:6b:d5:78:22:2d:55:9e:ce:59:
         0a:c9:86:18:89:ed:9d:e9:1d:38:d4:6a:1c:f1:1b:91:4a:8a:
         c2:54:3f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:26 2026 by rpki-client