Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b/26e2d2ab-4c45-32ec-bf0d-079ccc60dae0.roa
File:                     26e2d2ab-4c45-32ec-bf0d-079ccc60dae0.roa (raw, json)
Hash identifier:          kHdyZYdtOTYB5Sry53ulBqbXrQkhJSWkAOOxZe5kLBM=
Subject key identifier:   CE:6A:8B:F9:C4:3D:89:A5:1C:26:AA:9E:7C:85:80:A9:3A:29:7C:DD
Certificate issuer:       /CN=b2a338ad-fc13-4bbe-98a4-b29dec7b592b
Certificate serial:       010D0C9F4328584EA67FE8E610F0B066829B7540
Authority key identifier: 05:AE:C2:85:4E:BC:0C:F1:52:7A:B4:67:C5:64:A5:32:07:8D:50:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b/26e2d2ab-4c45-32ec-bf0d-079ccc60dae0.roa
Signing time:             Tue 28 Jul 2026 16:10:25 +0000
ROA not before:           Tue 28 Jul 2026 16:10:25 +0000
ROA not after:            Mon 26 Oct 2026 16:10:25 +0000
asID:                     402823
IP address blocks:        140.235.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b/b2a338ad-fc13-4bbe-98a4-b29dec7b592b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b/b2a338ad-fc13-4bbe-98a4-b29dec7b592b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:7f:e8:e6:10:f0:b0:66:82:9b:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a338ad-fc13-4bbe-98a4-b29dec7b592b
        Validity
            Not Before: Jul 28 16:10:25 2026 GMT
            Not After : Oct 26 16:10:25 2026 GMT
        Subject: CN=1ec5cdb4-b37c-4d61-ae25-35a0e98d6990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e0:b2:a5:1e:bc:34:95:f0:bc:7d:40:e8:9c:
                    d0:47:b3:31:8b:32:43:56:85:61:3f:c6:f6:1e:0c:
                    11:8b:24:de:c9:ed:d6:cb:ae:f7:00:0a:34:22:49:
                    84:e2:d0:17:9e:05:e9:2d:01:96:03:8b:0b:9f:ac:
                    27:43:00:2f:10:50:3f:e4:64:94:70:43:6a:ec:c6:
                    f8:88:66:77:ed:c1:88:eb:29:00:24:23:db:5f:ee:
                    c6:4e:5c:1e:b1:6b:f1:a5:74:c0:65:af:c1:82:3c:
                    a9:92:12:c6:9a:36:e3:4e:74:4f:8b:b5:72:0d:21:
                    9e:a3:6f:fc:f3:b8:cb:70:b9:3c:54:3e:b7:82:b3:
                    b8:94:2a:8d:49:00:eb:00:71:08:8b:13:a6:26:63:
                    b5:ef:83:0e:cb:27:90:33:c2:4b:0e:c1:a2:f5:ee:
                    60:65:c4:be:ed:22:69:d7:1d:1d:80:f7:35:f0:df:
                    54:dd:ed:d0:49:26:fc:8a:c0:e9:6c:c9:3f:79:36:
                    34:48:12:0a:f4:a6:43:39:3a:c6:44:3a:32:30:e2:
                    7c:c3:14:bb:b3:db:fe:7d:b3:5b:cf:af:ba:93:8f:
                    4d:ba:cd:55:6f:46:f3:41:5a:cc:17:5c:69:09:9a:
                    25:eb:92:30:b8:da:39:b4:44:01:de:fe:12:aa:41:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6A:8B:F9:C4:3D:89:A5:1C:26:AA:9E:7C:85:80:A9:3A:29:7C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b/26e2d2ab-4c45-32ec-bf0d-079ccc60dae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b/b2a338ad-fc13-4bbe-98a4-b29dec7b592b.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:C2:85:4E:BC:0C:F1:52:7A:B4:67:C5:64:A5:32:07:8D:50:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b2a338ad-fc13-4bbe-98a4-b29dec7b592b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:64:2e:a1:a3:2e:43:3a:e2:5c:68:c5:6a:9c:f5:9d:63:
         b8:5e:d6:d2:63:9c:b6:ad:83:c9:c6:be:6c:08:08:8e:ba:be:
         07:52:ca:de:b6:94:3b:4e:35:20:f3:62:28:57:2f:44:34:8a:
         c2:79:4f:d1:31:0a:49:9a:6e:d1:90:f5:09:30:cf:e8:f8:50:
         62:b9:3a:28:fa:04:da:33:c3:c6:53:45:f4:5e:6d:97:e1:71:
         aa:bd:ca:72:4d:12:09:8c:2b:23:9b:47:f4:cd:46:30:16:23:
         9f:c0:bf:dc:5d:1e:c8:6f:a0:c6:38:a1:1f:16:2e:6f:25:bd:
         fc:68:31:da:2d:52:63:68:29:ea:ca:65:e7:8b:3d:a7:b0:66:
         b8:73:32:87:2f:34:8d:79:83:78:d6:01:d2:41:82:38:47:fd:
         0f:9d:95:87:ab:1b:20:33:a7:2c:60:c3:60:e9:6f:4b:96:f1:
         5c:38:1f:90:ab:95:00:8b:ff:2a:b3:d0:8f:47:1c:a8:e0:d1:
         9b:69:e5:e7:77:71:a4:d3:2d:75:39:e0:07:9a:1b:8f:c1:29:
         13:9e:d0:16:3d:79:c1:32:e3:da:41:a0:df:58:07:36:9d:0d:
         1a:18:eb:8f:3a:aa:1c:e7:a2:8a:1b:26:28:40:bc:86:81:c9:
         05:48:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 17:01:33 2026 by rpki-client