Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb/bf5121c6-e396-3e9a-8a12-2d7f65227a69.roa
File:                     bf5121c6-e396-3e9a-8a12-2d7f65227a69.roa (raw, json)
Hash identifier:          KkCU2R4T3KnC+pN0JMpOiUz4XAEdr3XVK6yVWdHNSqk=
Subject key identifier:   FF:77:4E:48:AC:35:B9:84:57:47:62:49:BE:A2:D2:6B:6C:E2:70:86
Certificate issuer:       /CN=e535a657-cb33-4a5e-a75f-9b2c430d2cfb
Certificate serial:       010D0C9F4328584F9383C0124F22C83FAB849D40
Authority key identifier: 11:C4:BD:FD:8D:07:B5:8D:32:BF:E7:3E:94:F6:3B:0E:86:C2:E5:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb/bf5121c6-e396-3e9a-8a12-2d7f65227a69.roa
Signing time:             Wed 21 Oct 2026 13:44:44 +0000
ROA not before:           Wed 21 Oct 2026 13:44:44 +0000
ROA not after:            Tue 19 Jan 2027 14:44:44 +0000
asID:                     400020
IP address blocks:        165.140.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb/e535a657-cb33-4a5e-a75f-9b2c430d2cfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb/e535a657-cb33-4a5e-a75f-9b2c430d2cfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:93:83:c0:12:4f:22:c8:3f:ab:84:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e535a657-cb33-4a5e-a75f-9b2c430d2cfb
        Validity
            Not Before: Oct 21 13:44:44 2026 GMT
            Not After : Jan 19 14:44:44 2027 GMT
        Subject: CN=0c0bc123-6391-4515-aff2-b5eb2c5c7ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:02:0c:51:3a:55:d7:3c:d5:f6:66:d7:92:dc:
                    cd:d3:31:c8:4f:ec:50:39:cb:a4:13:21:15:c2:0c:
                    f6:5b:e3:45:52:96:3d:6b:1d:cf:84:15:2d:68:dc:
                    ae:cb:b3:51:56:87:cf:b3:e4:3c:b9:28:cc:7d:7f:
                    0b:1c:9f:54:3b:56:7f:d4:c9:1b:c6:92:85:88:74:
                    61:76:14:a4:92:6d:8c:30:18:ef:fe:90:f4:25:bc:
                    96:d8:c3:f6:bd:4d:93:0b:7d:6e:26:64:e7:f8:67:
                    75:e2:ce:df:05:08:c1:e6:7f:1f:26:37:d8:2d:63:
                    57:e5:0a:da:98:9f:5e:f1:e0:92:78:bb:ea:42:86:
                    e1:12:c8:3c:8b:94:f2:2d:26:a1:15:24:a0:86:72:
                    cb:94:38:d4:ae:8a:61:bc:42:f7:88:06:ce:ac:d5:
                    72:61:7d:55:70:9a:65:fe:62:f1:cf:e5:34:e8:f3:
                    56:e5:e7:95:2d:cc:1a:0e:e7:4f:ba:07:36:a4:20:
                    7d:35:3a:ab:cd:4c:21:73:f2:77:ab:3e:f3:2e:ba:
                    1d:5a:9f:9f:6b:e1:35:5a:e5:13:c8:ca:13:87:d3:
                    b4:4a:59:27:64:38:2c:14:fb:d4:fc:26:1e:e5:f9:
                    b5:ba:8e:ef:4c:2f:f7:ba:cb:f9:0c:4d:03:64:f5:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:4E:48:AC:35:B9:84:57:47:62:49:BE:A2:D2:6B:6C:E2:70:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb/bf5121c6-e396-3e9a-8a12-2d7f65227a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb/e535a657-cb33-4a5e-a75f-9b2c430d2cfb.crl

            X509v3 Authority Key Identifier:
                keyid:11:C4:BD:FD:8D:07:B5:8D:32:BF:E7:3E:94:F6:3B:0E:86:C2:E5:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e535a657-cb33-4a5e-a75f-9b2c430d2cfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:18:ab:f3:97:73:05:fb:55:30:ed:8b:17:a4:84:2d:91:03:
         5c:06:13:9c:77:0f:00:89:3f:36:88:c5:62:e7:03:75:24:6c:
         89:7b:16:54:9f:59:cc:fc:d2:13:59:49:01:4c:a8:8d:ff:6e:
         2d:6d:64:22:ed:11:04:f8:a7:77:c4:ed:f2:de:8a:71:6f:33:
         e5:1c:42:3b:ab:a1:82:15:ca:cd:13:7c:93:be:b6:57:fe:97:
         bb:41:ea:6f:c4:2e:09:3b:a6:cf:e7:e8:1a:02:f5:52:0e:1f:
         5d:1d:03:36:50:3c:35:ac:3f:0f:1b:be:e4:44:c1:2f:cd:8a:
         3d:bd:61:fa:15:d6:65:f7:93:af:79:01:51:46:d4:b2:15:1f:
         c2:b4:66:c2:23:c2:e1:c4:c9:9a:1f:9b:2f:3c:52:23:65:9a:
         4b:41:68:8b:fe:d9:3a:d2:3a:84:b0:06:59:2b:51:80:71:7e:
         24:51:2c:6b:7e:54:20:d8:74:45:43:d8:55:34:88:ce:5d:fe:
         f4:04:8d:67:7a:b4:de:af:ab:89:91:57:09:d4:45:3b:ac:ab:
         50:59:50:0d:de:3a:92:f7:98:75:d8:45:40:63:bd:a6:51:91:
         4e:5c:31:bf:34:f9:94:64:7f:8b:0c:14:cd:df:81:b1:56:38:
         28:e3:1b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:35:53 2026 by rpki-client