Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/7543c7e9-9417-3e98-a292-1b421e4e43b7.roa
File:                     7543c7e9-9417-3e98-a292-1b421e4e43b7.roa (raw, json)
Hash identifier:          /qy81Mds5ZqqbIS2vwmbX9HAR3iRGEtQMmBehiLk8lM=
Subject key identifier:   D9:57:D9:FB:80:BE:DB:93:99:4E:E3:30:F1:89:33:5D:98:35:92:8E
Certificate issuer:       /CN=b1fcade6-52c4-4b28-8707-cdf7e885f0a5
Certificate serial:       010D0C9F4328584D8935EB1C00794A7F2FD3D200
Authority key identifier: F0:3C:8A:97:43:E3:47:44:2E:B4:5E:02:C2:40:63:DE:6B:68:DF:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/7543c7e9-9417-3e98-a292-1b421e4e43b7.roa
Signing time:             Fri 17 Apr 2026 11:35:57 +0000
ROA not before:           Fri 17 Apr 2026 11:35:57 +0000
ROA not after:            Thu 16 Jul 2026 11:35:57 +0000
asID:                     203090
IP address blocks:        23.140.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:35:eb:1c:00:79:4a:7f:2f:d3:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1fcade6-52c4-4b28-8707-cdf7e885f0a5
        Validity
            Not Before: Apr 17 11:35:57 2026 GMT
            Not After : Jul 16 11:35:57 2026 GMT
        Subject: CN=a13d124d-e702-42e9-b1f3-e4c6fa72f6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:31:6c:6d:56:2b:b3:4f:66:22:6a:23:eb:da:
                    98:b9:0e:70:d4:55:ed:4b:f5:94:ee:2a:92:a7:65:
                    09:7b:b3:7f:08:c5:b0:97:15:8a:f0:57:29:fb:d9:
                    de:cf:8d:f9:7d:bb:85:52:03:67:a2:1b:81:6b:cf:
                    b5:8a:66:8c:40:a1:04:cf:8f:b9:ec:83:c5:25:71:
                    f6:57:19:0e:76:28:d6:e6:56:c4:c6:e6:f5:c8:a8:
                    55:21:f1:b9:f0:5b:6b:56:e3:0e:01:06:a4:f7:6c:
                    f8:57:78:1a:ca:2a:da:54:74:43:20:72:ef:75:df:
                    97:b1:27:f9:b3:68:68:78:79:c0:a9:d1:fb:50:6d:
                    80:cd:be:32:e9:18:e3:29:d7:d4:47:9b:27:52:5b:
                    f7:6e:2c:53:be:6d:52:ab:48:e9:8d:80:ae:be:18:
                    85:26:51:a1:d4:5b:c7:ce:66:44:79:c1:b4:f3:e6:
                    7e:2e:21:e0:7c:ba:7e:b7:36:76:f6:11:5c:9c:13:
                    7b:8b:a5:03:e0:ef:e8:3c:8c:52:5b:b5:eb:5a:25:
                    ef:ff:84:59:c6:cf:4c:bb:5c:91:73:44:8b:c5:5b:
                    a4:e6:25:30:8a:ce:66:18:52:5d:26:e5:ea:87:f1:
                    a3:e7:dd:42:53:25:7f:39:14:b5:4b:b7:d7:1e:b8:
                    a4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:D9:FB:80:BE:DB:93:99:4E:E3:30:F1:89:33:5D:98:35:92:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/7543c7e9-9417-3e98-a292-1b421e4e43b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:3C:8A:97:43:E3:47:44:2E:B4:5E:02:C2:40:63:DE:6B:68:DF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b1fcade6-52c4-4b28-8707-cdf7e885f0a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7c:b3:a0:44:d9:15:89:fd:d6:fa:fc:2d:ef:30:4d:dc:58:
         f3:8f:81:4a:7f:68:4e:ac:27:0c:43:1a:66:0a:68:5a:78:63:
         2a:99:e9:2d:e1:d5:7d:db:65:1d:6b:15:a7:1d:58:b6:72:b7:
         e7:27:9e:2a:14:08:a6:52:65:48:30:af:d2:5d:4a:f6:aa:aa:
         fd:ec:45:2f:eb:86:60:77:be:32:b5:bd:64:db:36:21:46:1a:
         8c:ab:d2:78:09:af:26:72:16:bd:44:43:c5:8c:63:4e:35:ef:
         fc:90:55:88:d1:33:af:68:33:a6:03:8b:5d:de:c5:71:dc:68:
         15:0b:94:1d:2f:85:16:be:ec:76:59:3a:db:da:e0:9d:09:88:
         43:47:ff:f8:f9:97:9f:a3:20:3b:7a:2e:a5:b1:1e:a6:35:47:
         1a:4e:bb:63:b5:58:57:8e:38:3d:7f:8a:49:96:a0:a3:f5:8e:
         c4:70:c5:d1:d5:ab:8e:34:0f:59:01:be:e5:41:1a:f0:9b:94:
         85:e6:af:1b:dc:4f:33:01:e3:57:ad:60:27:e8:87:ef:7f:cf:
         06:61:50:80:97:cf:8b:00:e1:5c:43:be:d7:6e:fa:2b:02:ef:
         f8:7a:60:3d:5c:1b:aa:7f:48:20:7a:23:df:36:a3:1c:e8:73:
         44:21:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:05 2026 by rpki-client