Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/4055fcdc-049d-3eae-a8dd-377e3e72980b.roa
File:                     4055fcdc-049d-3eae-a8dd-377e3e72980b.roa (raw, json)
Hash identifier:          bhCE6LhrXd2257EhjqNSJQ2/IyCWh62FlKh+Yikd/Lg=
Subject key identifier:   B1:90:D1:5C:F7:F7:35:27:B0:BD:4B:44:BD:78:5D:F8:A8:17:DA:A4
Certificate issuer:       /CN=5f0271af-0900-4d68-9a01-e446c3910a39
Certificate serial:       010D0C9F4328584D6C0FB3E36A502F047F829F00
Authority key identifier: 92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/4055fcdc-049d-3eae-a8dd-377e3e72980b.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     9541
IP address blocks:        140.235.80.0/24 maxlen: 24
                          140.235.81.0/24 maxlen: 24
                          140.235.82.0/24 maxlen: 24
                          140.235.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b3:e3:6a:50:2f:04:7f:82:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0271af-0900-4d68-9a01-e446c3910a39
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=92e93e15-d9f9-41be-b1e8-79014cf3dd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:7b:d2:bf:99:e9:8a:fa:0e:00:ec:7b:2c:
                    3d:6c:3c:1a:61:bb:bb:1d:94:c0:8c:2f:b9:01:a6:
                    70:0b:34:96:40:df:7a:89:d1:d0:8e:38:0d:7f:bb:
                    fb:ab:90:d7:40:7e:f2:f3:df:dc:3e:08:60:30:3c:
                    5f:2e:23:7f:41:c7:ec:7a:5c:2e:b7:6d:8c:01:a9:
                    39:bd:77:b2:8c:1e:56:f4:a4:2c:41:0c:84:60:e0:
                    19:58:cb:c2:2d:85:09:e1:3d:c4:c5:18:97:38:c3:
                    b0:3e:db:bb:80:47:74:aa:63:14:3b:ee:f2:06:a4:
                    74:52:6d:46:be:ee:d6:56:67:92:84:ae:dd:4c:e0:
                    5e:f0:9b:68:2c:35:df:c8:39:5e:b2:69:9f:28:15:
                    41:2f:6d:82:69:9a:79:82:58:a3:be:5a:56:03:72:
                    0a:ad:51:6d:04:ad:11:d4:82:97:b4:1e:d9:05:f2:
                    57:18:dd:45:4b:1b:f1:12:f6:a8:b6:9d:6c:13:63:
                    52:c5:9f:6b:85:e0:81:c2:04:3e:d1:d6:bd:04:93:
                    b3:a1:80:23:e8:85:f3:b4:17:a8:52:1d:f1:28:2b:
                    1c:e3:87:02:0f:6d:41:ec:bb:28:9d:9b:47:15:d8:
                    2f:79:e1:23:fd:04:7e:da:bc:61:13:b9:dc:4b:63:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:90:D1:5C:F7:F7:35:27:B0:BD:4B:44:BD:78:5D:F8:A8:17:DA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/4055fcdc-049d-3eae-a8dd-377e3e72980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl

            X509v3 Authority Key Identifier:
                keyid:92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:1e:ca:5b:59:75:e1:1b:48:1a:69:c6:20:4e:48:60:74:
         96:e9:64:dd:96:4d:6c:ab:d3:20:8a:96:0d:c6:f2:34:8d:51:
         be:3f:d2:7e:f1:96:3d:64:3e:4b:54:89:f9:1e:2d:64:20:00:
         5e:0e:d2:3b:28:3d:b0:4d:cc:bf:8d:9f:cc:d1:40:cb:21:24:
         38:81:af:7a:64:6f:05:dd:ae:56:15:1f:d1:51:20:70:f0:3f:
         d2:72:9c:65:20:89:f5:0c:d8:e4:dc:69:c3:d7:4d:80:66:7a:
         8b:b5:e0:34:47:72:0b:33:c7:c7:6d:ae:c8:1e:98:2f:9c:28:
         30:d4:36:c4:24:4f:b4:d9:f6:f2:38:ab:b6:44:1a:c8:63:39:
         02:fd:32:4d:99:57:99:c8:7e:f7:ba:80:2e:26:b9:1a:42:15:
         1e:3a:32:53:ed:08:33:41:19:bc:c8:e6:28:8b:19:f8:86:5a:
         34:7e:1d:8c:ce:d2:7b:ff:52:a1:de:9a:e0:a5:8a:b8:7b:5a:
         04:4a:51:77:7c:44:03:40:74:45:b3:b2:11:ac:f8:2f:90:03:
         61:fd:0f:1b:4c:b3:39:d9:b8:5e:ec:51:cf:be:8b:54:95:db:
         8c:53:ab:25:16:09:45:96:b3:00:cd:6f:28:58:e2:c1:e0:db:
         ba:82:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:20 2026 by rpki-client