Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/a6a82575-a730-30e2-9214-fa5523a606ef.roa
File:                     a6a82575-a730-30e2-9214-fa5523a606ef.roa (raw, json)
Hash identifier:          HRooArfRuzqac6BYYwo7cmIl09g+yNCd6Ek7XNgdwSc=
Subject key identifier:   A0:EC:2E:B0:55:78:6F:1B:BE:6B:70:0B:2E:7B:6F:5B:A8:9D:C1:FB
Certificate issuer:       /CN=97008014-5cd7-4f24-bb1e-881bf59d003a
Certificate serial:       010D0C9F4328584CA5F7507DFB6073F9801CA500
Authority key identifier: 20:1C:E9:11:72:E0:D9:CF:16:BD:28:26:65:E8:85:03:96:23:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/a6a82575-a730-30e2-9214-fa5523a606ef.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     199524
IP address blocks:        140.235.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/97008014-5cd7-4f24-bb1e-881bf59d003a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/97008014-5cd7-4f24-bb1e-881bf59d003a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:50:7d:fb:60:73:f9:80:1c:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97008014-5cd7-4f24-bb1e-881bf59d003a
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=a928d21b-d374-4b85-b381-8e20c26615c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:a1:72:c1:2a:b9:b2:bb:27:df:80:11:76:
                    c8:d4:8c:9d:9d:38:a4:18:5d:f8:36:82:10:6e:ac:
                    3a:f3:1c:51:cf:78:7b:d5:a8:3e:c4:11:20:90:2d:
                    2f:64:39:c9:fe:50:b6:20:98:8c:e0:59:79:ec:6b:
                    48:70:1d:c6:ac:9a:a1:46:d2:44:a2:dd:3a:4b:1e:
                    56:b2:b6:2c:f6:fe:bc:f7:66:76:e0:c1:db:b6:8d:
                    0c:05:4f:18:ec:88:e6:67:67:43:b4:e4:f1:e6:e7:
                    6a:a1:d0:2f:a5:fa:c6:aa:99:a8:4e:86:38:82:67:
                    d9:62:8a:6c:61:a6:9d:49:67:63:18:9e:8a:2a:a8:
                    9c:50:07:f8:44:3d:ce:a4:a5:a7:98:0e:1a:53:2a:
                    ba:e2:89:35:99:28:3f:e3:59:07:68:63:8e:d3:9b:
                    c0:22:8b:f1:b4:21:45:84:7b:5a:83:47:73:74:23:
                    72:fa:4d:36:d8:9f:c1:0b:f1:5e:12:15:e2:3a:92:
                    39:72:09:40:48:4f:6c:cb:63:b7:ad:8e:6a:37:24:
                    63:d0:dd:59:c3:44:83:6f:10:ae:cb:bb:1f:fd:f6:
                    f7:66:d6:b5:3f:39:74:a5:b2:44:39:b3:cf:f0:fc:
                    0f:ad:90:2d:e8:02:ac:f0:10:27:12:da:ce:7a:3e:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EC:2E:B0:55:78:6F:1B:BE:6B:70:0B:2E:7B:6F:5B:A8:9D:C1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/a6a82575-a730-30e2-9214-fa5523a606ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/97008014-5cd7-4f24-bb1e-881bf59d003a.crl

            X509v3 Authority Key Identifier:
                keyid:20:1C:E9:11:72:E0:D9:CF:16:BD:28:26:65:E8:85:03:96:23:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:1b:68:b0:0c:4f:16:af:29:2c:ad:a8:9b:0a:7c:18:7b:
         ae:89:74:51:ee:67:83:87:3f:07:88:85:e3:14:af:c2:ee:2a:
         20:70:c5:71:f9:27:20:b2:c3:f0:bd:16:66:48:02:29:61:9d:
         d1:df:2d:4d:d8:98:8e:73:8e:4d:31:23:6f:ea:a3:6b:ea:e4:
         f2:e7:7d:00:26:bf:1e:41:ca:dd:b9:2e:dc:32:b5:e8:3f:87:
         f4:6a:50:f2:c0:fc:38:19:cd:be:bd:01:6a:e0:d0:39:18:de:
         47:66:b7:07:5f:3c:0e:b6:98:86:4b:97:cc:83:d1:67:d7:93:
         b6:8d:ad:71:79:73:29:80:08:36:e1:1e:02:ea:2b:58:ff:63:
         06:d8:1d:ac:d8:76:80:a8:bb:9f:99:dc:dc:5c:5a:63:34:04:
         46:de:b6:6c:dd:a4:c2:e6:90:ca:38:f5:4c:01:45:45:a4:4b:
         c6:f5:ed:1f:46:ee:c3:d2:bf:d5:b2:80:02:7c:9a:90:ea:7f:
         2f:9d:55:b3:33:3a:84:ce:61:04:fc:d9:40:91:67:45:d6:32:
         86:fa:38:c5:59:e7:26:40:d4:b2:d0:be:86:22:a0:2f:c9:5b:
         85:30:05:1f:fa:ee:6b:70:01:15:28:96:95:09:59:25:45:ef:
         99:c6:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:02 2026 by rpki-client