Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/b883f63b-496d-359e-8894-266a8f752566.roa
File:                     b883f63b-496d-359e-8894-266a8f752566.roa (raw, json)
Hash identifier:          J8K1BRdPHrq9SE+ftjP4yUXQ9Af/TwOixFkPOti7k04=
Subject key identifier:   77:83:8E:0D:BA:92:D9:6B:57:E1:DB:BB:12:DF:AC:75:11:29:D1:3C
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584E08665F640B632316B0AE2040
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/b883f63b-496d-359e-8894-266a8f752566.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     19527
IP address blocks:        57.140.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5f:64:0b:63:23:16:b0:ae:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=a6221b89-37db-403c-8994-544bdb09de50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:b0:30:a4:e3:40:32:68:90:fd:28:e6:ae:
                    8e:2e:f4:dd:40:05:46:2d:83:1f:8f:cf:e9:7a:fd:
                    ad:23:6c:87:85:ac:a4:f3:ac:f7:92:6e:9b:3e:66:
                    b0:f0:c5:fa:91:4b:e5:e8:ae:e3:d9:02:9f:6a:63:
                    d4:e2:9d:4e:d7:73:76:f7:bf:d4:4a:7f:ff:2d:3b:
                    34:83:b0:1e:ca:4b:1c:08:d0:06:b2:0b:90:4b:19:
                    4d:53:8b:36:79:2b:cd:6d:c0:eb:36:9e:f5:26:ca:
                    00:01:c7:04:e1:b9:3b:b4:d8:69:45:1e:ba:57:ca:
                    33:2f:17:e8:18:97:61:0a:bb:11:73:3d:5e:84:96:
                    c3:66:a8:79:d0:52:41:d3:d1:b8:54:30:a9:31:65:
                    bf:8a:c2:4c:7b:66:8e:61:e0:0c:af:9c:84:36:61:
                    2c:5e:d3:71:f2:34:a1:72:86:ed:14:54:19:23:d8:
                    f4:23:bc:70:84:01:e4:4e:1c:cf:b7:c5:4b:98:67:
                    ab:8b:2a:51:33:f0:72:30:a0:3a:50:3b:24:7e:2e:
                    b7:02:f4:06:be:48:ac:68:34:24:db:bd:82:c5:68:
                    0f:15:e1:7a:35:62:71:35:93:ec:52:08:1f:0e:17:
                    58:49:d1:2f:14:5c:9c:a1:12:f9:26:e3:d8:05:14:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:83:8E:0D:BA:92:D9:6B:57:E1:DB:BB:12:DF:AC:75:11:29:D1:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/b883f63b-496d-359e-8894-266a8f752566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:41:da:26:50:c3:5a:ec:71:22:55:0d:e2:45:66:e6:d4:
         7b:1b:09:7e:75:09:45:72:96:fa:06:b2:36:2c:64:0a:c1:46:
         c4:0e:cb:0c:c9:2b:3e:0e:02:97:32:91:a0:dc:6b:7e:f1:c9:
         5a:3d:be:74:d8:b8:77:dc:85:85:00:b6:fb:98:02:31:3f:40:
         68:cc:fa:b9:80:0d:dd:4d:4c:dd:4e:29:63:2a:42:39:00:bb:
         8b:ba:33:d4:fd:72:4e:cc:dc:88:c3:36:19:33:a4:19:07:22:
         48:0f:9d:ca:49:97:2f:d1:49:b8:b4:63:f1:c7:c4:dc:12:85:
         13:00:3b:7d:28:27:2a:0c:2a:0c:26:82:b1:5c:e8:a0:04:d4:
         c0:5d:f9:60:07:c1:fc:63:94:31:9e:21:db:9a:b3:5e:6d:f7:
         55:3e:e6:d8:a0:7c:d7:32:48:d4:4f:e4:6a:75:dc:9c:a5:9e:
         12:bd:e3:80:f8:60:35:17:ba:e0:79:47:6b:f1:20:2b:b6:78:
         54:1e:a2:6c:84:08:7f:96:0b:05:54:db:9c:93:72:48:60:c6:
         43:4b:93:48:7f:ce:bf:bd:c1:a1:4f:c4:47:da:e1:ca:6d:0a:
         fe:24:e0:6e:ff:43:90:17:89:c3:9f:97:0c:c3:8e:17:45:5d:
         e1:40:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:51:11 2026 by rpki-client