Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/0139d04c-266f-31da-a534-5785d1d12eff.roa
File:                     0139d04c-266f-31da-a534-5785d1d12eff.roa (raw, json)
Hash identifier:          eMikNnZL8xIl4oSI9rz8dFRYARVzfUFx7VCcGQBsc8I=
Subject key identifier:   FA:A9:73:D1:A7:C5:B1:F7:94:83:CE:22:C3:39:79:9C:25:A5:3F:84
Certificate issuer:       /CN=c26bd691-4ee7-472e-b41f-ac02b34ddb1e
Certificate serial:       010D0C9F4328584EA79A0E495371EBD6BF719E80
Authority key identifier: 60:D0:E1:1D:71:00:37:A1:D6:C4:8D:70:B1:FE:5D:A0:12:A2:26:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/0139d04c-266f-31da-a534-5785d1d12eff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6079
IP address blocks:        140.235.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:0e:49:53:71:eb:d6:bf:71:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26bd691-4ee7-472e-b41f-ac02b34ddb1e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e89bae2c-8b4e-43ea-ade1-3d3da77c922e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:d7:32:76:52:40:d3:84:77:81:43:cb:6f:
                    72:81:04:05:e1:f9:85:45:4f:d4:87:ed:17:ad:f0:
                    67:69:a4:15:5c:24:e4:e7:89:1d:62:a2:bd:ab:8f:
                    74:86:93:7d:ae:9f:8c:61:7a:6e:c6:be:b3:01:8e:
                    1f:e6:39:2b:0d:d4:a2:07:7a:42:19:08:9c:2b:ca:
                    22:ad:d6:97:9f:4c:03:b8:a9:73:c5:3e:5f:f8:74:
                    a4:fc:db:8f:5e:11:dd:1c:1c:20:1e:d0:4a:80:cc:
                    f3:30:11:dc:13:e8:67:21:bf:bd:9b:18:e0:9c:05:
                    67:03:a3:63:2c:87:5b:2f:28:96:4a:21:4c:e8:22:
                    c4:42:4a:b4:fa:43:7a:04:bc:04:43:89:46:3c:ca:
                    19:d5:27:2b:32:71:38:c5:ec:f4:45:bb:ce:59:c5:
                    bc:34:5f:c5:1a:2e:e8:75:07:d4:df:b0:a2:e0:de:
                    10:a7:b7:b0:8e:20:fc:25:36:be:de:e8:3a:26:8b:
                    32:8a:5f:70:aa:91:0d:52:27:58:61:d1:ad:5e:a0:
                    40:55:cd:e5:6e:8b:b3:9d:fd:89:5e:3f:1c:fd:78:
                    2b:87:12:f5:fe:f3:94:dd:b0:0f:6e:72:a6:5c:5e:
                    b7:14:05:03:f8:b0:9d:d5:c1:25:3b:a9:43:e1:94:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:73:D1:A7:C5:B1:F7:94:83:CE:22:C3:39:79:9C:25:A5:3F:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/0139d04c-266f-31da-a534-5785d1d12eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.crl

            X509v3 Authority Key Identifier:
                keyid:60:D0:E1:1D:71:00:37:A1:D6:C4:8D:70:B1:FE:5D:A0:12:A2:26:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1b:f1:dc:5c:77:63:27:24:b6:4a:9d:78:2f:e8:ef:7a:b6:
         16:97:22:ec:78:83:d3:51:26:e3:9b:70:05:9c:64:15:e7:1e:
         f9:12:40:4e:c1:fe:5c:3f:e8:06:14:f4:a1:c8:c6:7a:6e:89:
         d5:31:6b:15:69:fd:22:4b:3b:16:da:ea:e6:fd:29:d6:ea:60:
         dd:d1:3a:2d:2d:f8:4e:4c:32:60:5f:4c:d6:1f:08:ca:8e:b5:
         7d:e2:2e:43:cc:78:a3:e0:38:0f:98:a9:97:2e:8c:2a:6f:6f:
         0c:37:f9:bf:af:85:ca:b8:bc:df:06:c0:16:14:c8:a8:52:1c:
         3a:53:26:85:5a:31:1f:79:31:ca:cf:ca:67:5a:3b:dd:3b:65:
         e4:9b:a4:80:ca:f0:90:99:02:19:11:76:7f:d1:94:b6:2a:04:
         4c:ba:eb:e6:21:ef:bf:41:c0:c5:c4:da:01:e3:ee:62:8d:71:
         ec:d7:02:28:0e:42:0c:a6:22:5b:d7:ac:4f:4a:b7:7a:ec:07:
         87:3b:16:89:64:40:70:33:1b:3d:20:42:60:6b:aa:7b:05:ed:
         a1:24:75:22:17:01:49:bd:37:cb:73:11:7b:50:79:d5:3b:2c:
         41:65:05:da:77:fb:f3:16:e5:78:5f:92:51:c6:62:15:9b:71:
         02:48:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:07:06 2026 by rpki-client