Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0850fa05-2b2f-31ca-b1a6-b8e1293c9697.roa
File:                     0850fa05-2b2f-31ca-b1a6-b8e1293c9697.roa (raw, json)
Hash identifier:          jC80hY85XDtG5wF+A31+f0vxnr7/HebpVHcEaXrzHk8=
Subject key identifier:   D4:CC:07:2A:89:5E:3A:CC:F4:F1:79:D5:4E:0C:7E:7A:AC:DF:E3:4B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8C2AAE134A43A003E3851000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0850fa05-2b2f-31ca-b1a6-b8e1293c9697.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        140.204.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:ae:13:4a:43:a0:03:e3:85:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=7775234e-9de0-4286-8241-4aeb1f3d8fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:b7:79:37:3b:eb:75:c7:26:c8:37:ac:1c:
                    57:32:4c:9f:b4:15:2c:5f:c8:a5:4a:e6:a4:bc:29:
                    7c:26:25:93:7f:ec:18:43:d5:98:41:57:a5:e4:eb:
                    7d:e6:54:79:ad:95:24:c4:9a:f9:35:89:2b:aa:b5:
                    57:af:09:a9:ef:c2:75:88:66:68:44:29:e1:2d:61:
                    f3:77:36:7d:dc:48:31:6b:c5:68:af:2e:24:fc:85:
                    7b:ab:e1:1c:b2:29:30:34:e4:82:e4:db:9a:35:6f:
                    c7:23:35:92:db:59:bd:a8:01:e8:4c:c6:f0:aa:be:
                    59:42:b6:93:ca:93:04:11:6a:08:c3:e1:55:90:34:
                    90:df:90:11:90:9f:d4:e8:d4:78:15:90:57:d8:d7:
                    e9:27:0d:36:40:b2:52:87:2c:6e:71:00:32:7d:c7:
                    95:cf:cf:5d:37:61:f0:e4:c1:2b:9e:62:b3:0c:f8:
                    31:60:14:aa:e7:36:9d:87:cb:21:71:0a:04:6b:35:
                    d0:2c:c4:73:10:cb:11:6e:e0:0c:42:2a:9e:a8:9c:
                    09:7e:b2:1c:58:d2:fd:1f:c5:36:54:b4:2d:91:7d:
                    d8:53:fd:1d:42:31:83:f2:9f:49:cb:f1:f1:46:7a:
                    3b:65:20:e4:75:fd:f1:a0:2a:d7:2b:08:35:bd:00:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CC:07:2A:89:5E:3A:CC:F4:F1:79:D5:4E:0C:7E:7A:AC:DF:E3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0850fa05-2b2f-31ca-b1a6-b8e1293c9697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.204.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:51:f7:13:b3:18:1a:24:c7:22:e6:6a:ca:46:7e:1a:5e:
         85:ae:4f:b6:ee:87:a7:95:f0:d0:81:31:f6:aa:17:dd:49:86:
         10:83:e7:45:d3:78:9e:3f:8a:58:f8:2c:99:1d:75:65:ad:26:
         c3:06:06:d2:99:20:80:83:ce:73:3a:32:92:e2:67:12:ff:ae:
         8c:97:da:f4:cb:23:e9:d4:73:b9:c7:d8:ec:91:35:63:d0:f0:
         7b:e2:59:28:ef:57:6f:a1:6a:75:f5:22:ce:4d:45:ee:e1:20:
         c9:3b:66:8a:a3:5d:bb:2e:dc:2c:e1:d7:6a:f6:44:5b:c3:45:
         1e:89:2b:7e:30:4c:86:9b:09:4f:37:a3:c5:37:21:a4:72:81:
         0e:0b:5d:83:cc:c4:4f:42:d9:6b:70:cd:66:e6:fe:e0:17:71:
         9b:fa:37:3c:ed:fa:bc:99:e8:c7:78:7d:77:a5:db:e1:6c:a4:
         39:04:6f:29:a3:a9:53:f8:b1:db:15:f3:8d:2a:67:31:54:a7:
         20:7f:eb:cc:d9:54:83:cd:4d:21:da:a6:f6:43:d1:59:1f:1c:
         9f:85:cc:e1:50:0d:11:2f:81:32:55:13:f3:9a:cf:40:82:76:
         90:81:05:83:82:f9:47:f5:2e:6e:16:34:42:3b:2a:fe:84:e7:
         e2:c7:15:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKq4TSkOgA+OFEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk
Nzc3NTIzNGUtOWRlMC00Mjg2LTgyNDEtNGFlYjFmM2Q4ZmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFa3eTc763XHJsg3rBxXMkyftBUsX8ilSuak
vCl8JiWTf+wYQ9WYQVel5Ot95lR5rZUkxJr5NYkrqrVXrwmp78J1iGZoRCnhLWHz
dzZ93Egxa8Vory4k/IV7q+EcsikwNOSC5NuaNW/HIzWS21m9qAHoTMbwqr5ZQraT
ypMEEWoIw+FVkDSQ35ARkJ/U6NR4FZBX2NfpJw02QLJShyxucQAyfceVz89dN2Hw
5MErnmKzDPgxYBSq5zadh8shcQoEazXQLMRzEMsRbuAMQiqeqJwJfrIcWNL9H8U2
VLQtkX3YU/0dQjGD8p9Jy/HxRno7ZSDkdf3xoCrXKwg1vQBT3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTMByqJXjrM9PF51U4Mfnqs3+NLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDg1MGZhMDUtMmIyZi0z
MWNhLWIxYTYtYjhlMTI5M2M5Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACviUfcTsxgaJMci5mrKRn4aXoWuT7buh6eV8NCBMfaqF91JhhCD50XT
eJ4/ilj4LJkddWWtJsMGBtKZIICDznM6MpLiZxL/royX2vTLI+nUc7nH2OyRNWPQ
8HviWSjvV2+hanX1Is5NRe7hIMk7ZoqjXbsu3Czh12r2RFvDRR6JK34wTIabCU83
o8U3IaRygQ4LXYPMxE9C2WtwzWbm/uAXcZv6Nzzt+ryZ6Md4fXel2+FspDkEbymj
qVP4sdsV840qZzFUpyB/68zZVIPNTSHapvZD0VkfHJ+FzOFQDREvgTJVE/Oaz0CC
dpCBBYOC+Uf1Lm4WNEI7Kv6E5+LHFfM=
-----END CERTIFICATE-----
Generated at Wed May 13 06:43:16 2026 by rpki-client