Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/fd53224b-ef3a-3511-8965-b6f1ac462750.roa
File:                     fd53224b-ef3a-3511-8965-b6f1ac462750.roa (raw, json)
Hash identifier:          EkRKA1VxwZ5CEsTFM4PRUrCl4v/u6g75aYvBmgiM768=
Subject key identifier:   41:B2:A3:19:49:A7:5B:0F:9F:8E:89:2C:3E:CE:7E:92:CF:F2:29:40
Certificate issuer:       /CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
Certificate serial:       010D0C9F4328584E1B1E592F498D79899AE05700
Authority key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/fd53224b-ef3a-3511-8965-b6f1ac462750.roa
Signing time:             Mon 08 Jun 2026 17:56:29 +0000
ROA not before:           Mon 08 Jun 2026 17:56:29 +0000
ROA not after:            Sun 06 Sep 2026 17:56:29 +0000
asID:                     22616
IP address blocks:        140.232.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:1e:59:2f:49:8d:79:89:9a:e0:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
        Validity
            Not Before: Jun  8 17:56:29 2026 GMT
            Not After : Sep  6 17:56:29 2026 GMT
        Subject: CN=a3bac45b-166b-404e-83fd-3ce7652220ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a4:79:02:09:1a:1c:71:89:d1:69:a4:30:37:
                    fc:b0:33:a3:27:7a:97:83:93:2c:45:a5:0e:eb:08:
                    35:fa:0e:93:71:bc:64:fe:e7:ef:a0:c8:8c:e9:3c:
                    3b:47:fd:01:64:6a:09:8b:48:f7:f0:29:7f:dc:b4:
                    56:9a:57:4c:69:4b:1b:72:30:5e:28:0d:e2:0b:6f:
                    09:91:37:5c:87:ab:5f:23:8d:7e:15:1d:fa:61:b2:
                    78:1c:eb:56:0d:3c:95:f6:92:07:1a:21:4c:6b:10:
                    8e:7c:2e:ae:2d:29:26:ed:34:6a:4f:07:31:0f:e0:
                    b7:13:b5:53:dd:ac:1d:1c:78:b3:a7:82:df:66:11:
                    86:4c:aa:50:4e:a8:1f:e1:40:2c:3d:19:cf:a3:1c:
                    6f:62:8f:80:0a:58:93:63:3b:4f:c3:29:26:14:a4:
                    a6:e6:2e:4b:7b:ca:38:58:1f:b7:db:2d:44:14:f3:
                    3e:70:be:63:20:c2:87:c7:d4:ec:d4:08:73:5e:6d:
                    03:c6:dd:11:4f:9b:1a:6c:fe:8a:fc:c1:50:e8:5b:
                    a9:c2:1c:c0:39:6a:aa:12:36:5a:53:3c:ba:95:80:
                    d6:fa:93:ee:c8:9b:2e:37:1e:cb:b0:1c:be:ca:54:
                    71:1b:10:f9:38:9d:87:d7:03:6a:34:e6:2a:a5:e7:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B2:A3:19:49:A7:5B:0F:9F:8E:89:2C:3E:CE:7E:92:CF:F2:29:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/fd53224b-ef3a-3511-8965-b6f1ac462750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl

            X509v3 Authority Key Identifier:
                keyid:81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.232.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:5c:50:dc:46:e9:aa:23:09:35:72:ac:56:fb:a5:09:0e:
         85:9e:58:43:df:c6:89:61:d5:d6:c3:de:8e:db:2e:0f:f2:f4:
         65:16:79:ef:c2:36:e3:93:46:48:ae:dc:b6:88:5f:f8:51:36:
         0d:44:69:e0:26:79:7d:2f:2b:6a:13:7c:de:4b:ad:6d:dc:ca:
         b8:0e:1a:7c:07:2f:8d:4e:e9:25:d8:76:b4:ce:7e:80:d1:09:
         b8:07:88:25:63:da:68:6b:41:18:25:0a:fe:9a:a5:8d:b1:c9:
         9b:ec:45:ff:8b:e7:fb:fc:9e:71:17:9a:79:30:f5:83:95:c9:
         ea:23:0a:12:6a:75:6a:ce:c8:43:5a:3f:7b:89:f2:2a:2e:f2:
         ed:2d:a3:34:4e:c1:af:a8:db:e1:3e:1d:d0:12:a4:cb:2d:9f:
         c5:7a:7f:49:e9:61:58:d2:76:90:79:99:f5:5a:12:22:5e:b7:
         78:ad:ba:23:58:bf:03:f1:0b:4a:52:ba:a5:6a:4c:31:ee:a6:
         8e:fc:0c:f7:76:7b:a6:09:c1:85:81:3c:b1:9f:d3:70:25:42:
         d7:9a:f1:87:ff:4b:8a:5a:75:05:19:4f:22:a7:19:88:54:cd:
         d8:8f:79:d9:12:8d:fe:45:1d:bd:4b:6f:5a:d1:38:80:8a:3d:
         62:3f:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:23:15 2026 by rpki-client