Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eeedad45-a5a7-3ec9-a44e-84d24d05355d.roa
File:                     eeedad45-a5a7-3ec9-a44e-84d24d05355d.roa (raw, json)
Hash identifier:          GvJg+DhIz4aSyLGb/T5Gvl7eQDY5DAIabe141OHPfq0=
Subject key identifier:   32:30:52:FC:DB:B5:D7:33:CB:5C:8B:58:2A:8A:68:C4:BD:0D:5A:AE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232D4C9B9407907BEE6780
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eeedad45-a5a7-3ec9-a44e-84d24d05355d.roa
Signing time:             Wed 19 Aug 2026 18:03:42 +0000
ROA not before:           Wed 19 Aug 2026 18:03:42 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        140.174.40.88/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2d:4c:9b:94:07:90:7b:ee:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:42 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=5025e502-7d60-4035-b785-1325d9e5edc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:12:e3:76:37:1b:cb:39:8f:36:7e:16:9a:
                    ed:18:32:99:de:9e:01:f9:a4:eb:39:e7:72:75:a6:
                    f7:2d:29:32:4c:ab:84:79:4a:5f:fa:20:0d:0c:8d:
                    a5:9b:fc:0d:6d:0f:d6:6b:5a:d1:97:6e:9d:f2:4d:
                    0c:9a:ce:19:13:1c:05:77:77:55:b6:4c:92:d8:e2:
                    1a:fd:cf:9c:f0:40:2c:6f:ba:fc:9b:0c:8d:2a:e9:
                    78:ed:0e:82:28:5f:9d:43:cb:de:5a:4b:ab:83:eb:
                    77:e2:6e:6f:20:3d:01:d1:5b:2b:e0:f6:86:02:3b:
                    38:c3:04:42:80:9e:f8:3c:ec:af:16:dd:e0:ee:e5:
                    b9:bc:97:63:75:42:bf:ee:9a:c1:82:8c:84:82:66:
                    75:92:85:0c:5e:d5:ef:13:f1:83:5a:0c:5d:15:48:
                    23:33:e9:a5:f9:3e:b0:1f:d0:c1:4d:98:63:ee:c4:
                    97:1b:e1:57:8d:b1:bf:6d:0e:0b:f6:6d:0f:d2:cd:
                    10:73:af:7c:e1:cd:c7:a5:0a:64:62:48:3d:d6:c7:
                    ab:4e:58:e4:d9:4f:f3:cb:c5:30:db:05:1a:ec:84:
                    6c:5d:1f:d2:56:63:75:10:98:19:df:b9:91:97:20:
                    e2:8a:fd:33:62:76:c0:ac:2f:b5:f3:82:0e:7c:53:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:30:52:FC:DB:B5:D7:33:CB:5C:8B:58:2A:8A:68:C4:BD:0D:5A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eeedad45-a5a7-3ec9-a44e-84d24d05355d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.40.88/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:07:27:b7:c9:89:8d:f3:f6:79:66:e6:55:c9:38:98:2d:
         52:22:e5:26:86:bb:3b:87:bb:b0:a2:96:25:58:eb:14:12:22:
         6c:b9:68:fe:8f:88:53:4a:b2:eb:6e:32:2a:a0:12:f0:c9:82:
         d5:da:69:24:8a:83:5b:58:e5:ad:d2:a8:65:ed:03:30:83:89:
         58:15:72:34:ac:8f:04:b6:16:f3:b5:10:77:ae:27:2e:39:64:
         b1:88:07:17:b0:51:c5:e2:30:c3:9b:8a:1a:ca:a7:be:9e:b4:
         e7:ca:ce:d0:eb:06:1e:29:6d:d1:da:45:9a:11:2c:f8:22:b6:
         77:1e:d9:d8:9a:9f:1b:d1:47:38:7e:e1:ec:1c:1e:fd:d2:dc:
         13:0c:f2:85:11:8b:28:b6:37:a2:8b:a9:31:06:1c:69:34:f8:
         b4:a4:6d:63:a5:cb:b8:8e:cd:34:0c:dd:e6:38:35:1c:e8:02:
         69:98:e2:29:3b:80:d2:08:09:5d:cf:89:24:21:2a:60:25:23:
         a6:58:3a:0c:43:a6:89:c5:48:ff:ad:f3:57:13:ef:ac:fb:3a:
         03:be:44:a0:90:f1:90:97:21:67:6f:50:0d:3c:04:f7:d1:5a:
         c1:c0:5f:05:77:30:7c:80:6d:17:f2:76:d3:96:85:82:62:67:
         f3:bc:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:57 2026 by rpki-client