Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/4c9f30d9-6846-3353-b79e-104359a098d4.roa
File:                     4c9f30d9-6846-3353-b79e-104359a098d4.roa (raw, json)
Hash identifier:          Qu6sCeGn5qdTDZCawHRCHCY+2fq6JHZxsSjtrc5NBGI=
Subject key identifier:   45:27:D3:A6:BB:40:4B:15:5E:61:98:51:A7:92:9F:96:A3:FD:1A:05
Certificate issuer:       /CN=99312974-b017-47b8-b12f-499e1d12472c
Certificate serial:       010D0C9F4328584E0E81E6D7BCC72A744C713220
Authority key identifier: 92:FF:9D:66:68:32:F0:23:DB:05:ED:4E:CE:63:C6:4D:98:AD:45:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/4c9f30d9-6846-3353-b79e-104359a098d4.roa
Signing time:             Thu 04 Jun 2026 05:31:34 +0000
ROA not before:           Thu 04 Jun 2026 05:31:34 +0000
ROA not after:            Wed 02 Sep 2026 05:31:34 +0000
asID:                     397982
IP address blocks:        165.140.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/99312974-b017-47b8-b12f-499e1d12472c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/99312974-b017-47b8-b12f-499e1d12472c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0e:81:e6:d7:bc:c7:2a:74:4c:71:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99312974-b017-47b8-b12f-499e1d12472c
        Validity
            Not Before: Jun  4 05:31:34 2026 GMT
            Not After : Sep  2 05:31:34 2026 GMT
        Subject: CN=d0286ce8-5900-4306-a7d4-de753e25f65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:70:4d:3f:5f:23:f6:84:eb:08:dd:1f:b6:
                    d6:da:0a:53:0a:2c:05:80:82:1e:a0:a4:8c:7f:19:
                    e2:86:58:5f:cf:7a:86:90:1a:2c:28:f8:49:38:b5:
                    17:1e:61:63:00:31:2e:15:5f:79:f1:5b:05:b2:4c:
                    73:46:30:e3:97:1b:cf:b5:22:b4:e7:37:41:37:8e:
                    90:c3:16:12:82:9d:99:06:fb:af:bb:69:d5:aa:e9:
                    00:96:1e:9a:73:44:26:cb:01:6e:ca:ed:75:0e:4f:
                    e2:2b:45:19:40:5d:6c:43:9e:3f:67:4c:ce:24:9c:
                    51:b6:f3:63:25:36:d0:0a:07:38:5d:92:4f:c1:5d:
                    49:78:d0:f0:0f:57:86:df:6b:f7:4c:6d:07:1e:22:
                    e5:b1:93:d9:c2:fa:66:d5:53:4f:f9:9e:6b:e3:90:
                    c5:81:a3:7a:10:17:58:a0:c2:9a:be:0b:b7:7d:3a:
                    44:2e:b1:0f:aa:ef:22:47:83:4a:c1:ad:05:fb:13:
                    9d:90:96:9c:a3:b2:c2:00:eb:ea:5a:0b:9e:87:fb:
                    dc:30:f1:0c:fc:fa:1c:75:4d:81:af:3b:cb:9f:10:
                    37:f4:2c:ed:87:fe:f2:de:a7:7c:d9:64:eb:d9:49:
                    7d:ec:7c:dc:4c:bd:48:ba:d9:9a:27:5c:41:5f:c8:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:27:D3:A6:BB:40:4B:15:5E:61:98:51:A7:92:9F:96:A3:FD:1A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/4c9f30d9-6846-3353-b79e-104359a098d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/99312974-b017-47b8-b12f-499e1d12472c.crl

            X509v3 Authority Key Identifier:
                keyid:92:FF:9D:66:68:32:F0:23:DB:05:ED:4E:CE:63:C6:4D:98:AD:45:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a6:92:7e:ad:e1:f4:1b:17:e3:7a:61:eb:71:25:10:6b:a7:
         a7:ca:9d:52:10:23:e8:6a:2e:a1:d4:b3:59:7d:1f:0b:2c:d4:
         f1:19:83:d8:ac:4b:01:a3:62:09:2d:f1:b5:56:ec:ff:40:16:
         91:9c:63:b6:ce:44:dd:d1:60:e8:31:6b:95:fc:7d:de:0c:49:
         0b:9f:78:1c:06:e4:12:7f:a6:30:46:be:83:94:e6:45:fb:3a:
         b4:27:1c:a5:45:c0:f5:8b:2f:06:1d:12:1c:cb:7e:14:71:bd:
         6b:90:fc:85:04:37:a3:7e:c1:91:55:3f:bd:16:fb:b7:db:4e:
         20:9c:15:f2:7c:91:ca:77:d6:53:1c:44:7c:19:93:1b:ca:8d:
         20:bb:33:e6:8e:4e:3f:15:c3:e9:fd:17:d3:e6:bc:ad:7e:a9:
         d5:66:3b:4b:7e:6f:21:fa:df:f0:33:a5:59:74:f6:56:b8:ce:
         10:05:db:ab:f9:59:3e:65:f0:d3:9d:5e:56:36:24:c3:59:29:
         6f:05:cb:7c:2e:2e:a0:da:ab:e3:7c:42:54:31:d6:c0:f5:3c:
         d8:68:19:4b:60:46:61:21:53:0f:43:7d:94:2c:04:29:9b:b4:
         b2:44:26:cd:3f:6d:6f:09:a9:c0:3f:9b:ce:45:da:07:54:19:
         a4:5d:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:49:26 2026 by rpki-client