Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa
File:                     6790a335-83f3-3721-9670-94018063b0da.roa (raw, json)
Hash identifier:          XPFQpv6wksQxblJRiNvkSfkZN3E8rx4IBBVwWa2HIqU=
Subject key identifier:   AE:CD:AA:E0:9C:F0:68:3A:9A:F1:86:D9:BD:DC:20:17:BA:4B:BF:2C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F130244292AD47DF992A38B80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        140.91.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:44:29:2a:d4:7d:f9:92:a3:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=8a635e0e-67b4-4afd-8db8-f0e3cc7de6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:57:79:34:38:9f:24:1a:09:4a:36:6b:5d:
                    56:c5:be:9f:21:39:ab:f0:37:e4:0a:5f:b1:d2:04:
                    2d:ff:11:df:4c:01:28:ba:73:b1:40:97:d9:1d:be:
                    8f:ab:2f:c1:ae:17:8b:d8:40:95:bd:12:e5:b6:7f:
                    94:25:d5:d2:d3:7f:55:d1:c1:57:f1:da:80:ed:59:
                    34:a2:cf:e0:a2:d3:c8:9c:52:cb:ad:41:47:81:5d:
                    5c:61:f7:51:5c:f3:1a:bd:57:50:da:c6:01:23:93:
                    1f:58:26:ed:47:53:ed:da:c0:27:72:d1:5e:a0:30:
                    99:28:16:8d:94:73:8b:f2:3a:06:ae:cc:77:e0:4a:
                    eb:5b:44:56:34:f7:e7:b5:44:ae:9e:75:fd:59:ab:
                    2d:57:5a:58:59:c1:fb:d0:98:b1:fb:51:80:6e:36:
                    c8:04:c0:c4:da:fa:89:3e:eb:d5:fe:0e:42:ec:70:
                    0e:3e:49:a7:0b:70:b3:fd:d8:a5:9e:a2:f7:c9:16:
                    d8:e7:22:1f:8f:1c:88:23:64:e6:e6:81:36:6f:13:
                    db:e2:68:45:c1:e4:a5:87:ca:5e:81:30:6d:1f:24:
                    47:72:04:f1:56:9c:7f:2d:e5:36:cb:a1:b4:da:d0:
                    ee:7d:02:2c:d4:68:80:f9:c4:45:2c:04:2c:3c:f3:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CD:AA:E0:9C:F0:68:3A:9A:F1:86:D9:BD:DC:20:17:BA:4B:BF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:34:ee:83:db:f1:6a:5d:5e:a2:66:c2:ac:fa:7f:fd:85:ca:
         2b:42:9a:63:54:7b:32:6d:fb:cb:8c:2c:e0:b4:09:a3:00:45:
         a5:c4:67:59:36:16:5f:44:01:7d:ab:e6:dc:86:7c:18:c4:94:
         4e:44:c8:95:30:c4:97:7c:cc:14:88:e0:9f:07:f2:0c:d6:aa:
         4d:31:77:c4:91:60:c2:f8:07:13:d0:4a:bb:43:39:25:0f:5d:
         03:3a:df:b4:db:9b:8b:59:74:b7:83:61:f6:e2:41:9e:3b:3b:
         90:27:0f:96:05:19:99:41:f9:05:ff:1e:fb:50:ff:90:f4:ee:
         48:a6:57:e1:68:9a:3f:fc:7d:c6:de:45:a8:a3:91:e8:27:b6:
         89:19:72:60:66:8b:c9:d8:25:a2:0d:47:4c:51:f0:56:5a:60:
         da:de:1f:07:f0:bb:f9:73:54:ed:ef:13:f5:e8:86:02:58:93:
         2d:05:a7:8c:b7:b0:a8:7f:e7:03:bd:10:c2:32:ae:4c:bd:f1:
         26:bb:04:71:7c:6d:eb:09:43:18:8b:0b:1f:06:57:b1:77:1e:
         b9:98:6e:59:97:70:70:a2:b0:73:e1:f7:09:13:2c:86:7e:ec:
         bc:f3:22:12:aa:48:98:88:29:35:60:93:2e:d9:5d:2c:44:c4:
         9e:70:06:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:15:39 2026 by rpki-client