Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa
File:                     b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa (raw, json)
Hash identifier:          9nkqZfkYNfBE2C4KzGi1Ffb1KXgexh7aJrphK+K0bCI=
Subject key identifier:   B0:48:48:7D:73:34:DD:1A:76:D2:52:74:24:4E:8A:F4:A3:42:62:E9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE5E58101CB1B3DBB6C6CA00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        140.91.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:58:10:1c:b1:b3:db:b6:c6:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=bf0d1820-b04b-4bc2-808c-8aabe7d68125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:d6:ae:df:cd:e7:26:66:8b:e7:a9:a6:91:
                    ac:11:56:44:2b:07:5b:4d:8d:0a:94:2b:e5:87:20:
                    4b:11:c2:ca:22:06:61:26:5c:8b:bc:ee:b9:ac:df:
                    32:34:79:55:d2:36:42:45:57:77:12:2a:55:df:23:
                    1a:10:f1:f8:8a:b8:12:fb:80:08:dc:0e:6b:44:f6:
                    88:a1:11:1b:ec:6e:9a:33:32:49:95:05:91:99:74:
                    26:e3:3a:93:44:f8:d0:a9:17:d7:eb:aa:8c:51:5b:
                    6f:e2:42:7c:af:39:d6:64:e6:ee:65:fd:78:65:7b:
                    34:03:3c:04:74:1a:61:92:6a:f3:41:58:17:f5:64:
                    46:1f:d9:4d:5d:bf:6d:2f:42:85:69:68:0f:02:66:
                    dc:5c:b0:e4:7e:05:76:3d:44:03:88:b8:bc:27:a0:
                    93:48:65:59:b4:04:77:89:a0:d4:64:7e:ef:e0:35:
                    f0:dd:3e:0a:8e:52:40:cc:1d:f7:1b:32:e4:5b:4c:
                    27:2d:2e:2e:62:da:a8:6d:70:2e:8b:57:2a:04:5b:
                    8e:b8:ab:77:54:fd:5b:ef:3f:bf:7d:c4:fb:c1:7f:
                    f5:c8:01:59:67:76:fe:56:6c:cc:81:82:04:c1:be:
                    1f:a3:91:b3:f5:9f:8d:78:13:52:0e:97:fb:77:13:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:48:7D:73:34:DD:1A:76:D2:52:74:24:4E:8A:F4:A3:42:62:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1a48fdd-42eb-37f6-a294-a01f7a609dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:df:13:9e:05:c5:d7:c8:4f:71:20:02:ec:86:e1:b4:ed:
         1a:a6:d1:4b:2f:87:b6:36:8a:ca:22:9a:8c:d3:6f:9e:93:02:
         a3:82:94:2c:80:c3:ca:58:96:ef:29:35:64:46:93:a4:b8:65:
         a0:56:e7:77:1f:25:36:82:38:99:5b:c2:5f:ec:df:b2:cc:3a:
         9d:ec:51:9c:26:8e:1e:38:b7:dd:0c:44:d2:83:d7:b8:7f:f0:
         21:70:c6:6a:ad:2f:08:ca:c8:b1:a3:0a:02:07:1c:d4:44:65:
         15:54:5c:28:76:cb:09:39:d9:80:15:dc:24:61:17:71:a4:cf:
         64:99:04:55:9a:38:9f:c0:2c:a8:d1:67:fe:4d:f2:1a:cc:02:
         b8:19:6d:d9:ba:9b:4d:ee:2a:52:24:a6:87:09:34:d6:a2:8b:
         5c:f4:2e:eb:c8:ee:fb:70:a7:a0:88:24:2c:58:2c:b1:20:c2:
         8e:45:2a:a0:34:c7:e4:55:17:9d:4b:59:84:50:61:2c:29:31:
         76:6f:c9:55:2b:77:3c:fd:b1:24:80:06:f9:c3:d9:9b:ed:f8:
         b0:aa:3e:46:61:d9:81:e4:22:1f:95:dc:11:13:a0:04:6f:99:
         f9:6c:79:a5:47:c6:1d:d8:4d:b1:ed:c3:11:92:0c:ff:8e:23:
         d0:91:05:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:28:05 2026 by rpki-client