Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f2faf556-c3ee-30e2-bb5b-ff9345a7cb0c.roa
File:                     f2faf556-c3ee-30e2-bb5b-ff9345a7cb0c.roa (raw, json)
Hash identifier:          4XN4BriM28Qh2YDcH8pa/TTjda3uww7dcAyDaB2NbGE=
Subject key identifier:   85:DC:8B:EA:62:70:C7:9D:5A:05:C7:08:A0:CC:64:80:D5:F9:AA:30
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E0C1ED4B2C871C7A248EE7490
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f2faf556-c3ee-30e2-bb5b-ff9345a7cb0c.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     10753
IP address blocks:        140.228.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d4:b2:c8:71:c7:a2:48:ee:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=20a4aee1-83dd-4b6e-8911-2a13c6fde53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:3e:8b:04:68:f0:ea:04:60:13:da:26:d3:
                    6d:be:00:5a:6c:81:67:2b:37:6c:68:1b:bb:53:d1:
                    04:ae:f1:76:e4:93:54:33:6a:5c:74:ff:29:3d:97:
                    e1:06:70:90:d7:74:38:18:3d:7e:83:5d:b8:13:88:
                    b3:4f:53:6e:9c:94:2c:57:81:cc:8e:a8:52:5a:56:
                    30:a7:d4:20:6b:6c:1e:64:79:9f:d7:64:ba:ac:ea:
                    49:67:08:bf:a4:af:91:04:d4:40:31:c8:ff:4a:92:
                    13:3e:c5:30:cd:0a:b6:bf:99:46:56:51:5a:12:00:
                    e1:cb:4d:73:e2:9e:c8:ac:0a:c0:b0:b8:ac:8c:97:
                    b5:31:e7:d6:e0:70:d6:fc:ed:01:b1:c2:86:ac:bd:
                    d0:a1:67:6d:50:74:b2:aa:be:7f:90:7e:41:c4:64:
                    63:a8:e4:2e:7d:2e:f3:a7:19:1c:19:48:e2:46:47:
                    8a:93:04:f5:b0:da:bd:41:0f:d5:a5:25:d9:f3:78:
                    c3:e8:ec:31:97:e1:7d:00:97:98:4e:93:00:f9:8e:
                    b2:01:c9:51:f8:13:3b:90:7d:30:a4:6b:15:f7:4b:
                    7f:7d:92:e5:95:20:7d:70:ea:64:f7:7b:cf:91:34:
                    25:05:c9:a0:08:21:09:4e:f3:49:3c:e8:3a:1c:9d:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DC:8B:EA:62:70:C7:9D:5A:05:C7:08:A0:CC:64:80:D5:F9:AA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f2faf556-c3ee-30e2-bb5b-ff9345a7cb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:6b:6a:e9:29:51:09:07:c0:5d:e4:cc:ea:53:15:ee:0e:
         7a:22:42:10:25:b8:72:7c:ae:29:12:a6:07:61:c9:1b:8e:a3:
         08:ef:9f:f3:0e:ee:8b:70:85:52:5b:f0:dc:12:c5:88:84:a7:
         9f:09:80:8b:14:99:cc:55:db:cc:9c:0d:3a:fd:01:4b:d5:21:
         07:0b:5d:48:17:a3:87:22:1e:0c:0a:68:c5:7a:07:8f:1d:6e:
         24:45:a8:07:c1:a3:f8:91:98:60:30:8c:01:c0:13:23:a5:13:
         ec:01:48:77:eb:1e:91:30:c9:22:03:87:e7:25:e4:3d:3b:64:
         88:dc:fc:11:df:4b:10:95:37:7a:ce:55:91:70:b7:d1:31:60:
         01:ff:1d:9e:23:22:04:f2:cc:08:7d:21:b9:8a:db:9d:8b:40:
         29:6b:73:1b:a1:a2:bd:33:f0:a2:60:55:98:d0:2d:e3:96:e0:
         61:ee:d5:d4:de:d3:17:86:86:ad:88:91:98:6b:e5:7a:ef:04:
         f9:57:2c:97:33:7e:89:61:04:6c:c2:76:72:3f:ed:c3:cd:11:
         f0:f6:46:27:fa:85:dc:3a:05:fe:2c:a1:8b:76:73:38:91:a4:
         c9:be:b4:fe:0e:9c:9e:7f:40:39:40:7d:b3:7e:af:c0:10:ca:
         68:da:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:06 2026 by rpki-client