Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/5c8dccef-ff4c-3869-8672-a2365599f313.roa
File:                     5c8dccef-ff4c-3869-8672-a2365599f313.roa (raw, json)
Hash identifier:          QGW2P0Oy3vNXK/POrOptO0K4vwrmNeF304JRyfTubhs=
Subject key identifier:   89:79:D4:BB:47:77:D3:00:FD:EF:8E:45:F0:08:60:4C:23:32:7A:11
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584B2095E6D8D5757DB432251C00
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/5c8dccef-ff4c-3869-8672-a2365599f313.roa
Signing time:             Mon 08 Sep 2025 14:35:36 +0000
ROA not before:           Mon 08 Sep 2025 14:35:36 +0000
ROA not after:            Sun 07 Dec 2025 15:35:36 +0000
asID:                     32135
IP address blocks:        140.235.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:95:e6:d8:d5:75:7d:b4:32:25:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Sep  8 14:35:36 2025 GMT
            Not After : Dec  7 15:35:36 2025 GMT
        Subject: CN=9f61945e-fed6-441c-82a7-854e0cb09cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:d9:5f:a7:c0:92:d3:4a:4c:92:b1:d1:db:
                    3b:64:93:3d:e4:a7:61:ba:6c:4b:d0:2f:d5:f7:1e:
                    c5:94:9a:98:8a:0b:de:4a:51:bc:21:1e:9a:26:20:
                    5f:6c:ee:69:d9:7d:3a:4b:3e:a3:e1:c2:1f:3f:5a:
                    7c:1f:6c:58:e5:b2:4f:1c:97:2b:29:4c:75:4c:ed:
                    b8:88:5f:da:e3:4b:96:56:f7:2b:a4:60:13:2e:01:
                    27:1c:af:48:6b:7b:d8:70:5d:56:35:37:cc:2d:3a:
                    45:aa:b2:ee:5b:60:93:cb:4d:e4:4e:bb:7c:c1:84:
                    be:4f:38:a9:f4:26:aa:01:25:d2:83:bd:62:06:3a:
                    dd:2b:35:88:af:95:9a:06:84:c5:4e:ae:cc:b3:9b:
                    bc:e7:67:4d:1e:c3:b7:07:b0:e2:36:74:35:21:ed:
                    b8:2b:6a:76:c9:0a:91:2f:3f:fe:de:dd:c4:9c:e1:
                    08:31:86:4f:a9:c5:58:92:f7:54:67:3f:2c:21:07:
                    cf:c3:db:74:fc:c0:99:93:1a:1d:ea:7c:88:6a:14:
                    b4:26:0a:23:f6:9d:f6:7a:24:0d:ec:2b:04:6e:2f:
                    fc:da:38:f9:d5:39:c8:52:ed:23:11:a6:5c:e2:2b:
                    7e:e3:e7:a4:7a:17:0c:5d:c4:24:13:69:71:3c:27:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:79:D4:BB:47:77:D3:00:FD:EF:8E:45:F0:08:60:4C:23:32:7A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/5c8dccef-ff4c-3869-8672-a2365599f313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:6f:c0:7e:fd:d9:2a:65:71:1f:b2:07:f9:15:1d:33:6f:84:
         8d:b6:da:76:7e:da:d5:70:04:11:cb:cf:4c:32:0b:87:44:f1:
         bf:8e:1d:7c:41:ef:c3:34:57:6b:9e:db:b5:01:df:56:39:46:
         f1:8d:0c:b1:a0:23:ae:73:dc:58:48:18:94:4d:62:76:21:37:
         52:63:72:b3:fd:2f:2e:8a:44:c4:24:30:ac:a3:d3:0a:bf:ca:
         1f:56:96:e5:ff:76:58:b4:f8:64:e2:f7:5a:fe:c8:4f:6c:c9:
         f8:c8:81:57:5c:ba:75:10:95:40:c5:68:57:6a:fe:b2:88:a1:
         53:cf:e9:1b:ff:2a:bd:f1:dc:13:e7:3c:e2:ed:01:e7:15:df:
         e7:94:a5:11:56:0a:90:f7:17:40:1d:7e:a4:ca:41:6a:b3:bc:
         77:86:40:73:7f:e3:f1:f8:a2:77:1b:bf:fe:65:a8:cd:1c:c9:
         99:29:c7:aa:39:c3:56:aa:44:71:ab:dc:02:49:0e:4d:b6:26:
         b8:c7:17:6f:bd:0a:15:1c:f9:68:7c:5a:fe:2c:de:91:78:7d:
         1c:5f:4a:98:ec:5c:06:f4:95:29:97:aa:50:92:72:96:f3:4e:
         4c:2b:63:cc:d4:72:ef:7e:05:9c:77:a9:7c:de:82:eb:67:b3:
         a2:fb:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:04:01 2025 by rpki-client