Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa
File:                     2e1742ff-4d69-38f8-846e-d7b85e429836.roa (raw, json)
Hash identifier:          HXsxWNKL4p/EWGHDPv7zgscE6RUG8iGqJ3A2/v+GDTk=
Subject key identifier:   44:42:9E:00:AB:5A:4E:48:4C:85:53:B7:45:C7:67:48:1F:FD:C6:9C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584CA5F7047A286C319F4835D140
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     399145
IP address blocks:        140.174.19.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:04:7a:28:6c:31:9f:48:35:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=e9d619ec-5dda-4ac8-a7d7-77b52fcc9082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:9e:ae:d3:eb:f5:2a:5d:22:56:03:2f:f9:
                    9c:fc:5a:16:1e:ec:57:36:ed:4f:0b:73:3f:4e:ce:
                    5f:17:49:2c:75:24:5a:08:f5:5d:d7:29:c6:26:d0:
                    1d:b0:08:1b:5b:93:63:04:22:0d:23:e4:8d:cc:86:
                    2d:92:df:08:c3:6f:ca:5e:79:78:ac:e7:c4:ed:00:
                    1c:29:1b:11:1a:34:d3:c1:5b:4d:b9:81:58:f1:67:
                    e2:83:8f:71:ab:7a:20:53:66:5c:1d:21:bd:36:66:
                    ac:9a:5c:6b:a9:d6:62:9f:98:0a:cc:5d:41:76:d1:
                    16:1e:68:df:e6:6a:2d:be:ab:b6:dd:3a:67:12:b1:
                    fd:79:78:bd:44:de:7a:5a:b4:f8:b1:b3:6b:6e:f2:
                    53:32:3d:d1:5e:04:e6:9f:1f:7b:62:3f:e5:cf:f4:
                    67:a4:f3:f7:ec:95:26:c2:92:0a:e3:ae:e6:ff:77:
                    93:b7:89:80:07:99:8c:1d:e4:91:08:ab:d0:b5:74:
                    de:d5:88:51:11:da:26:3c:04:f0:7f:be:70:1b:04:
                    65:42:02:4a:06:20:80:c5:97:12:2e:6b:82:46:d3:
                    c9:c4:5c:a6:8d:d4:e0:d7:f1:a5:ff:b2:84:3a:18:
                    8d:f4:cc:05:b1:c9:c7:96:a3:4a:8c:25:d0:80:4c:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:42:9E:00:AB:5A:4E:48:4C:85:53:B7:45:C7:67:48:1F:FD:C6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.19.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:9f:22:b5:90:e6:55:8a:d7:e9:8c:e7:68:7f:c3:82:b9:
         2a:18:9d:21:1b:13:da:e1:af:08:38:ba:d9:ec:ee:4f:e1:9a:
         6d:df:2e:15:19:0d:0f:c0:eb:f4:b7:17:7f:88:09:38:e1:30:
         33:1b:de:c3:f8:26:8d:4c:77:d9:2a:29:8a:ac:56:ad:4c:52:
         4c:0f:ff:60:03:e2:db:be:2b:b2:d0:a5:db:b1:f9:42:05:34:
         41:ab:f9:d4:35:aa:56:1c:02:54:56:4e:cf:60:aa:cc:c7:a0:
         a2:d6:a1:53:53:0f:b9:92:9b:6a:c3:93:82:ec:29:3e:27:1e:
         aa:ef:6d:0e:a5:70:06:81:c0:54:f1:d1:b4:da:cc:fd:e2:81:
         d9:2b:ff:a6:da:40:8f:49:79:11:83:f1:0d:81:94:cb:18:f1:
         12:e7:d5:ca:02:44:02:7e:44:47:33:63:48:25:2e:6a:c0:98:
         8f:d1:6e:2a:16:72:e1:19:f9:fb:59:98:1c:5a:23:f7:26:70:
         8a:e7:a4:7f:9c:47:6b:aa:1f:de:e2:0f:6c:54:a0:1c:93:db:
         8a:35:1a:b6:2c:ce:d4:33:70:f1:4d:13:27:2a:99:f1:5a:c5:
         14:1c:85:95:dd:4d:b8:3e:f8:df:c8:96:5b:52:d8:7d:54:8b:
         7d:08:1a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 11:53:30 2026 by rpki-client