Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7c815f92-8336-3191-8b9c-2dbbc2d0fd2c.roa
File:                     7c815f92-8336-3191-8b9c-2dbbc2d0fd2c.roa (raw, json)
Hash identifier:          /7vBkAW2LAY4PmKOpaIo4pQT0FVIy08gKfVeFEukCZ0=
Subject key identifier:   13:2C:13:30:2D:EF:7A:43:40:2C:C1:A6:28:0E:0A:62:AA:88:2D:57
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584EA7871E8EDFEF0A0F504F7080
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7c815f92-8336-3191-8b9c-2dbbc2d0fd2c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        141.140.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:1e:8e:df:ef:0a:0f:50:4f:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a777a993-5173-4d13-9f7f-e724203ca7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:2c:36:dc:5a:d3:e7:93:6d:c1:99:87:3a:
                    95:a6:ff:30:c2:b2:b0:da:2a:53:57:98:2c:3c:28:
                    b9:7b:ed:3f:a0:85:26:b1:97:ff:96:0f:09:c3:8d:
                    29:09:55:d0:c0:bd:b7:aa:e9:b5:4f:d7:cc:34:69:
                    ce:59:61:b8:bc:51:1f:25:39:4d:b0:b1:be:57:97:
                    39:2a:84:99:9e:83:5c:ec:93:9c:9e:32:39:ae:d5:
                    f9:96:9e:96:ba:18:26:67:6b:5c:20:f8:ad:b2:00:
                    ba:49:65:ac:ca:da:e8:72:c1:90:a1:9e:a7:1c:0c:
                    26:73:c2:98:8d:aa:a6:56:67:94:ec:9f:d1:9d:e9:
                    ae:90:5e:20:6b:65:d0:75:9a:44:a3:98:3e:ad:ca:
                    c1:8e:4e:28:89:2e:dc:69:04:71:01:65:f5:be:53:
                    55:97:c9:db:12:07:42:2e:7b:4d:b1:93:bc:d0:84:
                    ab:8e:99:cc:73:c9:70:9c:ed:1d:31:29:a4:a5:4a:
                    46:a0:c8:5e:e8:34:91:52:f7:09:06:3f:37:96:d8:
                    76:fb:a1:35:a6:bf:03:c1:c0:e7:e8:10:68:2f:ac:
                    1e:88:74:43:d4:78:86:19:18:5f:c7:a0:e1:10:cd:
                    80:df:b8:3c:47:bc:8c:c5:e0:42:6a:59:51:02:ed:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:13:30:2D:EF:7A:43:40:2C:C1:A6:28:0E:0A:62:AA:88:2D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7c815f92-8336-3191-8b9c-2dbbc2d0fd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:54:7b:5c:5c:2c:38:4a:7f:93:66:4e:82:a7:11:a2:88:
         be:7b:6e:84:51:d5:a0:05:84:62:bf:dc:72:c8:8b:ae:a5:95:
         12:2b:6c:23:8e:69:94:a3:35:0a:9a:bb:46:8b:2f:98:bb:4c:
         07:56:de:f2:5a:2d:d8:c3:e6:29:ca:97:7a:42:c4:e7:c7:78:
         b0:a3:26:ee:e0:c1:e6:da:f6:65:f7:d7:ad:ec:a3:4c:02:9f:
         b7:43:11:71:2b:c8:70:77:5a:f1:05:ef:77:7c:f1:33:92:0b:
         27:ad:e8:98:0c:55:34:ea:0b:10:85:75:1b:d5:4e:6d:e4:fa:
         03:fb:b7:82:6d:5a:06:3e:4c:da:c2:60:5a:e8:93:33:17:17:
         cf:d6:85:0e:d5:40:cb:68:0a:d6:09:f5:cb:0a:13:2b:a0:52:
         8f:4b:98:c8:6a:40:93:6f:e4:95:3f:fe:e5:e5:77:40:ec:6c:
         a7:6d:ff:9c:ad:8d:d5:f7:8a:b6:c4:98:09:e1:7d:30:51:35:
         65:7c:76:b2:b1:6b:db:b2:12:2b:2c:50:45:4f:d3:af:d9:0d:
         1b:22:d4:97:ad:88:0d:33:40:f1:b6:ee:8a:7d:e9:bc:39:83:
         92:5d:b0:83:aa:f1:02:08:21:9f:b0:6a:de:1f:1a:2a:fa:21:
         ba:e1:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:45 2026 by rpki-client