Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/4997f797-97aa-3811-986c-7f1266630e66.roa
File:                     4997f797-97aa-3811-986c-7f1266630e66.roa (raw, json)
Hash identifier:          Xx9HU900cZjhWLn5gJiIjnJu+OxcqthPZdv6eXh7SMs=
Subject key identifier:   26:A4:DE:7B:EE:47:6A:68:2E:19:62:AE:E1:02:01:49:71:3C:CC:EA
Certificate issuer:       /CN=f5543cab-492c-47b2-869b-a727d610adf7
Certificate serial:       010D0C9F4328584DE8847A0D9C1761440583BD00
Authority key identifier: F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/4997f797-97aa-3811-986c-7f1266630e66.roa
Signing time:             Thu 21 May 2026 14:56:02 +0000
ROA not before:           Thu 21 May 2026 14:56:02 +0000
ROA not after:            Wed 19 Aug 2026 14:56:02 +0000
asID:                     16509
IP address blocks:        140.232.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:84:7a:0d:9c:17:61:44:05:83:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5543cab-492c-47b2-869b-a727d610adf7
        Validity
            Not Before: May 21 14:56:02 2026 GMT
            Not After : Aug 19 14:56:02 2026 GMT
        Subject: CN=3fa4a5f4-c9ee-44d2-a813-0b8a774b771c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:c3:fb:83:02:60:01:f5:7a:7d:94:7d:e2:
                    ed:58:e4:66:8d:87:e6:89:79:40:a5:72:6c:5d:d7:
                    7e:8a:f9:53:67:0d:ec:b0:94:b8:ca:17:e6:87:9d:
                    e0:1e:9a:c4:81:04:24:22:de:d0:20:3d:c7:9a:ef:
                    18:ea:18:ba:02:60:65:1a:46:38:2f:b3:96:ca:f5:
                    75:70:c3:d4:d9:6a:9e:cc:88:79:6f:4e:e4:5a:e4:
                    9f:de:6f:29:1e:be:97:15:05:c5:e3:9a:23:0b:2e:
                    34:2d:87:dc:8b:ae:b4:a0:5f:a2:67:64:8e:f6:eb:
                    11:aa:21:16:d5:31:06:c0:3d:ac:e8:a6:0a:96:55:
                    70:28:03:4d:b7:ae:b9:5d:9f:fd:d2:2f:4f:fa:58:
                    8d:34:eb:e7:24:9e:7e:7e:f8:89:5d:fe:6a:a0:8c:
                    7c:7a:a7:1d:33:cd:82:c2:ee:e1:82:2c:22:c4:5d:
                    23:b4:8d:bf:d4:55:3e:0a:0a:13:c4:4e:da:8e:83:
                    c6:64:f2:8a:57:46:f7:c6:71:f4:aa:6c:f5:77:2a:
                    46:bf:45:11:f9:d5:8d:0c:5c:1e:d7:15:63:e3:cf:
                    dd:3b:7f:f4:5d:46:c8:e6:1a:e8:d6:e9:c8:e3:98:
                    4f:2f:c4:c8:e6:6e:e9:02:c8:8b:49:74:aa:5c:c9:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A4:DE:7B:EE:47:6A:68:2E:19:62:AE:E1:02:01:49:71:3C:CC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/4997f797-97aa-3811-986c-7f1266630e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.crl

            X509v3 Authority Key Identifier:
                keyid:F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.232.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:1d:38:84:07:0f:d1:0c:8a:ff:7a:1b:46:65:5a:79:c3:
         bf:e2:c8:04:7b:fa:d0:7b:1a:3c:2c:40:c7:0b:6f:45:9e:d4:
         42:59:02:29:38:2a:61:64:10:78:1f:a1:04:a8:73:f0:c2:5c:
         80:8f:f5:06:b7:d0:22:d6:17:45:d1:8f:3d:59:05:06:3d:b9:
         d6:b1:a6:4c:af:72:f7:d3:42:96:ee:01:52:ac:73:2c:ce:d2:
         51:03:83:47:96:87:97:29:ce:2c:36:cc:65:7c:4a:e6:28:d2:
         89:a0:e3:62:6b:10:85:f2:5e:95:a1:04:eb:0b:65:1d:02:25:
         64:22:f1:07:f6:77:c0:fe:b2:b2:a2:06:ce:7f:4c:62:33:f2:
         54:a2:a6:34:20:f1:3d:02:82:7c:0e:2b:8d:4c:13:9c:62:f5:
         08:29:b8:e2:52:9f:83:17:ab:a3:90:f4:05:0d:e1:90:71:60:
         fd:4e:fd:bd:59:34:f8:f8:e8:54:8c:07:b6:0f:07:2e:c5:f5:
         d3:e1:4b:46:3c:a8:33:58:bd:3f:11:92:11:86:75:eb:bb:05:
         32:bc:20:b3:d0:28:18:e0:2f:24:29:44:c5:8a:34:5f:b5:40:
         3d:bb:bf:49:8c:ff:f0:3b:46:6b:43:53:09:02:33:d4:20:57:
         2d:99:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:02 2026 by rpki-client