Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa
File:                     5c55b5af-970c-3f95-a381-4d9948e52241.roa (raw, json)
Hash identifier:          rpN0xNK70QxrL/9AFtPShtAsjQD9saC7czqtibP+qQo=
Subject key identifier:   81:35:65:77:26:3F:53:EC:67:E4:34:50:12:EA:14:80:6D:9A:09:D3
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D869551B5293A946254DB4800
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     399145
IP address blocks:        140.174.19.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:51:b5:29:3a:94:62:54:db:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=7ad773e3-9505-4a4e-98b4-49aac1bc47cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:2f:75:22:85:b6:1d:ea:9b:49:dd:13:0a:
                    85:5b:44:16:87:e7:bf:ac:ef:e1:c5:f6:6b:0f:21:
                    e8:c0:8a:1f:17:e5:15:b6:7e:3e:06:bf:95:5a:e8:
                    db:5d:88:72:b9:5e:ae:c3:2a:10:2e:aa:6d:6b:eb:
                    07:25:d1:d6:10:da:a3:31:9d:b8:21:43:54:fc:90:
                    8f:ae:fb:ac:9b:01:5f:8e:f3:41:e6:5f:6b:44:40:
                    0a:59:5e:63:71:22:8c:10:5a:f4:ad:59:59:69:a8:
                    e9:f6:93:26:a3:7a:2b:e8:77:dd:3b:1d:a0:23:ad:
                    13:91:e1:78:90:49:95:27:8f:ce:5b:06:67:31:a5:
                    60:6b:6b:cc:4b:ac:d0:83:18:bc:9b:69:f8:8e:c3:
                    21:70:17:49:0e:8b:84:b1:21:16:1f:92:e5:f5:d3:
                    29:57:6f:78:14:07:09:f9:c4:ef:3b:f2:10:0a:6f:
                    f4:88:95:0c:8d:ea:90:d7:74:ee:31:6d:6e:6f:c3:
                    a7:7a:3c:a4:8d:e9:2e:46:cc:d1:0a:b4:4a:9c:26:
                    99:ed:aa:13:98:a9:98:bb:50:dc:7c:2b:31:77:00:
                    5d:84:53:e7:77:fb:80:ea:e6:b8:6c:a8:a7:9f:2c:
                    d4:aa:1c:23:17:83:77:b7:a6:2c:7a:90:c7:6c:c5:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:35:65:77:26:3F:53:EC:67:E4:34:50:12:EA:14:80:6D:9A:09:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.19.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:93:20:3f:06:44:c4:40:db:4a:24:8e:9f:13:65:02:2f:f8:
         cf:40:21:c2:c1:22:c0:6d:75:c0:36:92:11:db:b4:4b:6f:89:
         74:4e:d9:4f:4c:59:81:c2:63:9b:09:dd:80:c2:99:64:e3:7c:
         5f:89:df:42:33:e9:93:77:d2:a7:bf:1b:0f:aa:2c:2b:8b:8b:
         a5:8b:53:ed:80:d4:ea:da:f2:2b:92:f4:ef:f3:29:d9:98:5c:
         a8:3e:1e:45:57:4d:e6:29:4a:19:d9:89:e6:2e:29:a3:aa:c8:
         fd:54:ba:bc:9b:e3:81:bc:f6:4f:87:36:5c:e9:c5:ce:1d:4b:
         93:24:a2:e1:d5:76:9e:cd:52:61:d8:7a:05:3d:25:21:08:25:
         83:35:2f:7f:80:76:2a:b3:e0:04:e4:35:c2:7c:66:72:11:42:
         5b:e8:06:a3:40:f0:9b:1e:b8:5e:18:bf:60:6f:da:4e:f4:09:
         27:68:f3:99:ab:26:f1:6c:e8:31:2c:a6:43:ea:c0:fd:77:68:
         1f:bf:c3:41:f6:6b:d2:13:37:6f:3a:c1:11:39:99:0a:46:d9:
         2f:d9:9b:96:f2:a7:d7:91:32:00:d6:c0:6a:be:d7:31:06:a5:
         37:75:e2:48:db:0b:03:31:49:57:ad:12:e0:a2:8e:f8:e5:0d:
         68:b3:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:00 2026 by rpki-client