Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/262360bd-4f2f-3956-9a65-491e201c900c.roa
File:                     262360bd-4f2f-3956-9a65-491e201c900c.roa (raw, json)
Hash identifier:          kxcA7a+qq5KL51oY2oXvfg6mGywWnqPPciUn77AcdsE=
Subject key identifier:   B9:A7:99:10:FA:34:7B:61:EE:06:FB:60:DD:42:1E:42:6E:E4:B6:A4
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E35FF0FDE617E0F0C5ADBFB60
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/262360bd-4f2f-3956-9a65-491e201c900c.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     3477
IP address blocks:        140.208.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:0f:de:61:7e:0f:0c:5a:db:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=90143ade-efee-497e-9eb8-b7564194d08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:5b:24:ae:6c:94:27:87:cb:19:e9:8a:b0:
                    08:57:be:18:49:40:bf:d3:f3:c8:58:6d:85:b9:ce:
                    f4:54:4e:4c:e0:18:e5:d6:b8:db:89:9f:eb:c5:42:
                    71:f3:6b:f8:78:d2:e1:39:a8:50:eb:ef:80:d0:d1:
                    ae:37:b6:62:17:af:74:ca:27:b3:3e:7d:8b:7f:2b:
                    e7:8a:f5:fd:e2:73:b3:3c:aa:f1:01:d1:b3:8e:62:
                    1f:b5:c1:6f:93:1e:ec:53:48:14:a2:eb:68:ed:d7:
                    d4:bd:7c:35:32:57:f4:80:99:95:4e:fe:84:16:6b:
                    cb:77:48:c9:94:06:7a:51:da:52:fc:41:e7:4c:ee:
                    ac:44:bf:70:71:fe:30:a9:b3:6b:c9:46:ca:49:01:
                    22:a7:31:54:af:17:d9:71:46:2f:8d:06:8e:c9:12:
                    ca:40:b8:e0:7f:ca:98:8b:a2:52:f8:ff:03:94:7f:
                    ea:c7:15:3d:25:80:c2:96:9b:f5:f1:d0:15:0e:82:
                    7f:c3:b5:d8:8e:cf:ca:d5:07:f6:8f:1a:ab:45:17:
                    85:90:e6:f4:c7:51:42:a4:46:e9:fc:76:c6:18:7d:
                    11:0b:dd:40:98:1c:0e:18:aa:34:94:20:7a:6a:a8:
                    b1:52:3f:1c:0b:74:4f:4c:78:6a:49:81:53:ad:64:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A7:99:10:FA:34:7B:61:EE:06:FB:60:DD:42:1E:42:6E:E4:B6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/262360bd-4f2f-3956-9a65-491e201c900c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.208.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:27:3a:8e:d1:51:a4:bd:45:68:88:88:3c:0e:9e:f2:88:8d:
         bc:70:bb:06:74:3d:58:bb:ed:d2:a7:f0:75:a0:07:66:82:22:
         29:c1:13:23:a7:f2:0f:01:3b:44:7c:41:01:1b:d6:6d:6a:15:
         31:1a:93:41:46:37:ae:87:6b:e9:33:eb:44:a3:c7:83:18:69:
         6c:ac:ba:d3:69:04:a1:a3:5c:0c:8a:f1:e2:09:23:00:b7:cc:
         a0:61:37:49:80:ab:23:b6:e1:b3:38:cc:29:90:71:22:b0:de:
         4d:7d:ce:75:a5:05:37:60:6b:a9:f4:52:d9:59:35:07:cb:b7:
         f5:8c:8e:8b:8b:ce:5c:a9:41:b3:86:ed:91:9e:b3:96:f1:1a:
         aa:f0:1a:14:fb:b5:8e:a0:ab:9b:e0:9b:0a:1a:58:6a:c5:10:
         8d:a8:8a:e2:a1:10:db:43:e0:e6:e0:cd:c0:5f:55:c3:05:51:
         8d:f6:cf:ba:5f:89:96:15:ea:3a:a5:49:c4:52:3f:ae:23:d0:
         3a:d7:c8:28:b1:99:ad:17:99:c7:d2:00:26:4d:09:61:7a:85:
         ee:9e:ce:51:74:26:cb:a7:da:60:d3:50:e1:60:7b:81:44:03:
         1e:9c:ec:76:38:ff:28:d7:85:05:48:9d:42:89:d7:2f:ea:3d:
         41:d8:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 23:03:31 2026 by rpki-client