Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/6f2f2860-e4bf-3c61-88e1-421aad6bb4c6.roa
File:                     6f2f2860-e4bf-3c61-88e1-421aad6bb4c6.roa (raw, json)
Hash identifier:          4agexs9snvmN74bWOaPvFTL47AIrIr9wYy3slqoUGLI=
Subject key identifier:   76:88:6D:DA:45:68:9F:73:31:62:FC:FA:EF:91:17:14:CF:71:69:00
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584D2A74BC533113C6952BFB3F80
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/6f2f2860-e4bf-3c61-88e1-421aad6bb4c6.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     683
IP address blocks:        140.221.0.0/18 maxlen: 18
                          140.221.68.0/24 maxlen: 24
                          140.221.69.0/24 maxlen: 24
                          140.221.70.0/23 maxlen: 23
                          140.221.72.0/21 maxlen: 21
                          140.221.80.0/20 maxlen: 20
                          140.221.96.0/23 maxlen: 23
                          140.221.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:bc:53:31:13:c6:95:2b:fb:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=4ae8dda0-e10e-4b47-8ace-035ea66912d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7f:ee:86:4e:02:4a:52:22:81:ba:80:95:3e:
                    fd:b6:fc:be:e1:01:cc:91:6d:20:9e:75:2f:11:4d:
                    37:63:d6:7f:b4:6a:82:21:67:0f:30:8f:76:71:ba:
                    dd:e2:29:6e:04:95:f3:04:01:a0:5b:dd:c5:6c:43:
                    d6:c4:c5:ef:92:d3:a5:1a:c5:bd:cc:00:5f:ef:ca:
                    af:62:19:2e:9e:a3:36:4b:4d:33:49:3c:1b:2a:8a:
                    fb:02:5c:6a:a5:3d:90:4d:e4:73:c2:26:57:f5:2c:
                    67:a3:49:39:ad:c3:96:8b:89:63:d3:67:9e:b0:66:
                    13:ab:9a:7b:5b:e2:13:0c:be:c1:b6:aa:9d:0c:01:
                    5c:d2:eb:97:71:59:a4:80:14:ef:ef:5e:e3:5a:61:
                    bf:1d:3b:ad:a0:1e:32:b0:87:47:76:80:60:73:76:
                    f0:12:d6:a4:07:dc:69:fe:3b:1c:33:2e:ff:44:6b:
                    b6:2a:86:95:1b:8a:c6:5f:64:dc:55:d9:53:b4:f5:
                    a4:d1:38:ca:a0:34:ee:b9:fc:b1:25:6d:ed:33:a9:
                    41:fe:ff:58:be:8a:48:7f:dc:68:a6:d2:6e:73:b8:
                    84:41:98:09:b5:19:5a:e3:e5:9c:3a:af:8a:d8:aa:
                    20:75:0a:56:b0:b5:dc:08:bf:42:43:6b:dd:aa:f9:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:88:6D:DA:45:68:9F:73:31:62:FC:FA:EF:91:17:14:CF:71:69:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/6f2f2860-e4bf-3c61-88e1-421aad6bb4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.221.0.0/18
                  140.221.68.0-140.221.97.255
                  140.221.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a0:3c:3c:74:a1:08:90:36:06:61:2a:c0:68:94:42:34:bd:
         c3:8b:ca:37:98:30:e9:a2:f3:b9:49:4a:fe:d0:67:d7:5b:bc:
         b7:8b:a5:63:fd:2a:ba:fc:ac:c1:10:b8:f8:10:d2:f9:54:e8:
         cb:f2:c1:a0:f9:86:18:08:a4:81:8a:15:65:b2:c5:15:2f:eb:
         4a:17:8b:26:30:4c:01:6d:f6:81:0f:cd:a8:6d:7b:39:6b:e7:
         14:77:ff:90:76:70:10:87:4f:eb:01:86:f6:4e:1a:00:d2:4a:
         26:18:17:d9:21:60:02:2d:bf:5b:9f:64:03:5f:6f:43:51:bf:
         43:c5:f6:63:b5:af:28:d6:26:68:bc:7c:50:92:98:d0:fa:77:
         93:71:62:32:67:f1:d6:ca:d5:e8:2e:dc:14:c9:34:1e:1f:3c:
         fd:9b:00:cf:fe:b2:2f:9d:29:41:9f:0e:90:1b:66:d5:94:8f:
         63:e5:e9:79:11:55:13:18:c4:2d:46:72:29:55:cc:0d:53:48:
         2a:da:02:e4:e2:3e:cd:a1:03:14:bf:cc:01:2a:d7:e8:1c:50:
         49:8d:8d:86:00:07:5a:7a:9b:32:83:be:8c:ee:de:08:49:08:
         b8:12:2b:b2:e6:0b:c6:bd:18:7e:a2:47:6c:83:64:f1:54:ab:
         f5:04:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 03:35:48 2026 by rpki-client