Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa
File:                     63ce919a-8c24-37d5-b6be-92e17635aec9.roa (raw, json)
Hash identifier:          zgILpGtxH6PrmMwUsZLW0sSOj7ZCg4nTOp4ubHwKNWM=
Subject key identifier:   0A:F8:22:64:05:F5:E7:00:45:DA:F7:6F:53:F1:2F:A0:6A:E7:86:55
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EA79288EFA6A50084CD1D7BC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        141.140.64.0/24 maxlen: 24
                          141.140.67.0/24 maxlen: 24
                          141.140.70.0/24 maxlen: 24
                          141.140.73.0/24 maxlen: 24
                          141.140.76.0/24 maxlen: 24
                          141.140.79.0/24 maxlen: 24
                          141.140.82.0/24 maxlen: 24
                          141.140.85.0/24 maxlen: 24
                          141.140.88.0/24 maxlen: 24
                          141.140.91.0/24 maxlen: 24
                          141.140.94.0/24 maxlen: 24
                          149.143.128.0/22 maxlen: 22
                          149.143.132.0/22 maxlen: 22
                          149.143.136.0/22 maxlen: 22
                          149.143.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:88:ef:a6:a5:00:84:cd:1d:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=401aaa14-ab99-4222-9e36-bbf87191852f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:56:33:df:d9:30:dc:77:46:88:1d:7d:50:09:
                    d1:8e:8d:7d:e8:f9:d1:f7:f2:42:e7:8f:d1:b4:ec:
                    5f:b5:19:18:00:7a:f9:3e:6d:fa:44:22:bc:2b:cb:
                    d6:8b:67:39:35:c5:21:1b:4b:60:5d:f9:16:63:d9:
                    5b:92:a4:90:34:06:10:41:f7:b1:80:98:fe:33:b8:
                    ae:0c:1c:21:16:9f:2a:22:aa:c3:77:f9:83:43:01:
                    28:1f:8d:69:90:cb:17:45:d7:a1:bc:52:57:51:d1:
                    4a:c5:93:d6:a9:27:30:2e:c0:c1:f5:40:c3:b9:d9:
                    1f:bc:94:e6:e0:ae:1d:c2:94:05:c4:61:34:c9:10:
                    d0:79:7d:1b:46:b3:a0:c0:ba:be:7d:88:da:bf:8d:
                    13:1c:c1:ea:45:d4:60:ff:38:de:15:a3:a6:08:87:
                    00:80:53:6a:9a:c6:9d:5f:44:48:ed:73:2d:75:45:
                    2f:a5:fa:87:a4:39:8a:a5:65:c4:1d:53:ae:5b:6e:
                    08:f7:85:6e:7b:4c:8e:e3:5b:d8:60:5d:1c:d4:64:
                    53:67:91:56:c4:c2:27:20:45:48:65:ad:83:5b:f8:
                    d6:4a:1b:98:44:c8:f0:ed:61:f9:02:d1:ee:1b:b9:
                    11:d6:d5:b6:e9:18:a1:6b:4c:8b:b2:ed:1a:48:a3:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F8:22:64:05:F5:E7:00:45:DA:F7:6F:53:F1:2F:A0:6A:E7:86:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.64.0/24
                  141.140.67.0/24
                  141.140.70.0/24
                  141.140.73.0/24
                  141.140.76.0/24
                  141.140.79.0/24
                  141.140.82.0/24
                  141.140.85.0/24
                  141.140.88.0/24
                  141.140.91.0/24
                  141.140.94.0/24
                  149.143.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:46:a7:b7:c1:e0:ac:be:ed:f7:6a:83:0e:4f:d9:41:d9:
         85:e8:59:dc:28:bf:b9:d0:ea:86:d9:19:81:2a:93:c0:b6:4e:
         9c:98:ec:74:e0:06:0b:95:c9:51:ac:a5:e6:a5:09:6a:18:c1:
         87:2f:43:da:99:59:61:88:11:9b:b4:b8:f3:a2:82:7a:ac:49:
         32:12:cd:79:2a:69:19:f7:72:0a:aa:1c:05:1c:cd:be:e2:63:
         aa:59:b4:d1:b4:45:51:33:e8:0d:0c:7f:0b:82:f3:46:b5:ab:
         1a:5a:c1:5e:ed:cf:95:11:c0:28:5b:39:ec:2b:4a:d9:7e:56:
         dc:92:36:03:da:00:a5:01:7a:4e:07:64:55:7f:88:47:c6:f6:
         64:71:6c:28:b3:51:90:c1:ec:19:41:0c:1c:94:04:e9:28:e0:
         5e:27:f0:21:4d:d8:13:d3:31:03:45:c5:52:32:f0:8c:1e:85:
         ca:64:97:eb:0f:f8:3f:0c:5e:22:6a:20:eb:34:e9:80:69:b3:
         06:d3:66:01:69:41:1a:aa:e0:4d:87:50:88:15:01:06:ed:da:
         a4:4b:d8:85:66:c9:b2:f2:ec:c1:03:df:bb:fe:31:cd:53:94:
         57:2a:4f:01:e5:a3:41:e9:fa:c7:0e:f8:f1:dc:1c:35:1f:33:
         43:8f:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:05:35 2026 by rpki-client