Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa
File:                     19990b9e-a7ee-3373-9416-e00b1e3c189c.roa (raw, json)
Hash identifier:          KhuTT5IYLnLMKYh0lv+XoSxHZTu4xRqzK6HR/1t9D/8=
Subject key identifier:   17:8C:F5:78:12:72:DA:3D:73:BD:68:9D:BC:27:A2:3A:A6:1F:9F:CF
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584B7F5209E3AB167542FC365180
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     32346
IP address blocks:        140.235.9.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:09:e3:ab:16:75:42:fc:36:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=fa276b4e-086b-4c99-bb48-40dda517b660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:c8:51:08:b2:f0:8b:04:43:d5:55:7a:8c:
                    23:7b:29:79:da:4f:6a:c7:c5:a8:45:99:f1:91:c9:
                    0e:b4:94:e4:84:29:6b:08:b6:2e:a4:b7:3d:a8:37:
                    42:a8:ec:64:3f:6f:80:65:7f:41:0b:d9:4a:03:32:
                    ba:2b:40:f2:31:67:c4:f6:50:06:9d:ee:9d:f4:10:
                    2c:5f:a4:03:6b:6d:e5:81:e3:c4:a4:2c:15:cb:95:
                    35:6d:70:46:c5:1d:8c:e2:bf:11:20:c7:65:f3:08:
                    47:d6:4d:6e:79:c0:a7:0e:ab:f2:cb:73:aa:ce:a1:
                    8b:91:ea:b9:b4:45:d9:7d:48:b3:54:44:28:f2:50:
                    69:8e:99:95:01:0e:d4:16:18:9a:f9:d2:26:bb:a8:
                    93:30:0b:a8:41:68:3f:7e:ca:1e:b1:d3:f6:6d:19:
                    ae:ef:c5:df:12:81:55:1e:f7:dc:7e:60:ce:eb:7f:
                    4d:3e:65:35:55:69:b5:a8:b0:c5:3b:ca:b9:93:c4:
                    41:1d:49:7b:e0:9e:65:33:60:29:7a:76:aa:26:d1:
                    67:1c:79:86:b9:b0:1c:f1:3e:70:51:a9:21:94:cc:
                    89:62:09:dc:ca:a8:d0:19:f6:a5:b4:f8:99:43:a0:
                    0e:37:bc:03:c5:be:15:53:1b:46:0e:16:74:2e:1c:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8C:F5:78:12:72:DA:3D:73:BD:68:9D:BC:27:A2:3A:A6:1F:9F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7c:69:47:c2:f8:4d:d1:91:1c:1e:ce:e5:97:45:c9:a9:77:
         30:3a:22:41:ed:27:d5:74:99:8a:43:aa:fb:74:4b:ee:08:be:
         53:b2:31:4e:e9:9f:9c:f1:60:07:0f:19:0e:b4:b0:7d:02:68:
         db:ed:b6:ce:8f:5c:52:07:f3:26:f1:71:07:ca:a4:81:3c:5a:
         b2:60:89:a1:cc:c2:0c:48:1c:31:ee:77:dc:4e:db:e6:6c:2e:
         fd:48:db:7c:7b:ea:9a:57:57:99:f6:7a:3d:b0:55:9d:46:31:
         7b:c6:4a:e4:f0:42:9a:d0:b2:ea:2e:6b:b6:3a:ff:92:07:1d:
         6d:07:67:83:68:c0:30:b0:1b:b3:71:96:08:d1:90:10:1a:df:
         28:c3:18:ab:34:c6:fa:29:1e:65:5c:f0:53:ee:f0:50:95:61:
         51:d7:4a:34:35:b8:ff:79:0d:35:b4:0a:84:8a:3a:70:8a:51:
         1e:49:ec:a3:34:fc:09:fe:c6:d0:58:51:a6:53:a7:63:5c:4d:
         74:b7:b0:8c:5f:6e:84:ac:d0:26:1e:8b:63:04:e5:01:59:41:
         17:4e:af:85:9f:1e:ab:14:7b:fa:b4:23:2e:38:db:16:37:50:
         fc:1b:d0:4d:1a:4d:ea:bd:1d:a8:7f:74:cc:28:f5:e0:32:e7:
         9d:39:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:12:39 2025 by rpki-client