Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1d8a10dc-4e60-3b51-82ef-4f9d9440171e.roa
File:                     1d8a10dc-4e60-3b51-82ef-4f9d9440171e.roa (raw, json)
Hash identifier:          09j0fpnxMVEjgdYv3xUXZdmJ1eX2DrjpGr/22Q8IiFY=
Subject key identifier:   B2:BD:D9:2E:06:56:27:F6:D2:5A:DF:6F:4D:A6:05:77:DB:BB:F5:09
Certificate issuer:       /CN=1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a
Certificate serial:       010D0C9F4328584ECF98B9BB61DC52B425A90665
Authority key identifier: F9:63:99:2F:D9:38:EF:61:DA:5E:1C:07:5D:D5:10:BA:FD:12:AD:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1d8a10dc-4e60-3b51-82ef-4f9d9440171e.roa
Signing time:             Wed 12 Aug 2026 09:28:34 +0000
ROA not before:           Wed 12 Aug 2026 09:28:34 +0000
ROA not after:            Tue 10 Nov 2026 10:28:34 +0000
asID:                     14618
IP address blocks:        140.232.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cf:98:b9:bb:61:dc:52:b4:25:a9:06:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a
        Validity
            Not Before: Aug 12 09:28:34 2026 GMT
            Not After : Nov 10 10:28:34 2026 GMT
        Subject: CN=66c48dc8-16a0-43ba-859b-36b506548ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:20:6a:e8:c0:9a:bf:21:c7:0d:ef:ce:0b:
                    4c:04:85:70:b2:3a:7c:0d:7b:2f:a0:bf:d9:59:b0:
                    69:9b:ee:6a:6c:09:1a:d3:18:7e:b9:bd:7d:64:25:
                    5a:c6:fc:65:2f:79:dd:37:52:ae:e5:d4:bc:a5:58:
                    88:7a:12:71:97:67:6f:e8:82:1b:1c:bd:56:5a:f0:
                    5f:8b:b0:06:61:85:77:69:90:d1:b4:47:1f:23:cd:
                    38:b7:cb:d1:31:9c:ec:6c:99:f0:fb:c8:95:0f:ac:
                    54:1a:1a:f2:ca:c7:57:04:a1:a4:f1:bd:35:37:17:
                    5f:8f:53:cd:25:25:55:6f:7c:77:fe:25:4b:2c:9a:
                    8e:c4:8e:0b:f2:1c:e5:c6:65:bf:4e:de:fa:95:28:
                    50:94:7f:b6:45:d6:05:9b:17:4b:ed:bc:17:fb:27:
                    af:a4:c2:cd:f4:f0:f5:44:6b:4d:34:28:41:c3:99:
                    73:21:c8:d2:98:18:69:fd:9d:b3:02:98:85:8a:c3:
                    2a:96:cb:70:81:20:22:b7:63:95:f1:79:9e:ed:1f:
                    be:9f:f9:0d:34:f8:8e:3b:5e:05:90:04:c8:4f:9b:
                    59:7f:a3:ac:f3:f5:a7:cd:42:1b:5f:37:be:9a:d0:
                    8a:ae:cb:2b:0c:2e:17:25:a5:e4:c6:b5:f4:0a:df:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BD:D9:2E:06:56:27:F6:D2:5A:DF:6F:4D:A6:05:77:DB:BB:F5:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1d8a10dc-4e60-3b51-82ef-4f9d9440171e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.crl

            X509v3 Authority Key Identifier:
                keyid:F9:63:99:2F:D9:38:EF:61:DA:5E:1C:07:5D:D5:10:BA:FD:12:AD:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.232.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:8d:ab:70:aa:b1:58:d1:1b:39:ce:93:8f:da:7b:1a:69:
         db:7e:7a:fe:f7:86:4a:f7:a8:b3:10:db:e3:0e:3d:93:48:a9:
         50:7f:e8:2b:52:b3:8f:86:d0:c4:7d:94:ef:3e:62:fc:a6:21:
         68:62:e2:14:e4:96:d4:3c:70:00:6c:77:4d:54:85:a9:1c:14:
         c6:83:27:50:9c:2c:6e:5f:61:f9:fa:db:38:be:f5:ca:1c:fd:
         43:91:d1:8e:49:ee:f4:59:d5:fc:69:ce:e5:bb:f2:7c:14:5b:
         97:4d:4f:89:d0:ca:2a:1d:6f:02:b3:40:11:33:36:d1:d1:15:
         52:7f:4d:b3:a2:43:27:65:07:f3:f0:c7:b8:9e:ef:ba:8d:3c:
         ea:ef:93:58:1e:17:70:70:67:7f:60:c9:0c:2a:94:1b:14:57:
         ae:3e:f3:74:c6:5f:ac:d0:77:5f:b5:cb:53:27:21:96:c9:14:
         41:2a:4d:98:b5:f9:c4:87:10:e3:fe:47:f1:bd:96:96:1a:71:
         f0:f2:c2:26:3a:6f:c9:40:7f:60:17:4d:b3:91:82:06:9e:43:
         86:39:f8:ad:c4:f4:6c:5a:9a:6b:3a:03:cd:b0:8d:cf:be:c8:
         f7:d4:a1:dd:54:20:87:39:fe:51:22:79:7a:23:68:7a:f7:ee:
         bc:d5:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:05 2026 by rpki-client