Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa
File:                     b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa (raw, json)
Hash identifier:          9UQASrP/sb5PDFtUl0QmehhXkXXqfJyBzpdQF1gBdeU=
Subject key identifier:   98:B0:D5:A3:5E:FA:84:77:0F:C2:CF:4B:49:BB:44:70:35:CA:71:84
Certificate issuer:       /CN=843d051d-a734-4f3d-9544-a5ed8b60c976
Certificate serial:       010D0C9F4328584CAE5731A074634983F9BA04C0
Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     48927
IP address blocks:        140.235.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:31:a0:74:63:49:83:f9:ba:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=fd0b0f14-564a-459a-8e78-c688dd5464c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:8f:7b:5f:bc:6b:31:27:d3:9f:a5:f8:99:
                    79:f4:99:4c:be:1c:37:6b:02:b7:83:e8:4c:12:5f:
                    91:c9:73:7a:69:c5:dc:a1:cf:db:ab:37:4c:03:e0:
                    6f:0f:3a:2a:fe:82:98:a2:8f:81:4b:b6:7b:8a:47:
                    55:db:58:d0:8e:30:38:f9:0c:0f:09:36:5a:cb:2e:
                    27:4a:f9:22:af:c8:ae:cd:48:d2:47:3d:4d:5f:1e:
                    bb:4c:ed:dc:04:39:9d:10:2d:fe:9a:82:cd:2e:13:
                    a5:84:a4:31:ff:b6:3c:ee:bd:48:9b:20:f1:14:b5:
                    3e:97:e9:8e:40:63:97:ff:ed:ce:9c:41:f7:9a:ce:
                    92:6a:0e:ac:ac:05:5a:25:9c:8e:03:6a:49:8b:a6:
                    90:5e:5b:8d:4e:9d:30:8c:d2:3e:7f:7d:7a:b7:8e:
                    22:0b:56:81:51:2d:5f:97:e8:f6:1f:a9:34:3c:b9:
                    2a:1c:1b:c0:02:dd:91:54:8c:87:78:97:80:d4:4f:
                    56:31:9d:da:c2:f1:16:d6:8d:b8:19:92:45:e9:b8:
                    ef:1c:64:09:72:6a:8e:7d:07:86:9b:4d:47:4e:e0:
                    5e:11:26:a9:9d:28:93:4b:dc:39:fe:80:b2:79:65:
                    a0:0d:e6:24:38:7a:99:53:5d:31:dc:65:bf:3b:cd:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:D5:A3:5E:FA:84:77:0F:C2:CF:4B:49:BB:44:70:35:CA:71:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl

            X509v3 Authority Key Identifier:
                keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1d:5b:e5:54:8e:ec:d1:c2:22:29:ed:f1:6e:43:0c:99:8f:
         7b:2c:8c:42:17:b3:e0:b2:b6:75:ff:7b:13:7a:2c:4e:33:b6:
         00:79:b2:85:f7:61:69:d9:f7:6d:f6:e8:ad:39:b7:30:73:c2:
         30:56:3c:62:72:b5:c7:ea:46:28:a8:1f:9c:fb:a0:da:8b:6f:
         79:1a:4f:e5:49:11:e5:03:1f:c8:75:6e:87:ad:e2:7b:65:b1:
         27:2d:1c:b0:4d:91:81:8a:fd:af:d6:fe:a8:16:f0:b7:ff:b3:
         a0:4a:db:42:0b:38:34:ce:ba:af:e0:b4:e5:1a:4d:80:19:4c:
         a1:58:9f:44:27:f7:a4:3a:3a:cf:2c:a5:57:d6:40:45:ba:0e:
         66:77:00:56:c8:68:c1:83:35:7c:49:b3:ce:0c:1f:3b:12:69:
         4c:94:01:1b:f6:fa:1b:ee:90:dd:f4:19:9b:d5:9c:dc:9c:3c:
         8c:06:d2:8b:dc:7b:60:88:41:f2:01:7a:ea:ec:d1:b7:a5:9c:
         be:61:d9:3b:55:27:28:a4:fc:59:88:ab:9b:7d:df:a8:5f:90:
         ac:20:89:50:e8:93:a8:f8:97:df:1a:ef:43:72:7e:d5:36:a8:
         c2:3a:6e:8e:3e:90:9b:60:26:eb:11:4d:e3:c7:bc:44:11:0c:
         c5:1d:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:20:50 2026 by rpki-client