Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa
File:                     e75d8978-0cca-3d04-885f-aabcb43ccc66.roa (raw, json)
Hash identifier:          W2PRLkEyUYX7e5LppQjEpchxhBz6HwXQ+3WSn7ymcNI=
Subject key identifier:   24:0A:FE:40:D2:5E:22:39:2C:B2:DA:23:AC:BC:5F:99:52:C3:D7:F6
Certificate issuer:       /CN=df156af0-49c2-46d4-906b-5cf25869e65f
Certificate serial:       010D0C9F4328584B03168B289B5F10D475071B80
Authority key identifier: B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     26548
IP address blocks:        140.235.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:8b:28:9b:5f:10:d4:75:07:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df156af0-49c2-46d4-906b-5cf25869e65f
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=372e8a5d-4557-4684-82af-946d5651af72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:a2:c3:33:95:33:26:89:51:ad:d7:77:cc:
                    58:8e:26:57:4a:db:9b:b7:4e:b6:ce:7f:f5:c1:b0:
                    c2:30:24:e4:d1:71:28:0c:c9:27:68:3a:9e:a7:9a:
                    ab:a2:59:61:76:94:73:c3:66:ad:52:43:e8:51:18:
                    59:8b:f9:21:b1:dd:74:88:da:dc:e0:23:49:2a:17:
                    1b:1f:46:f2:80:1f:73:e8:0b:30:8f:74:06:8a:7e:
                    8a:eb:dd:33:12:f6:a1:61:9d:b9:37:4d:2e:90:a3:
                    71:d8:85:ba:23:70:4b:7d:9a:81:95:3f:4b:24:ea:
                    7d:e9:20:39:1d:2a:02:78:30:31:ac:17:8f:76:2e:
                    c5:c3:51:c9:4e:90:c7:c3:3b:e6:ec:3c:19:ab:cc:
                    dc:a6:0b:8f:59:be:c3:02:24:01:89:f0:b5:f0:f0:
                    f2:f2:32:38:7c:78:e0:b0:02:d4:7f:67:78:f7:9b:
                    db:bc:27:dd:71:3b:9f:dd:79:b7:74:4c:8b:76:c0:
                    09:c0:7d:6b:06:00:05:7d:ae:af:1d:a1:97:aa:de:
                    44:1b:9b:35:38:f9:be:33:04:84:bd:4e:67:e4:dd:
                    1c:7d:ab:e8:3d:d1:e4:69:62:3e:ac:48:a9:fe:6a:
                    d9:ae:8c:bc:f4:ca:75:5c:eb:e1:f3:5d:12:e2:f4:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0A:FE:40:D2:5E:22:39:2C:B2:DA:23:AC:BC:5F:99:52:C3:D7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl

            X509v3 Authority Key Identifier:
                keyid:B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a5:e7:98:2e:a5:34:42:0d:d1:80:19:67:7e:ab:fe:0d:8d:
         4a:41:83:9b:37:62:4a:b6:d7:83:ac:67:5c:03:74:6b:d5:c0:
         c4:13:b9:6a:be:e0:9d:44:84:e5:2d:1e:fb:b0:40:50:b3:88:
         ba:bf:cc:4e:e1:43:1d:c5:dc:33:bb:3f:d5:45:10:e7:79:90:
         71:f9:81:6e:5c:0b:e7:08:bd:7c:69:e1:83:13:21:8a:5b:6f:
         ba:cf:8e:0c:c5:1a:2b:e4:ed:91:b3:f4:6a:73:b0:4c:12:8b:
         86:c4:c1:df:8c:e4:76:59:00:ed:ae:d0:28:d4:f8:61:ca:d8:
         2b:96:19:8c:50:0a:61:5d:6c:3d:f1:07:4c:e4:0c:f2:0f:84:
         c0:ba:1c:1f:09:fe:4c:f5:5e:96:fb:8c:5c:af:f2:aa:c4:74:
         1d:f3:68:18:da:13:da:09:ed:95:3c:0e:c2:81:29:c9:85:4c:
         36:15:bc:f0:b6:28:ca:a2:82:25:b3:ba:7e:ce:81:99:71:c3:
         27:ae:21:d9:07:46:57:5c:ba:b2:38:90:5a:02:10:4a:f6:a8:
         4d:ce:38:28:43:e7:2d:f0:29:62:4c:65:51:41:2e:14:5a:e6:
         d0:91:c2:a0:f5:4d:e0:8d:e1:2f:4f:a9:9c:ba:57:aa:21:c7:
         d3:93:a0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:12 2025 by rpki-client