Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/6b3970eb-36ee-35cd-99fa-6d6d0e15be44.roa
File:                     6b3970eb-36ee-35cd-99fa-6d6d0e15be44.roa (raw, json)
Hash identifier:          OwK3cO8XvqIbor5l3KeBxkTFsrnxNuMmibTb8SPC1yE=
Subject key identifier:   07:86:90:99:05:C4:AC:E4:82:5B:D4:3C:32:2C:81:13:E5:03:14:45
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584B0A116A22078F2EDE63312300
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/6b3970eb-36ee-35cd-99fa-6d6d0e15be44.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     18464
IP address blocks:        140.235.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6a:22:07:8f:2e:de:63:31:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=fb7d47a6-4a27-4aa9-baa6-9f653984840e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:dc:a3:5d:55:57:59:a3:80:b1:fd:4c:a5:
                    06:80:fe:97:a0:a8:27:4b:65:66:4e:c6:ca:f4:52:
                    83:ba:78:ef:b9:73:d4:5d:7b:46:5e:9f:40:5d:59:
                    c9:b6:b9:80:f1:c3:c1:74:8a:c0:b1:e1:9b:9a:eb:
                    49:a8:4e:7c:96:13:69:00:f7:14:b2:57:ad:04:b8:
                    be:bb:00:8d:c8:f8:10:3a:60:4e:3f:19:bd:04:30:
                    80:58:e6:fe:fa:d8:ba:ba:75:24:8e:29:9c:94:10:
                    d6:8e:6e:30:ef:94:e9:8b:8a:bf:1b:b4:5f:62:c3:
                    92:e1:41:ca:04:de:ef:85:0c:54:a6:d4:14:f8:51:
                    ed:f2:8b:f1:c0:d5:0c:7a:04:1c:1a:51:30:bd:21:
                    9e:a7:97:09:9f:ab:86:f3:6f:a8:56:e6:40:66:44:
                    da:31:ca:e4:99:57:5a:88:14:42:8d:61:58:7f:4a:
                    b0:94:1c:6b:aa:c6:7a:eb:eb:12:8d:6a:5d:57:b0:
                    06:c9:30:9e:95:68:f2:f0:57:c9:13:d4:ca:38:b4:
                    56:d8:9f:74:b5:9a:43:27:66:13:de:43:b2:99:77:
                    bf:64:34:c3:15:4a:58:6c:d8:8f:12:43:17:50:73:
                    0e:75:1f:5f:ae:fd:67:db:f4:20:27:fc:c6:70:dc:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:86:90:99:05:C4:AC:E4:82:5B:D4:3C:32:2C:81:13:E5:03:14:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/6b3970eb-36ee-35cd-99fa-6d6d0e15be44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:42:d0:79:5e:a0:d6:3c:de:95:e0:fc:4a:47:09:43:da:
         0e:2e:ee:a8:e5:98:8f:e9:d8:7d:de:bf:2b:51:17:2f:b6:d2:
         cc:b2:c1:9e:a1:e3:66:30:2d:74:66:0c:46:70:ef:dd:b8:63:
         87:09:70:d8:5f:f9:b2:3b:d7:87:98:9d:67:06:ed:26:e6:fd:
         5d:7c:e8:85:5e:eb:26:de:95:4f:48:1b:84:37:48:b6:e6:50:
         27:13:70:cd:23:9c:b4:bf:0b:fd:7e:ab:bb:01:9f:a7:01:07:
         d8:88:b7:5a:d5:b2:91:b6:bf:eb:9d:30:6d:df:47:69:3e:7c:
         f1:94:75:17:33:32:85:e9:8d:1c:88:9b:12:2b:00:03:05:3c:
         73:c0:9c:c0:ca:c6:b0:15:64:ec:a9:30:17:f7:63:a0:f2:b1:
         d9:bc:3c:f5:c2:f6:d7:05:f6:af:0d:01:58:da:ff:c2:ea:54:
         af:6c:ee:ea:7b:05:72:65:75:71:32:05:80:11:e8:e0:42:e0:
         f2:0a:51:ba:dd:4b:1a:6a:73:9c:1a:47:bd:36:80:2f:9e:d1:
         43:4c:34:5f:18:4c:28:9b:7f:13:ee:f8:8e:4c:51:a7:7d:8d:
         23:bb:be:78:83:44:b0:75:eb:9c:85:ca:3a:e7:a5:9c:44:f4:
         71:e4:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 09:27:20 2025 by rpki-client