Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/53db4522-daa5-399b-8669-85b66fb7ab50.roa
File:                     53db4522-daa5-399b-8669-85b66fb7ab50.roa (raw, json)
Hash identifier:          Hn7hHuiEXsZwsj/F8OAW6Dh/aP6IpnKvJrOpBSEJXZk=
Subject key identifier:   9A:36:14:58:6B:6B:E0:18:89:1B:8D:8D:F1:07:B0:16:56:78:C3:70
Certificate issuer:       /CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
Certificate serial:       010D0C9F4328584F14679D3389A84E4FC11816C0
Authority key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/53db4522-daa5-399b-8669-85b66fb7ab50.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     8075
IP address blocks:        140.232.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:9d:33:89:a8:4e:4f:c1:18:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=023e2d31-17c1-4474-b2bb-be807470dd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:23:2c:8c:95:6b:4e:56:55:b0:d3:93:fe:
                    80:35:61:20:80:5e:94:e5:5d:ca:65:cc:18:ea:d7:
                    96:33:c8:ac:d0:1a:28:20:07:5b:83:93:f9:d6:4b:
                    1f:85:66:93:a9:3e:82:fc:bd:e7:87:53:15:e2:0c:
                    45:bc:9e:52:4e:25:b6:1b:e4:f8:54:bf:97:ec:da:
                    6b:0b:74:d1:78:fa:52:fe:88:e4:9a:84:ef:6f:c2:
                    4d:61:e3:ef:ce:f2:48:9e:bb:e3:11:bb:c4:94:81:
                    39:c9:9d:31:1f:d0:1f:4f:7c:eb:69:50:b5:9c:b0:
                    a9:40:dc:b6:95:16:f8:b7:c3:87:bf:a5:b5:cb:63:
                    f1:67:0e:ec:5d:2c:16:9e:10:49:32:db:3b:f5:a3:
                    42:62:f1:6f:1f:a2:60:d5:af:9b:80:24:62:e1:9a:
                    8a:4f:bd:39:7e:5b:e8:52:7d:1b:38:ae:ee:91:8b:
                    5c:8d:f4:61:ad:30:24:a9:3d:69:49:75:a6:69:da:
                    bf:02:e4:69:e6:f8:01:00:ea:63:9d:93:ae:27:74:
                    22:a1:12:b3:97:0c:55:b9:49:b6:89:c8:b9:41:ed:
                    79:df:94:09:66:ee:78:fa:b5:02:8a:da:32:5e:36:
                    d7:85:1b:36:e2:49:5d:20:d7:b7:b2:32:1d:8c:1f:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:14:58:6B:6B:E0:18:89:1B:8D:8D:F1:07:B0:16:56:78:C3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/53db4522-daa5-399b-8669-85b66fb7ab50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl

            X509v3 Authority Key Identifier:
                keyid:81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.232.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:00:55:61:28:2e:55:54:ad:33:3f:04:07:52:0b:30:c3:09:
         8e:f6:f5:36:53:f7:7f:e0:4f:2d:fa:5b:5d:e4:2f:39:4d:94:
         c1:05:98:e5:db:34:ea:cf:9a:07:68:68:3e:bf:7f:1b:83:d0:
         20:73:e7:1f:5a:01:a6:41:f8:21:f4:6a:ff:18:85:d6:66:94:
         20:8d:d9:a1:3c:2b:15:4e:b1:61:a5:19:10:01:7b:06:cf:6c:
         b9:50:32:3d:b3:36:4b:5e:dc:28:fe:09:32:a9:1f:fc:d0:63:
         de:17:ac:99:2a:d7:19:d5:39:01:12:df:7b:30:63:9e:62:d1:
         92:fa:cb:9c:5f:11:49:63:78:8c:9c:05:2a:21:a6:39:68:1b:
         74:36:54:0d:1f:b8:2d:30:78:a8:86:ad:25:8f:e4:a4:97:1a:
         22:77:41:ca:af:2f:d2:3d:18:cd:f7:8b:4b:7b:b8:79:25:d7:
         17:0c:95:67:f3:c8:8c:0e:14:61:6b:9d:c1:b7:48:6f:19:93:
         67:ef:f5:6b:ad:ff:41:b9:82:02:bb:5c:0a:54:00:bd:61:cc:
         4b:15:4b:1a:5d:0e:c8:0b:2b:bf:e5:da:dd:42:87:a3:8c:ee:
         65:0b:f9:02:b0:23:6f:90:12:30:31:ea:b3:49:68:41:c7:bd:
         b3:52:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:36:42 2026 by rpki-client