Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/d765e88b-bfd2-394c-98b7-91b979a15378.roa
File:                     d765e88b-bfd2-394c-98b7-91b979a15378.roa (raw, json)
Hash identifier:          qkSt9NKTNY5mfhH3UjRlMPrJMTyRqdzWreRVbXS+gJI=
Subject key identifier:   1D:38:3F:74:20:9B:3A:6F:EA:17:AA:90:72:C2:8A:E9:95:B0:80:87
Certificate issuer:       /CN=6233e94e-eef9-400d-a6d8-9dd6947fd483
Certificate serial:       010D0C9F4328584EF01CA432A5F0C79D07BEFE80
Authority key identifier: 75:4B:44:94:AD:9D:67:DE:2A:F2:A5:06:77:57:AE:FF:E9:7A:02:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/d765e88b-bfd2-394c-98b7-91b979a15378.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     402649
IP address blocks:        204.130.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/6233e94e-eef9-400d-a6d8-9dd6947fd483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/6233e94e-eef9-400d-a6d8-9dd6947fd483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:a4:32:a5:f0:c7:9d:07:be:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6233e94e-eef9-400d-a6d8-9dd6947fd483
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=6700aa04-3b3d-41fb-8897-6c41e3447bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:c3:00:df:d7:5b:f3:9d:70:e1:0a:47:3b:
                    ab:dd:8b:25:56:ed:f1:98:04:8c:b4:d5:11:53:dd:
                    6f:04:bf:32:fb:a6:6d:b8:07:9c:98:8b:ea:3e:c9:
                    df:d9:7e:78:6a:88:9d:1b:ad:eb:da:17:46:8d:b4:
                    16:f6:f9:14:44:bb:a6:0c:2c:bf:74:30:60:88:c8:
                    c8:9f:d8:87:b6:92:99:d4:dc:01:9f:d6:bd:aa:bc:
                    40:ac:0e:35:1f:e9:f4:47:e6:1f:07:57:3a:f1:74:
                    e0:8c:61:73:28:9c:2e:e0:f4:8f:49:43:37:34:24:
                    71:61:b0:e9:56:69:22:df:9e:e7:92:e8:52:ae:23:
                    b7:10:b9:ae:67:69:61:c5:fb:b1:f2:19:c4:22:6c:
                    6e:93:1b:a4:32:41:19:da:ad:de:c5:2c:51:d3:67:
                    e2:69:de:ab:dc:60:95:4b:f5:78:e8:46:86:c2:ba:
                    09:2b:2b:24:42:bb:9f:b3:4a:1c:e9:2a:f7:f7:ee:
                    33:e7:d3:4b:b2:fc:76:17:7b:e9:fa:e1:91:57:4a:
                    02:3c:35:28:35:25:3e:b9:b1:3c:62:4d:4b:40:5d:
                    fe:d5:d1:e4:2f:d1:83:c0:88:54:35:6e:1f:18:55:
                    e0:47:af:9d:91:92:79:7b:cb:63:6e:93:da:f7:5d:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:38:3F:74:20:9B:3A:6F:EA:17:AA:90:72:C2:8A:E9:95:B0:80:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/d765e88b-bfd2-394c-98b7-91b979a15378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/6233e94e-eef9-400d-a6d8-9dd6947fd483.crl

            X509v3 Authority Key Identifier:
                keyid:75:4B:44:94:AD:9D:67:DE:2A:F2:A5:06:77:57:AE:FF:E9:7A:02:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.130.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:11:1f:42:b8:f3:da:45:c4:43:39:d9:ef:10:e7:5b:a6:
         1e:2e:f8:c3:4c:f5:8e:9f:61:c9:b9:9e:c7:d0:2e:4b:f6:2d:
         5f:0d:49:93:02:91:16:ea:e3:0a:68:00:2d:57:3d:78:52:2d:
         9c:dc:67:51:a0:e1:31:1c:f1:d6:e2:1c:2b:08:46:ac:1f:a4:
         e5:87:3b:fb:ce:fe:9c:03:61:28:9b:53:61:11:b9:76:f0:de:
         2a:42:3b:16:ec:b8:7e:3d:d3:93:26:bc:89:b9:0e:c8:bd:01:
         b6:a3:06:3b:40:0e:61:d3:a6:c3:1b:19:4f:d8:d8:65:a9:88:
         1d:2b:22:d7:db:25:58:7f:73:29:9b:67:e3:82:56:f5:b4:27:
         3f:e6:20:c7:80:19:31:92:8b:07:ff:22:59:7b:eb:92:c7:a4:
         18:d6:28:13:31:06:42:74:03:94:0e:f9:e0:43:58:89:37:f0:
         06:ca:dd:71:1f:86:ae:3c:99:22:4c:47:46:f4:a8:7d:e4:57:
         5b:61:89:60:10:39:1a:b0:98:30:35:42:a7:30:14:34:79:44:
         0b:3d:bb:be:b9:c9:68:69:30:61:df:af:89:18:5b:81:6e:60:
         8b:9b:4f:15:95:ac:84:51:a5:ba:15:a5:77:a1:67:fa:39:02:
         23:5e:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:34 2026 by rpki-client