Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ddfb9e6d-0a8d-3a59-b3be-dffd6c4483e8.roa
File:                     ddfb9e6d-0a8d-3a59-b3be-dffd6c4483e8.roa (raw, json)
Hash identifier:          NTKSrzgov71E0RQ/zuzmFD/kchcV0XDICoroyc7GvHc=
Subject key identifier:   62:0D:0F:86:05:C7:3B:59:A2:00:32:79:D2:E8:A5:D6:ED:55:E0:4D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D746FC3AF1B02303F9A05DB00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ddfb9e6d-0a8d-3a59-b3be-dffd6c4483e8.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     10753
IP address blocks:        140.228.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:c3:af:1b:02:30:3f:9a:05:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=3536e01c-c13a-4ee4-a3ae-d050548dcf1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:49:55:50:07:98:49:a3:90:4e:25:55:4d:
                    fc:d6:b1:43:75:ed:f7:78:02:cd:4a:bf:ba:5a:e7:
                    fb:8d:d3:d3:20:83:00:48:4c:1c:7d:c1:2e:38:6f:
                    13:e7:17:0c:50:60:55:6f:01:7a:4e:8c:78:c0:85:
                    c5:32:02:60:32:3b:7c:87:b9:49:b4:e0:89:18:ba:
                    00:49:19:e7:af:fb:9c:d1:91:5c:e1:b3:e0:9f:d3:
                    71:e6:1f:ee:9f:4f:4b:6f:d7:33:f4:83:0f:fc:81:
                    41:1a:e9:c3:63:7e:67:0f:24:b6:62:01:d8:ae:97:
                    d4:f4:c8:65:a6:f2:e1:fe:a6:1f:b8:eb:53:dd:9a:
                    46:84:a6:d6:8d:44:0a:bc:84:50:80:b5:6b:48:8a:
                    93:c5:fd:33:e0:76:f7:1f:21:1b:8a:79:58:bb:19:
                    2a:6a:fc:d5:cb:b8:67:26:58:bf:7b:b3:b8:dd:53:
                    5f:c5:2e:b7:6a:1b:fc:5f:5d:ca:ab:23:87:82:8a:
                    31:9a:e3:84:ad:12:05:2d:8f:ff:a2:05:72:7a:de:
                    29:46:b5:d1:2f:ce:e7:3b:04:66:ba:5d:d7:c2:1b:
                    76:c5:2a:73:6f:b7:7e:61:69:20:92:92:47:e1:0f:
                    76:5e:78:93:4c:ac:4a:91:fa:7f:00:ca:c0:97:a0:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0D:0F:86:05:C7:3B:59:A2:00:32:79:D2:E8:A5:D6:ED:55:E0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ddfb9e6d-0a8d-3a59-b3be-dffd6c4483e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:2f:4d:34:25:68:7a:92:e3:e3:44:d4:f4:5f:4c:c2:1b:
         cd:52:b4:a9:3f:e5:68:85:c6:e9:a5:cf:ec:48:a1:a6:c3:f5:
         53:de:79:49:fd:b4:ff:8b:49:e2:f2:62:2a:d6:cf:9d:c1:2b:
         4b:65:c8:d5:e4:c8:9b:38:4a:9b:22:6c:7c:f6:fd:a7:41:50:
         0c:ac:f3:4a:83:d5:45:e7:a4:ad:83:8a:4d:43:de:d5:57:be:
         76:64:0b:1c:38:00:58:9b:56:2c:6e:53:97:a5:c5:1f:fd:5f:
         1b:5d:31:0b:95:9d:60:0e:c7:cf:5b:c7:df:9d:39:f2:8d:87:
         13:49:92:76:45:2e:81:68:04:38:b2:76:84:22:08:b0:0c:11:
         2f:30:3b:19:9b:07:bb:3b:72:3e:5b:30:34:5b:88:cd:0a:e2:
         0d:e0:82:1b:54:72:bd:a5:c4:53:30:93:b8:88:50:de:cb:86:
         73:ce:67:44:46:e5:44:18:59:ec:41:ae:02:2e:02:16:a8:41:
         b1:c6:60:04:91:fc:8a:ae:4b:e1:ad:23:c6:b9:7c:6e:db:26:
         84:94:39:fc:a7:75:6a:96:00:0b:d4:30:b4:3b:a9:d6:3d:5c:
         bd:14:88:42:5a:38:d9:fe:8b:eb:6a:19:40:9f:5a:b6:f2:09:
         3f:15:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:42 2026 by rpki-client