Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/7e0c9d99-b35b-346c-8ca4-c2411d56f8d7.roa
File:                     7e0c9d99-b35b-346c-8ca4-c2411d56f8d7.roa (raw, json)
Hash identifier:          2jHPOqdLy7HEY87oomcjNNOoGnOxB8aa8KGG3YahyV4=
Subject key identifier:   3C:94:07:47:83:AC:1C:AA:CF:1D:38:CC:93:4D:ED:3A:7D:46:12:6F
Certificate issuer:       /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial:       010D0C9F4328584F74B8233D8A6CADF9075DCA00
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/7e0c9d99-b35b-346c-8ca4-c2411d56f8d7.roa
Signing time:             Sat 10 Oct 2026 13:00:13 +0000
ROA not before:           Sat 10 Oct 2026 13:00:13 +0000
ROA not after:            Fri 08 Jan 2027 14:00:13 +0000
asID:                     402898
IP address blocks:        140.235.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b8:23:3d:8a:6c:ad:f9:07:5d:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
        Validity
            Not Before: Oct 10 13:00:13 2026 GMT
            Not After : Jan  8 14:00:13 2027 GMT
        Subject: CN=4299c5f4-cd8f-4bee-8a7a-3b365aae5968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:7b:ef:99:d9:be:2d:ce:31:be:72:dc:e5:
                    f4:08:c1:6c:88:19:35:df:19:37:81:52:64:e5:cc:
                    d1:25:75:9b:47:31:db:46:0d:98:92:2d:53:65:f7:
                    56:bd:9a:ef:63:d5:c5:d2:3b:c8:e5:52:06:5e:39:
                    c2:bf:d6:8e:c2:7b:77:47:e6:d2:d0:ba:46:11:af:
                    5e:0a:cf:09:55:42:ad:18:3e:f1:b7:68:e5:33:5f:
                    69:18:81:1f:c4:28:fa:72:d9:12:19:c8:c3:3f:fc:
                    26:d6:69:18:45:e7:56:42:fd:de:2e:dd:9b:f5:90:
                    58:51:7a:4a:72:19:18:e8:84:23:8f:fb:c6:b3:70:
                    d6:96:6a:01:25:95:72:01:f4:eb:ee:35:ab:61:b5:
                    52:fd:54:98:fa:a4:47:d1:da:ff:ae:fe:78:fc:2f:
                    d7:49:09:7a:f8:e0:19:72:3d:03:87:40:9e:1e:86:
                    be:04:09:f7:1d:ea:fa:ec:3b:9d:9f:dd:f0:f7:ca:
                    45:b6:4d:b5:51:a4:0f:c4:84:64:d3:21:43:f6:87:
                    a1:cc:a6:8c:e9:39:eb:a4:b7:3f:6c:66:6b:c7:72:
                    fd:0b:45:9d:de:94:b6:20:b2:0c:4e:4e:da:c1:f0:
                    63:8d:56:a9:b8:e6:4c:ed:c7:44:dc:31:36:63:1a:
                    f5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:94:07:47:83:AC:1C:AA:CF:1D:38:CC:93:4D:ED:3A:7D:46:12:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/7e0c9d99-b35b-346c-8ca4-c2411d56f8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl

            X509v3 Authority Key Identifier:
                keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:84:d0:9f:e7:d8:2d:29:b9:ee:9f:e7:b1:f5:87:2d:59:28:
         15:76:c0:d7:65:fa:64:d2:eb:ed:48:60:e2:23:e1:a0:58:b1:
         46:d3:62:df:c3:a1:66:31:47:d4:0a:0d:e0:16:fd:fb:e7:90:
         4e:51:7a:8b:02:33:e9:a0:87:4d:ff:2e:74:a4:36:36:ee:18:
         ce:c2:26:65:35:9c:24:b9:df:6d:f9:41:0d:c1:fb:66:cb:19:
         2c:f0:6e:5d:e6:db:98:34:e0:c0:d3:3f:34:83:49:12:95:56:
         80:7c:ee:3f:19:62:7b:38:2a:e4:a4:23:f7:ad:4b:f3:1b:5b:
         51:24:fe:15:45:db:8e:7b:d1:6e:ec:fc:d5:0f:03:d5:55:77:
         4f:86:7f:b1:1f:a4:f0:4e:d0:48:81:68:89:e6:00:db:9d:a0:
         b5:73:c6:1b:61:f9:82:2c:29:5c:ab:33:a8:52:9f:49:01:16:
         61:39:9d:0c:06:49:8e:1e:c6:2b:40:6a:cc:6f:2f:d1:8b:f5:
         60:53:21:50:d6:ac:ff:3f:52:4e:54:7a:55:46:a7:fe:b9:ca:
         67:e0:bf:42:59:15:aa:32:57:ef:e7:86:50:fb:b6:81:25:7d:
         8d:62:b6:0d:a9:be:03:61:89:15:56:54:f8:07:d2:07:e8:92:
         d5:72:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:29:45 2026 by rpki-client