Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/55382e75-bb4c-3f5e-bf2e-68a9bb397040.roa
File:                     55382e75-bb4c-3f5e-bf2e-68a9bb397040.roa (raw, json)
Hash identifier:          dkjrH9liC5MOn8nHaNOK9M3xp27ZwbWEeMuyLKz0aJc=
Subject key identifier:   59:E3:E3:09:4A:2A:6F:76:1B:BA:8D:0B:30:11:46:3F:1D:CD:D0:12
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E1E445436F03173A20061CF00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/55382e75-bb4c-3f5e-bf2e-68a9bb397040.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     204670
IP address blocks:        140.174.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:54:36:f0:31:73:a2:00:61:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=0b9ebd0f-5e86-4a08-bbe1-70bcab0945f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:3e:a7:e9:45:13:60:e7:03:af:fe:0e:f3:
                    6a:fa:9a:bf:a7:aa:1b:dd:e0:9e:db:67:b7:ca:f6:
                    b0:03:90:7e:16:d4:fa:84:18:9e:e7:9d:fa:9b:e5:
                    bb:a8:58:ad:08:13:01:65:d5:4d:c6:f0:0f:e8:21:
                    c7:13:06:e3:27:8f:ae:77:4d:70:89:7d:6b:1e:06:
                    38:52:57:6d:ae:41:d4:5a:b7:a0:af:1c:e9:ce:43:
                    f3:f8:20:e0:0f:85:c9:8e:3b:23:df:60:a2:da:13:
                    c2:c0:18:14:ed:42:12:55:4f:aa:f3:1b:01:2f:79:
                    80:ac:56:c6:49:86:92:00:d9:a7:dc:0d:67:ae:02:
                    64:39:e3:9e:ce:cf:a9:28:68:e4:11:ea:81:c9:3d:
                    24:a8:af:10:73:66:0a:c9:98:59:96:f8:6a:a2:18:
                    c4:98:f8:57:32:c7:8f:1c:1a:a7:00:04:92:89:12:
                    e6:8f:9b:2b:66:b6:fb:f6:d5:18:70:f5:e5:33:9f:
                    c1:95:73:95:41:f4:31:0e:21:c0:96:be:7a:30:74:
                    71:78:aa:57:1e:0a:26:ab:0a:ce:c6:15:72:3f:e4:
                    b3:b5:69:7e:10:7e:88:95:96:be:90:60:b1:4c:1d:
                    22:a7:9b:56:26:68:3b:97:23:67:e9:c9:b9:5b:0d:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E3:E3:09:4A:2A:6F:76:1B:BA:8D:0B:30:11:46:3F:1D:CD:D0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/55382e75-bb4c-3f5e-bf2e-68a9bb397040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b0:f3:2f:74:c4:46:f9:f2:0a:05:b5:b9:78:ac:e1:c2:ae:
         e4:8f:0f:03:35:2a:f9:c0:4d:dc:ea:d2:99:19:d1:49:59:4a:
         f8:7d:cc:26:17:96:ee:e5:8c:ed:63:b1:61:21:23:44:1e:d5:
         04:16:f9:8a:b3:e8:39:3c:44:76:2c:7a:bc:b6:32:fb:2c:8b:
         f6:d0:32:bb:fa:fc:b7:8f:08:97:52:54:67:a8:d3:dc:a4:08:
         ce:1d:fd:5f:62:f2:50:42:08:f7:81:98:a5:5d:52:7e:cf:bf:
         d0:7c:bd:cf:4b:5c:fb:de:69:07:78:9f:a7:4c:36:d4:53:c6:
         45:06:1d:07:f9:03:91:69:1e:71:6a:7d:3c:09:1b:8d:e7:53:
         85:52:fa:8d:fa:03:b3:c9:c0:62:e6:11:0a:4d:cc:8e:cf:25:
         b4:ac:f1:57:d8:c4:98:5b:43:05:0f:8c:57:f1:ca:07:38:f6:
         a4:f5:c5:40:18:fc:4a:26:76:c2:10:38:4d:35:16:a1:dc:cb:
         6c:1a:7e:51:a8:d2:af:a0:f2:17:69:05:04:f4:6c:6d:98:10:
         81:27:bb:f3:67:4c:8e:f9:f8:73:50:75:65:19:c8:90:b8:35:
         a2:aa:d8:29:b7:84:5d:9f:f2:f1:13:44:ae:d5:2c:b8:73:76:
         3c:d6:8b:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFQ28DFzogBhzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
MGI5ZWJkMGYtNWU4Ni00YTA4LWJiZTEtNzBiY2FiMDk0NWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCI+p+lFE2DnA6/+DvNq+pq/p6ob3eCe22e3
yvawA5B+FtT6hBie5536m+W7qFitCBMBZdVNxvAP6CHHEwbjJ4+ud01wiX1rHgY4
UldtrkHUWregrxzpzkPz+CDgD4XJjjsj32Ci2hPCwBgU7UISVU+q8xsBL3mArFbG
SYaSANmn3A1nrgJkOeOezs+pKGjkEeqByT0kqK8Qc2YKyZhZlvhqohjEmPhXMseP
HBqnAASSiRLmj5srZrb79tUYcPXlM5/BlXOVQfQxDiHAlr56MHRxeKpXHgomqwrO
xhVyP+SztWl+EH6IlZa+kGCxTB0ip5tWJmg7lyNn6cm5Ww2KVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnj4wlKKm92G7qNCzARRj8dzdASMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTUzODJlNzUtYmI0Yy0z
ZjVlLWJmMmUtNjhhOWJiMzk3MDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKaw8y90xEb58goFtbl4rOHCruSPDwM1KvnATdzq0pkZ0UlZSvh9zCYX
lu7ljO1jsWEhI0Qe1QQW+Yqz6Dk8RHYsery2Mvssi/bQMrv6/LePCJdSVGeo09yk
CM4d/V9i8lBCCPeBmKVdUn7Pv9B8vc9LXPveaQd4n6dMNtRTxkUGHQf5A5FpHnFq
fTwJG43nU4VS+o36A7PJwGLmEQpNzI7PJbSs8VfYxJhbQwUPjFfxygc49qT1xUAY
/EomdsIQOE01FqHcy2waflGo0q+g8hdpBQT0bG2YEIEnu/NnTI75+HNQdWUZyJC4
NaKq2Cm3hF2f8vETRK7VLLhzdjzWi+c=
-----END CERTIFICATE-----
Generated at Wed Jun 10 22:09:12 2026 by rpki-client