Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa
File:                     f794eda1-98e0-3ea3-b805-5f854043bd39.roa (raw, json)
Hash identifier:          lIBWt8O9p2MLNuK/tAyKxnL4ScpnMnXhtkCvZ3o+9Gc=
Subject key identifier:   7B:30:E2:47:73:29:C5:D6:7D:19:FD:66:F8:1C:A4:01:21:44:9F:B8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D9A200450B1E36128AABFCA40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     31898
IP address blocks:        140.91.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:04:50:b1:e3:61:28:aa:bf:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=12b6e260-1ff7-427c-b8d6-acaba7e7ca31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:b0:1e:cf:af:8e:4e:14:ad:5f:5f:10:df:
                    b6:62:1b:d2:66:25:09:28:f8:79:9f:af:5f:28:d8:
                    a9:6c:0e:3c:e0:55:13:3d:e5:8d:44:d6:03:3f:06:
                    2b:ec:06:c1:31:96:4f:cb:ce:54:35:8a:09:3e:20:
                    b1:43:b3:ef:ac:5f:1c:21:81:55:85:57:f1:71:e0:
                    5b:d1:4d:8c:3a:bc:83:19:10:c6:f0:84:e6:18:d2:
                    a6:43:97:9f:64:b0:8d:ec:56:51:e6:39:1a:79:7f:
                    58:e5:cc:0b:62:f9:1c:9a:7c:05:40:fc:f6:01:32:
                    43:b9:d3:52:ff:50:92:d2:a9:34:3c:b5:5d:73:25:
                    44:a7:57:5e:74:42:ee:4d:46:81:22:ea:47:ae:2a:
                    ac:09:58:5d:0b:36:93:dd:cc:49:28:50:bc:08:5e:
                    78:2f:71:33:22:bb:cd:d2:e3:f9:69:1a:b1:ed:27:
                    79:ec:89:83:55:80:61:5e:1f:f6:2d:2b:d0:05:ac:
                    f7:8a:cb:f0:d7:ac:8f:de:89:f1:5e:60:e5:37:dc:
                    19:fb:75:fa:29:93:98:60:7f:3c:89:6c:3d:d7:a9:
                    eb:cb:e7:34:c4:7c:07:e8:ed:cf:83:5c:3c:f8:82:
                    b8:9f:42:f3:c5:ff:e9:1a:62:0d:88:bd:13:ce:ea:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:E2:47:73:29:C5:D6:7D:19:FD:66:F8:1C:A4:01:21:44:9F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:9f:5a:db:06:1a:00:d1:2d:fb:0c:41:7d:f5:d7:fb:d8:
         94:66:8c:88:0e:02:9e:c5:15:92:0c:35:b1:62:3d:05:54:14:
         76:e9:5a:ef:96:70:27:fd:38:78:df:5d:89:97:f2:e2:24:0c:
         fa:b8:97:99:eb:94:07:4b:d3:5d:9c:03:6a:2c:cf:24:3a:4b:
         ae:70:c9:2f:f3:71:70:43:db:c3:e5:65:de:f4:6a:20:60:83:
         cb:fa:4b:d6:23:c5:e8:5b:97:91:f5:8c:21:bf:31:fd:4d:0c:
         35:8f:9e:3a:ee:08:b3:b3:3e:6e:dc:46:fc:d2:4e:45:5b:f4:
         bc:66:9f:b0:cd:eb:65:fc:0c:25:15:2c:15:a9:a6:1d:70:92:
         94:8c:9b:c7:ca:2a:78:0b:91:c2:88:1f:96:bf:4d:5c:0f:2e:
         19:31:b1:0a:23:2e:e4:16:31:f0:64:b9:c0:39:cc:16:1e:9b:
         7c:67:51:f6:71:ac:23:49:a4:a6:fd:66:61:a0:97:70:b9:d0:
         24:2e:85:c8:00:00:c1:f1:10:b0:a9:82:64:bc:54:bd:6c:67:
         03:5b:1e:48:d8:28:54:1c:9f:4b:7a:da:58:b4:dd:1d:d9:44:
         b6:c3:e2:9a:c5:3f:f0:37:d3:8c:83:e5:f7:f9:c4:20:1c:a7:
         c9:13:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:30 2026 by rpki-client