Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/2e1a7be0-e9fe-3c35-bef5-57b0781994d3.roa
File:                     2e1a7be0-e9fe-3c35-bef5-57b0781994d3.roa (raw, json)
Hash identifier:          KL+zbMz60G9QbwiDB1zL30vKlpyrH6ew83oe0YfqkXE=
Subject key identifier:   A1:5F:66:2B:51:AA:02:AC:3F:3E:C1:28:20:33:86:B9:6B:B3:91:2A
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584EC20C69584E43362CFC30E580
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/2e1a7be0-e9fe-3c35-bef5-57b0781994d3.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     27735
IP address blocks:        206.48.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:69:58:4e:43:36:2c:fc:30:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=3e2c29b3-7ed7-45c5-b54d-f91c93161f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:68:b2:81:0e:16:63:61:4d:81:74:0f:ab:
                    96:4d:b1:ab:6d:09:e6:a3:4f:b1:f0:1d:2b:20:b8:
                    75:37:d6:25:9b:07:47:98:b9:9e:5c:f7:08:5a:35:
                    9b:37:f1:c2:df:2e:2e:06:d7:a6:80:e7:99:3c:bd:
                    15:08:bd:cd:3d:7f:50:df:90:73:44:e9:8f:b3:c8:
                    96:cf:a5:bd:17:ea:96:5a:ea:34:00:ca:89:af:e9:
                    bb:a9:87:22:26:c2:cf:11:e2:28:af:26:3b:46:f9:
                    b2:34:d5:d8:a5:87:05:dc:ed:3d:03:2c:41:21:81:
                    40:9f:66:5f:3c:c7:16:90:3f:d8:ca:fa:60:da:2c:
                    e6:17:8c:d0:42:fe:c9:75:24:a4:fe:73:95:f6:13:
                    37:de:78:3a:55:04:63:95:4e:57:f1:32:96:18:e3:
                    61:b4:d2:e0:62:d8:23:9f:73:27:90:68:e7:f2:96:
                    8b:91:ea:86:2d:2c:3c:66:8a:ea:fb:1c:70:25:b1:
                    01:cd:8a:b4:9c:c2:f4:bd:ec:67:6c:89:18:68:4a:
                    d8:51:22:b4:ca:ee:c2:0a:f8:e9:f9:bc:b6:c9:a0:
                    43:0c:eb:49:fb:08:f3:f9:9e:87:42:d6:6f:7b:f4:
                    a7:22:e7:b5:c6:21:7a:5c:f6:78:83:69:97:38:b7:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5F:66:2B:51:AA:02:AC:3F:3E:C1:28:20:33:86:B9:6B:B3:91:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/2e1a7be0-e9fe-3c35-bef5-57b0781994d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:69:88:01:e2:57:12:8a:35:b2:d2:23:41:d7:cb:9f:5c:e5:
         dc:7f:19:d1:a2:bf:b9:09:cf:fc:17:77:b1:70:8c:5a:5c:23:
         73:46:e8:12:a8:2c:c2:28:80:c6:78:6c:15:86:fc:86:76:ef:
         54:3c:51:f9:5f:e8:da:d4:b8:7b:c8:63:83:42:16:67:9e:67:
         72:8a:4f:b3:0e:52:e8:bf:e4:16:8c:e9:fe:cc:9d:fc:37:5e:
         f5:07:14:a3:37:02:c1:94:ce:dc:47:f4:a2:64:87:4e:06:1f:
         c9:7a:0b:6e:4f:ec:9a:68:ff:2f:06:1a:aa:08:6b:ba:4d:d7:
         9f:ac:d5:ab:ec:98:3f:ff:83:2c:dd:74:0f:26:84:5c:b1:83:
         f9:47:36:54:8f:4e:f9:10:02:f5:73:84:75:66:11:05:d8:36:
         6f:cf:b0:f3:c7:4d:60:c7:52:a7:d3:02:5e:87:e7:43:57:5b:
         5c:7c:9b:f5:c8:83:5e:f8:76:f0:77:d0:94:2c:d8:76:48:40:
         fd:e2:08:c9:d9:29:88:37:c3:89:ae:68:2d:e7:45:ed:59:25:
         5a:a5:20:45:c8:6b:e9:81:11:88:f9:be:cc:52:a9:44:88:bd:
         28:18:de:cb:20:e7:3a:50:7a:ce:8e:00:d0:25:e0:5a:21:6b:
         8f:93:1d:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGlYTkM2LPww5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm
ZTM3MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
M2UyYzI5YjMtN2VkNy00NWM1LWI1NGQtZjkxYzkzMTYxZjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAFosoEOFmNhTYF0D6uWTbGrbQnmo0+x8B0r
ILh1N9YlmwdHmLmeXPcIWjWbN/HC3y4uBtemgOeZPL0VCL3NPX9Q35BzROmPs8iW
z6W9F+qWWuo0AMqJr+m7qYciJsLPEeIoryY7RvmyNNXYpYcF3O09AyxBIYFAn2Zf
PMcWkD/Yyvpg2izmF4zQQv7JdSSk/nOV9hM33ng6VQRjlU5X8TKWGONhtNLgYtgj
n3MnkGjn8paLkeqGLSw8Zorq+xxwJbEBzYq0nML0vexnbIkYaErYUSK0yu7CCvjp
+by2yaBDDOtJ+wjz+Z6HQtZve/SnIue1xiF6XPZ4g2mXOLdIVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFfZitRqgKsPz7BKCAzhrlrs5EqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw
ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMmUxYTdiZTAtZTlmZS0z
YzM1LWJlZjUtNTdiMDc4MTk5NGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2
NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi
ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm
MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjCMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJpiAHiVxKKNbLSI0HXy59c5dx/GdGiv7kJz/wXd7FwjFpcI3NG6BKo
LMIogMZ4bBWG/IZ271Q8Uflf6NrUuHvIY4NCFmeeZ3KKT7MOUui/5BaM6f7Mnfw3
XvUHFKM3AsGUztxH9KJkh04GH8l6C25P7Jpo/y8GGqoIa7pN15+s1avsmD//gyzd
dA8mhFyxg/lHNlSPTvkQAvVzhHVmEQXYNm/PsPPHTWDHUqfTAl6H50NXW1x8m/XI
g174dvB30JQs2HZIQP3iCMnZKYg3w4muaC3nRe1ZJVqlIEXIa+mBEYj5vsxSqUSI
vSgY3ssg5zpQes6OANAl4Foha4+THU0=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:41:06 2026 by rpki-client