Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/919f581d-ddca-342e-9dfc-c7d8d062f32c.roa
File:                     919f581d-ddca-342e-9dfc-c7d8d062f32c.roa (raw, json)
Hash identifier:          9qLYUXhBHwdvpbiPefBk1ycDfj5WUKlSZWq9YzKdPPw=
Subject key identifier:   B4:2E:72:C9:B8:F8:CA:83:4A:DA:38:F6:E3:7F:DC:C7:92:16:E5:73
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584E43F4765FAE471A20D80E9480
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/919f581d-ddca-342e-9dfc-c7d8d062f32c.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     63293
IP address blocks:        157.240.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:76:5f:ae:47:1a:20:d8:0e:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=1c482961-122b-49de-9ab4-2594431afd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:60:a7:45:11:f0:72:1d:b3:e0:0a:0c:b6:
                    9a:34:58:2f:7f:e1:ca:76:ee:80:c1:74:bd:52:43:
                    c5:58:10:84:a2:20:43:bc:ff:92:1e:b4:3e:9f:1b:
                    6d:1b:9d:cb:2e:ba:6f:26:82:12:e4:fe:4d:8c:c9:
                    92:f7:be:ea:10:83:c6:7c:f2:27:41:ee:3b:5d:f7:
                    07:35:22:fc:a9:4f:41:b2:db:3c:98:c1:70:61:a9:
                    90:c7:57:85:03:49:b9:db:24:2f:00:8b:a6:fb:ea:
                    db:75:95:17:01:eb:c9:75:53:0d:bc:41:7c:0c:03:
                    0f:ee:ca:8a:f8:43:24:11:81:d7:90:1f:5f:c9:5d:
                    8f:0e:ac:b5:cc:31:5d:85:b9:54:1d:d7:81:25:61:
                    7d:0d:a0:ac:83:4d:40:c7:03:1f:bf:9f:4a:6f:03:
                    16:d7:3f:f2:31:b3:a9:5f:e4:f8:7a:33:63:9e:db:
                    3e:56:5a:ef:fa:d5:d3:af:17:54:14:c2:e4:e2:73:
                    d1:68:3e:cd:72:47:56:7b:56:fb:8e:31:dc:14:26:
                    6e:37:c6:ac:8f:a4:df:73:34:e2:a3:0b:b4:02:51:
                    84:4c:a2:67:e7:67:27:f7:5c:18:d8:ab:92:8f:dd:
                    46:e7:40:71:4b:78:25:18:ea:cc:dc:ec:3e:59:25:
                    4e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:72:C9:B8:F8:CA:83:4A:DA:38:F6:E3:7F:DC:C7:92:16:E5:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/919f581d-ddca-342e-9dfc-c7d8d062f32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:97:03:83:c4:2f:e3:a5:5a:59:5a:ba:5c:b0:11:75:f5:
         5a:91:73:11:0d:01:7a:c4:8d:25:ab:89:b1:fe:2f:e9:c2:30:
         cd:3c:b1:2c:7f:f9:74:e5:88:0d:86:b9:cc:b3:8b:6f:44:ec:
         d2:6c:c0:00:1e:0e:3e:10:98:d1:37:ef:92:88:76:af:bf:36:
         c9:00:f8:8a:e5:f7:1f:e6:03:de:92:cc:d6:30:8c:82:f6:6a:
         27:0c:ab:3b:58:83:07:90:8a:e7:02:b1:07:e8:82:4c:2e:59:
         84:fd:c4:70:cc:f7:5b:9e:2a:6c:52:ad:26:f9:6c:aa:de:bf:
         06:b3:61:8e:1e:e6:e8:25:f1:0c:e0:5a:f2:e8:63:7d:b5:03:
         06:da:28:fb:fe:67:8f:ea:00:d9:27:9c:bb:70:6c:da:ff:b6:
         1d:b5:58:fc:60:b6:5c:40:46:22:d3:81:c2:7e:ef:61:0c:6a:
         d0:71:eb:08:25:34:87:bc:10:b4:e4:ab:9f:35:b1:14:a2:6a:
         98:e7:6b:fc:d1:25:bc:da:97:c7:a1:2e:71:a6:20:12:c4:72:
         87:0f:40:18:1c:81:58:f0:b8:5b:90:6a:9b:64:29:96:42:c5:
         63:7a:f8:34:ed:33:ce:bc:04:b1:cf:ab:44:2e:ad:7c:e3:f0:
         da:e5:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:04 2026 by rpki-client