Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ce42ed31-74ed-3c05-ae1a-e99fa5339902.roa
File:                     ce42ed31-74ed-3c05-ae1a-e99fa5339902.roa (raw, json)
Hash identifier:          a1Jj/6eDDoJWKfkRC02aBTQ3JZiiLg3ydD3//byy7CE=
Subject key identifier:   6D:60:CD:14:63:3D:8E:F5:A0:D4:DF:EA:1B:54:EE:AF:E8:28:68:51
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584A9E96152A9457F7FC8C26B600
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ce42ed31-74ed-3c05-ae1a-e99fa5339902.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     26768
IP address blocks:        140.235.9.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:15:2a:94:57:f7:fc:8c:26:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=6d8a09af-6dd7-46f0-a31c-9b7be53957cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:5d:58:d9:54:b9:43:c1:55:da:05:94:85:
                    5f:8b:39:89:d0:ff:42:c2:bb:e5:83:8e:78:0b:49:
                    1f:c2:49:5f:ce:69:4a:e2:7e:ad:c9:09:3b:47:51:
                    20:54:55:25:6f:8b:07:e5:33:93:db:b2:b6:d2:d7:
                    18:bb:14:c9:3c:93:e9:d1:1e:8d:c7:e4:08:eb:6c:
                    c5:10:27:b9:ca:8d:ed:23:10:d4:e5:f1:52:33:e1:
                    06:39:a0:32:e9:b9:e0:d9:74:08:62:e6:d3:c1:ee:
                    07:47:39:c5:90:c2:2d:7d:3b:98:27:63:d0:5d:c8:
                    d8:88:19:ef:db:18:56:77:a2:4f:88:4f:84:b9:fa:
                    ff:bb:1a:93:5c:06:c0:b1:14:ad:a1:cb:fb:bd:0d:
                    2a:51:42:80:ec:3c:e5:47:42:74:6c:39:a5:be:76:
                    55:01:c0:61:2f:5c:29:a5:65:ce:9a:3d:9a:c3:d0:
                    a8:4a:ee:fb:f2:86:1e:7a:2a:22:bf:2c:c7:f6:5a:
                    01:81:f6:0e:4a:de:4d:f9:7f:3d:a9:e6:45:0f:5a:
                    39:4f:e8:eb:5b:15:75:d0:6d:8a:32:21:a9:30:05:
                    c3:f5:64:bf:6d:4d:45:03:85:98:5e:65:de:9b:07:
                    d8:9d:5f:39:f5:f4:07:f0:e0:1b:f4:9d:77:1f:40:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:60:CD:14:63:3D:8E:F5:A0:D4:DF:EA:1B:54:EE:AF:E8:28:68:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ce42ed31-74ed-3c05-ae1a-e99fa5339902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:07:84:30:62:23:c7:b9:17:cd:c8:e7:b6:98:94:ae:6f:13:
         a7:f3:d5:54:4d:49:10:bc:36:6e:00:e6:3d:35:d7:e6:5c:f6:
         09:af:9a:de:de:f7:e9:ea:6d:a7:c0:21:12:3a:28:eb:07:30:
         8b:f6:d1:a2:0d:99:73:b2:9b:69:73:5b:5d:0a:7d:31:81:e1:
         4b:e4:26:19:38:45:ac:2d:f1:f0:06:96:1d:aa:56:08:a3:fe:
         40:33:34:ee:ea:64:ef:17:f8:2a:f8:75:40:c2:c4:45:8a:6a:
         71:76:d8:73:e3:6a:ae:48:6b:24:96:db:e3:fe:05:14:5d:f8:
         5f:fe:a8:7e:ce:44:c4:78:16:dd:e9:7c:74:ed:8d:0e:1d:3f:
         45:a0:de:ee:5b:98:18:de:85:98:eb:95:76:60:f6:6a:e1:9c:
         90:9c:c6:6a:c5:de:f3:16:d9:76:38:9b:10:28:b1:78:30:03:
         8e:65:3f:0b:c4:24:69:97:f9:7d:cd:60:92:92:22:60:97:ad:
         a2:e2:65:7f:9b:6e:ce:c5:28:d9:4f:19:92:11:6a:2b:c6:a8:
         c5:6f:ab:78:98:2d:48:27:17:7c:5e:c6:aa:e6:7f:88:a0:11:
         4d:f0:23:5b:6b:5d:fa:5e:49:e3:55:ef:ed:8d:02:e9:6d:bd:
         df:22:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:22 2025 by rpki-client