Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/ba367943-a576-3b9a-96d6-3876050d4ec1.roa
File:                     ba367943-a576-3b9a-96d6-3876050d4ec1.roa (raw, json)
Hash identifier:          kSZkSj6RuCvkTXTzRjUBvhRx+pm8/OAkOp26RuGgIIk=
Subject key identifier:   64:3E:AE:1D:7F:8C:F4:09:E0:27:F3:9F:FB:F4:E5:61:78:D4:22:DB
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F4328584E0A6FEE5ACC751D05A4251140
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/ba367943-a576-3b9a-96d6-3876050d4ec1.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     59920
IP address blocks:        140.235.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ee:5a:cc:75:1d:05:a4:25:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=ba69ea38-760c-495d-8368-21f259614322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:a1:3b:b3:8a:5c:c9:63:ac:fb:93:0c:05:
                    36:27:9e:04:08:1f:5a:8a:32:8b:d1:48:f4:2e:7e:
                    88:98:21:1e:41:6e:a9:72:ce:17:9b:4d:ae:cc:6a:
                    68:b8:8d:d7:c3:ca:c7:b7:9b:0b:72:4a:e4:74:17:
                    ef:c9:c3:2b:f5:df:af:57:30:56:89:fb:9a:2e:7e:
                    bc:86:07:ce:75:2e:4a:93:22:b8:e1:b3:ea:de:f6:
                    eb:54:6e:c4:2a:67:f5:c9:3b:b5:bd:9e:10:21:83:
                    b1:f0:76:fb:fd:c0:68:31:c2:73:98:96:2c:3f:0c:
                    f8:6d:7c:f4:37:39:b7:5f:ab:e5:39:a6:31:27:0f:
                    40:7c:f2:ba:af:c2:69:d0:02:0e:88:a9:4b:c0:ec:
                    a9:e0:5a:24:1c:49:79:63:e2:53:e1:40:a0:06:2c:
                    56:a7:eb:6e:45:9a:63:4b:1d:4d:ab:b6:fb:5b:30:
                    df:51:3f:5f:3a:89:b0:68:c4:c6:5b:a3:9d:9b:81:
                    cb:4c:ee:f9:ab:36:63:48:9e:4d:6f:b2:81:11:a9:
                    84:b5:63:e4:6b:b9:69:57:eb:fb:7c:2b:e1:dd:10:
                    f6:c8:e8:6d:b8:ed:23:da:7e:27:4a:95:83:7a:36:
                    aa:5c:2d:50:69:17:00:6c:d4:4f:04:5e:ec:a4:df:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3E:AE:1D:7F:8C:F4:09:E0:27:F3:9F:FB:F4:E5:61:78:D4:22:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/ba367943-a576-3b9a-96d6-3876050d4ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:16:14:fb:20:ef:dd:b4:04:ec:88:d4:98:ad:78:5e:02:
         6b:bd:75:06:5a:af:d5:af:9f:1d:73:f4:4a:32:d4:54:94:df:
         2f:54:64:fb:78:41:30:29:dd:3e:90:ff:51:74:ae:fa:23:ea:
         e3:c0:26:32:8c:f8:0e:60:42:b7:48:01:8e:ab:38:2a:86:c6:
         ff:40:9a:bd:f6:a0:eb:81:31:7c:bb:a0:79:c3:b9:7d:11:68:
         ef:f4:42:4b:76:49:74:8d:b0:56:ee:e6:a2:e5:dc:3b:35:9a:
         ce:1b:30:a6:bf:e0:e6:ad:63:be:b1:02:4a:e8:75:84:c1:8a:
         85:21:0a:b6:b0:3d:be:74:75:44:2b:17:93:ee:da:32:2c:1d:
         17:23:f7:34:ad:da:d9:05:00:02:d0:f4:86:7d:cd:9d:ed:f9:
         7a:76:b2:6a:97:0a:29:cf:83:08:34:90:ce:43:ab:65:aa:99:
         68:19:9b:aa:43:72:6c:c2:fe:b8:1b:17:6a:2f:ec:55:ac:32:
         94:d6:81:b2:e0:b9:9d:43:1d:c2:d1:42:c8:f3:2c:a7:bd:e6:
         d4:dd:63:28:07:28:98:0c:dc:8f:17:94:47:4f:2f:c9:a3:bc:
         ba:d8:17:a4:92:57:66:9a:a5:73:eb:6c:10:86:28:aa:8c:f7:
         db:aa:b4:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb+5azHUdBaQlEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkyMDkyZGQtNzQ1Ny00MjY1LTgwZWUtYzQ0NzQ5NmE0
MTRjMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
YmE2OWVhMzgtNzYwYy00OTVkLTgzNjgtMjFmMjU5NjE0MzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lGhO7OKXMljrPuTDAU2J54ECB9aijKL0Uj0
Ln6ImCEeQW6pcs4Xm02uzGpouI3Xw8rHt5sLckrkdBfvycMr9d+vVzBWifuaLn68
hgfOdS5KkyK44bPq3vbrVG7EKmf1yTu1vZ4QIYOx8Hb7/cBoMcJzmJYsPwz4bXz0
Nzm3X6vlOaYxJw9AfPK6r8Jp0AIOiKlLwOyp4FokHEl5Y+JT4UCgBixWp+tuRZpj
Sx1Nq7b7WzDfUT9fOomwaMTGW6Odm4HLTO75qzZjSJ5Nb7KBEamEtWPka7lpV+v7
fCvh3RD2yOhtuO0j2n4nSpWDejaqXC1QaRcAbNRPBF7spN+8GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQ+rh1/jPQJ4Cfzn/v05WF41CLbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIw
OTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3NDk2YTQxNGMvYmEzNjc5NDMtYTU3Ni0z
YjlhLTk2ZDYtMzg3NjA1MGQ0ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDkyMDkyZGQtNzQ1Ny00MjY1LTgw
ZWUtYzQ0NzQ5NmE0MTRjLzQ5MjA5MmRkLTc0NTctNDI2NS04MGVlLWM0NDc0OTZh
NDE0Yy5jcmwwHwYDVR0jBBgwFoAU52n324FmfZ3Lk+ns0XF96zrFDHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIwOTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3
NDk2YTQxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOtKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIrFhT7IO/dtATsiNSYrXheAmu9dQZar9Wvnx1z9Eoy1FSU3y9UZPt4
QTAp3T6Q/1F0rvoj6uPAJjKM+A5gQrdIAY6rOCqGxv9Amr32oOuBMXy7oHnDuX0R
aO/0Qkt2SXSNsFbu5qLl3Ds1ms4bMKa/4OatY76xAkrodYTBioUhCrawPb50dUQr
F5Pu2jIsHRcj9zSt2tkFAALQ9IZ9zZ3t+Xp2smqXCinPgwg0kM5Dq2WqmWgZm6pD
cmzC/rgbF2ov7FWsMpTWgbLguZ1DHcLRQsjzLKe95tTdYygHKJgM3I8XlEdPL8mj
vLrYF6SSV2aapXPrbBCGKKqM99uqtOk=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:59:20 2026 by rpki-client