Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa
File:                     dadb8667-9016-3ed9-aec9-53a09735cd1a.roa (raw, json)
Hash identifier:          t51FzkNI4cPx1WddNXXg8xjcUp3u7IjjcPA2AVrRu3U=
Subject key identifier:   20:90:26:5F:FA:F9:15:DC:70:69:25:30:A5:F5:EA:12:85:0E:52:97
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584BAD624913AC68358BE29EE000
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396073
IP address blocks:        140.228.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:49:13:ac:68:35:8b:e2:9e:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=f9e55045-4bfd-4228-92a0-04380a438780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:45:0d:80:72:ac:db:a2:df:95:63:81:57:
                    f7:36:21:43:16:7b:45:25:4e:5d:6f:ec:a1:c7:de:
                    81:19:3a:ba:b3:6a:e8:a4:31:90:14:41:5b:9e:c9:
                    75:54:ec:41:69:df:55:e8:d0:2a:87:35:2f:80:85:
                    3e:e5:2e:42:74:6a:21:2e:32:22:ed:c9:5d:2a:80:
                    56:70:e4:c4:16:be:7c:00:ca:b9:46:87:d5:0a:cd:
                    5e:57:c1:f8:05:68:6f:fa:6e:21:5e:8d:89:13:d9:
                    55:07:56:79:79:fa:15:f2:66:72:71:dc:6e:aa:36:
                    a2:ca:21:ed:c2:76:c3:3c:5b:c5:42:0c:3f:ed:ab:
                    0f:2f:98:31:0e:2f:45:25:6b:22:eb:4d:d3:43:55:
                    2a:3a:4a:7a:80:5e:7d:93:6c:d2:11:99:72:84:b2:
                    57:51:8d:c8:f8:48:03:57:e3:ce:13:e0:10:0d:b3:
                    65:0b:e9:e2:09:d8:7c:70:49:27:d8:fb:2c:79:71:
                    7c:ea:63:fa:5c:58:9f:17:89:79:54:5d:4f:7b:d0:
                    15:3c:07:12:36:55:70:5f:65:1c:38:cd:d8:61:4c:
                    2a:4f:93:f4:02:a7:b0:b8:a7:7a:79:3d:78:8c:9e:
                    1d:13:e5:da:56:5c:3d:9d:2b:f9:aa:fb:2c:be:a9:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:90:26:5F:FA:F9:15:DC:70:69:25:30:A5:F5:EA:12:85:0E:52:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:fc:8d:45:cc:8e:1c:7d:13:3d:df:36:7c:88:df:f5:2e:
         53:23:78:d1:92:d9:cd:61:18:94:1f:7e:5e:5a:a6:b6:d5:91:
         ec:bd:06:e8:e5:49:01:0e:be:59:5a:db:d1:26:26:98:66:88:
         95:18:96:46:aa:63:ef:ed:8e:3a:2e:cf:a3:a5:4f:52:05:ad:
         1e:3f:3c:93:b9:f1:1f:76:24:d9:b0:f0:db:b1:6d:ca:10:a1:
         13:82:17:b2:88:de:a7:ad:77:2d:76:d4:23:7c:18:7d:81:e1:
         26:1b:4c:b2:7c:e5:7b:93:c9:51:3c:2f:67:d2:a7:32:45:a5:
         79:86:fc:c5:b1:c8:20:a9:b1:10:1e:c9:fc:7c:33:67:79:25:
         8a:19:9a:47:fd:b4:5f:b5:b0:9e:db:43:a8:b4:8e:d2:c6:3a:
         f6:30:1c:4a:4d:2d:b8:d4:0e:45:1a:bf:d9:49:88:08:ed:dd:
         70:bb:f2:82:5a:30:0c:c3:b3:a9:9b:18:7d:ff:0b:20:4c:e8:
         fd:c1:bb:9d:e0:16:cb:bd:9b:96:0d:38:37:bd:1e:79:9f:b1:
         4a:ba:7f:e4:78:23:38:0c:d8:fc:52:98:ef:33:b1:33:0e:81:
         08:ff:8c:56:c0:0d:fc:1a:54:8f:41:df:8f:4d:3f:36:08:4c:
         48:2e:76:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:33:17 2025 by rpki-client