Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/2ef565c9-6479-335e-b932-d44332947858.roa
File:                     2ef565c9-6479-335e-b932-d44332947858.roa (raw, json)
Hash identifier:          YpaRjbh2sBlXzxjzYKCJIkINLXNrj4/F3INbn7SyXkg=
Subject key identifier:   D6:D7:18:DA:25:E7:BF:5F:30:A4:02:9E:3D:49:90:75:35:6F:28:47
Certificate issuer:       /CN=5f0271af-0900-4d68-9a01-e446c3910a39
Certificate serial:       010D0C9F4328584E5BDE19F45D2B7E6C333AA480
Authority key identifier: 92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/2ef565c9-6479-335e-b932-d44332947858.roa
Signing time:             Wed 01 Jul 2026 22:34:35 +0000
ROA not before:           Wed 01 Jul 2026 22:34:35 +0000
ROA not after:            Tue 29 Sep 2026 22:34:35 +0000
asID:                     5650
IP address blocks:        140.235.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:de:19:f4:5d:2b:7e:6c:33:3a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0271af-0900-4d68-9a01-e446c3910a39
        Validity
            Not Before: Jul  1 22:34:35 2026 GMT
            Not After : Sep 29 22:34:35 2026 GMT
        Subject: CN=9b017625-528e-44b1-b188-7501f8baea3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:98:f2:7e:ef:f2:5a:07:8f:c2:29:52:af:
                    7f:01:fd:26:6d:4d:3f:07:94:6f:5f:e9:6c:db:1d:
                    19:b8:08:33:b4:63:b7:99:0a:c3:3f:a2:28:6b:5a:
                    9a:2f:ea:08:82:f4:82:ed:47:c1:9e:53:be:6d:11:
                    e1:4d:fb:aa:ad:b1:86:4f:eb:14:0f:a2:74:69:3e:
                    3b:04:cc:31:a4:70:3c:92:46:8e:f7:2c:cf:b0:43:
                    7e:8c:28:a1:29:81:16:67:a2:da:23:df:26:cf:ab:
                    ac:2f:fb:6b:5f:27:3d:57:b1:72:62:0c:72:7f:74:
                    91:3a:98:b5:64:96:2f:f8:27:d9:2b:fe:aa:b8:78:
                    76:ae:5f:13:0e:95:5a:e1:d7:26:a2:b6:70:7c:e8:
                    ce:fe:0a:33:ac:f7:74:bc:65:d5:13:5d:f9:e0:11:
                    15:d6:6f:1e:83:3d:f1:c0:33:6a:82:bd:1b:52:eb:
                    90:14:a3:95:8a:0d:84:df:4d:5c:7d:ee:a4:b1:ac:
                    41:c6:b2:14:49:6d:20:6b:fe:8a:9d:85:6d:27:c3:
                    69:27:f1:87:29:c4:23:4e:83:67:82:c5:6b:bc:87:
                    a2:f1:bd:bd:a9:71:e9:62:f2:4e:92:08:39:c5:2f:
                    08:04:35:b2:4f:58:e1:3a:87:bd:7e:30:59:d6:40:
                    81:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D7:18:DA:25:E7:BF:5F:30:A4:02:9E:3D:49:90:75:35:6F:28:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/2ef565c9-6479-335e-b932-d44332947858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl

            X509v3 Authority Key Identifier:
                keyid:92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:5d:39:cf:4d:27:7c:18:db:20:fb:e4:64:48:4f:3d:f1:
         d6:33:57:18:0a:39:63:14:33:df:e1:97:77:28:20:50:10:6c:
         82:fb:29:29:c6:e6:b6:0b:26:b6:c0:53:79:1a:bd:f8:57:9b:
         b3:0e:0c:f8:a8:06:7b:38:9c:d9:7a:6e:dc:c9:34:6d:4f:b8:
         55:ad:ae:3f:d9:c9:b0:51:91:f9:04:48:48:24:2a:c7:9c:a4:
         b9:90:66:7a:55:41:0e:d2:d2:91:0a:cf:f5:02:0b:85:4f:a0:
         07:7e:43:43:0a:2c:1e:94:d4:83:cd:28:1b:ce:34:01:94:42:
         88:7a:60:cc:c4:64:f3:14:b2:fb:f1:7c:cd:36:04:1a:07:f8:
         bd:8d:9b:45:d2:d0:83:c3:9b:39:6b:d1:bc:f7:ea:94:57:a6:
         82:9f:b1:7a:24:cd:d9:17:1e:ca:73:31:61:fe:85:dc:ec:6f:
         dc:46:05:61:14:4f:4c:18:ec:42:7f:98:91:3d:4d:8d:09:f5:
         76:b0:57:35:61:b6:a3:c3:67:95:e1:db:51:3d:46:48:57:f6:
         45:17:95:0e:2d:24:bc:bb:13:7a:5f:19:33:5a:b2:54:72:b3:
         25:9a:2b:6a:9c:8b:cf:3d:7d:04:4a:3e:61:8c:bc:ba:73:dc:
         5c:17:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:47:15 2026 by rpki-client