Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa
File:                     b153b99a-878c-3725-84b3-ef7b5da07271.roa (raw, json)
Hash identifier:          bKSM8iNezvWguoM6gkm6n8pq7Q3CGhSxAWpymn37PUo=
Subject key identifier:   F8:44:40:07:D3:B8:29:B6:AD:86:94:38:9A:E9:FB:27:1E:E4:3C:50
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB1D8AC06A3FA2D1877A120
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        140.91.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:d8:ac:06:a3:fa:2d:18:77:a1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=e47ba3f8-3821-47bd-82b0-4ccbcff9da29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:58:d5:64:fc:3b:d6:88:ac:69:08:b5:46:
                    aa:70:44:58:b8:3d:97:9d:fe:93:8e:d0:94:5b:1d:
                    a0:a7:65:c6:48:e7:d8:f2:1e:14:18:48:06:3d:68:
                    af:b0:d0:ab:08:6b:7f:67:5d:3b:2a:84:e9:e5:82:
                    43:94:b1:82:f3:e0:b3:f3:43:6e:b3:82:37:2a:59:
                    13:41:0e:4b:b2:11:e3:69:d6:8f:17:ac:67:34:f9:
                    6b:ea:ff:f7:fa:f0:52:6a:a1:81:c6:f5:11:e1:e4:
                    17:fe:3a:3f:4f:0c:35:bf:e7:ab:f2:9d:d2:f8:2e:
                    f9:4b:eb:01:8d:01:d0:51:69:a4:f7:43:6e:71:d2:
                    b0:64:66:9c:05:c2:c6:59:ac:e7:08:05:c9:a7:81:
                    a1:f3:c4:62:c3:6f:db:0d:da:f5:6b:09:2a:e0:13:
                    ef:f4:74:6c:72:80:8c:b6:20:bb:4e:7e:3d:d9:3b:
                    0e:d8:cf:3a:68:a0:1d:ac:4d:76:c7:66:57:08:ff:
                    25:39:90:1a:38:1b:8e:f9:74:b6:5c:7f:a0:4b:46:
                    dc:cd:7f:98:05:b2:74:2a:5d:76:95:44:83:4c:05:
                    6d:0b:55:9b:98:23:49:fb:bf:55:3f:64:d5:26:fd:
                    9e:09:5e:ec:44:dd:c8:ad:26:05:da:a3:83:8e:d1:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:44:40:07:D3:B8:29:B6:AD:86:94:38:9A:E9:FB:27:1E:E4:3C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:08:34:a9:17:01:7d:6a:ad:0c:b4:a9:86:25:7d:03:0c:
         89:c3:36:41:0b:54:0a:7b:a8:17:b6:a8:60:18:31:20:86:12:
         a7:57:14:8c:4c:ad:93:a7:3e:54:cb:c3:d5:b7:dd:5a:72:1a:
         77:80:7e:e2:b6:99:3e:56:eb:a7:82:0d:cd:29:d9:b2:98:56:
         94:fc:94:fb:a1:b6:13:24:7c:4c:a7:49:9a:72:25:22:db:e1:
         86:5c:1e:07:52:d6:9d:e2:34:39:df:ee:88:85:bd:57:4b:00:
         2d:28:c1:0e:0d:2e:2a:dd:09:ef:3d:6e:48:28:a9:cb:b8:e6:
         1e:fc:b4:3b:72:6b:a9:4c:51:ce:ed:96:c5:64:80:2c:60:75:
         60:a4:88:08:8b:94:55:77:0c:26:dd:4b:e3:06:c7:78:de:0a:
         77:e5:73:f8:9c:f8:61:a3:f0:8b:cc:03:de:aa:d3:1d:b4:8f:
         cf:23:fa:76:d3:89:d6:6f:26:e6:7d:b0:fb:b8:7d:51:a6:12:
         13:d7:6a:74:ab:6c:27:58:0f:c9:34:d7:27:2c:ed:fe:e5:d5:
         e7:e3:9b:db:8f:d1:f5:e5:b8:c0:31:d3:1a:28:f5:a9:a3:42:
         1d:e3:38:cd:3c:df:be:58:14:dc:14:a4:07:55:dd:ac:bd:1a:
         04:70:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:43 2026 by rpki-client