Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa
File:                     fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa (raw, json)
Hash identifier:          AektZO8lIZeB+loBW5m7ildjgN7oRqDvE9TGiJ3Xf4Q=
Subject key identifier:   D0:F9:D8:44:B1:44:57:A5:2B:34:91:2B:B1:D8:B3:CB:A1:42:CE:BC
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EF87CCB18A229762EA041AA90
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     7018
IP address blocks:        141.140.65.0/24 maxlen: 24
                          141.140.68.0/24 maxlen: 24
                          141.140.71.0/24 maxlen: 24
                          141.140.74.0/24 maxlen: 24
                          141.140.77.0/24 maxlen: 24
                          141.140.80.0/24 maxlen: 24
                          141.140.83.0/24 maxlen: 24
                          141.140.86.0/24 maxlen: 24
                          141.140.89.0/24 maxlen: 24
                          141.140.92.0/24 maxlen: 24
                          141.140.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:cb:18:a2:29:76:2e:a0:41:aa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=bb885b38-7fde-44c9-b8fe-0b0cfb7d67ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:67:fe:b7:81:82:ff:73:f9:86:68:c7:6b:f9:
                    44:d2:5f:40:f3:33:09:22:88:50:ad:40:a3:4d:2b:
                    a1:06:a8:32:c2:29:97:8b:29:4d:13:84:ef:7c:20:
                    d8:98:a5:40:4c:c2:6b:b3:bd:d3:97:b8:ac:f5:3e:
                    78:a6:c8:ca:2d:66:22:3d:72:88:f0:ef:8a:c8:b1:
                    4c:fd:dd:27:dc:8a:60:9a:d8:33:4a:87:1a:82:22:
                    56:78:6e:53:f7:c2:bb:3d:3d:7d:90:7a:80:94:ae:
                    b7:5a:e5:c7:81:1c:92:6a:9e:75:46:23:82:61:00:
                    5d:04:f0:76:ac:16:8d:ad:fa:e7:2f:7e:dc:a9:25:
                    8a:b4:23:1b:56:34:2c:e9:7d:1b:8f:6f:90:cf:51:
                    c3:a9:d2:4c:d5:09:ed:7a:fa:6d:9c:99:49:7d:1a:
                    93:57:cf:56:74:3f:4b:ad:50:dc:71:b8:e1:b3:d9:
                    24:c7:8d:fa:c0:25:a2:e4:93:f8:54:34:b1:50:33:
                    3f:a2:05:f0:75:2b:04:90:81:a0:b1:e1:8c:b4:68:
                    7c:36:03:45:62:9c:1b:ab:65:89:84:10:a8:32:7c:
                    a7:28:3d:19:a7:3f:57:52:e6:4f:b3:1f:fa:31:49:
                    b1:d2:fb:b3:18:34:6f:e2:c0:eb:33:08:f2:7b:3e:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F9:D8:44:B1:44:57:A5:2B:34:91:2B:B1:D8:B3:CB:A1:42:CE:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.65.0/24
                  141.140.68.0/24
                  141.140.71.0/24
                  141.140.74.0/24
                  141.140.77.0/24
                  141.140.80.0/24
                  141.140.83.0/24
                  141.140.86.0/24
                  141.140.89.0/24
                  141.140.92.0/24
                  141.140.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:35:82:4d:25:1c:a3:49:19:98:ac:59:75:22:2c:34:cf:09:
         31:b0:57:83:c8:7d:90:38:ee:6b:89:11:cd:ef:0b:29:97:61:
         50:a9:f8:9a:ed:41:84:7e:ee:fc:41:7d:1b:44:c8:9d:ca:74:
         2a:a6:98:1b:04:e8:11:18:b3:7e:83:cb:ea:7f:7e:98:75:6f:
         16:4c:a7:a6:28:d7:aa:d3:24:44:6f:9a:af:ae:fc:5a:07:89:
         05:53:26:66:93:3f:a3:db:29:e4:30:a3:df:10:ca:32:dc:e5:
         e4:b5:21:7b:41:50:bf:5d:ed:16:bd:68:c8:79:42:2b:3a:6a:
         e7:25:36:bf:96:38:dc:9c:72:80:69:d8:e7:e8:24:75:25:ff:
         82:14:fd:f6:67:22:af:73:fa:95:4a:54:e9:6d:83:8b:b5:f4:
         ef:cc:b7:fd:7a:27:aa:f9:87:f1:95:f8:0d:19:2f:4e:83:49:
         d0:ce:ae:ab:e9:39:77:02:fc:09:fd:a4:6d:1e:11:a5:60:9f:
         e7:98:d3:2e:73:13:37:73:29:45:ff:8e:5e:e3:cd:f1:ac:98:
         50:60:a7:c4:3d:d3:b2:6a:80:d5:80:b9:7a:52:63:ee:53:69:
         05:ef:e0:64:96:5c:d7:8b:87:6b:34:d5:77:3c:04:3b:38:bc:
         e0:1d:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:55:50 2026 by rpki-client