Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/9d7cc95d-425d-3537-afef-cdb072121f20.roa
File:                     9d7cc95d-425d-3537-afef-cdb072121f20.roa (raw, json)
Hash identifier:          0ozsJga861PXYOOYm8jOPQrc8DzKwiV6KrhrR+8RPTI=
Subject key identifier:   B1:45:F1:43:1A:B3:B1:7E:A4:AF:13:F6:71:7D:E9:D5:35:3E:B1:37
Certificate issuer:       /CN=7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2
Certificate serial:       010D0C9F4328584EAE81A3864768A5FC8B89AE00
Authority key identifier: CC:9D:71:42:C5:AF:62:84:18:95:EE:25:BE:54:C8:60:AC:B0:ED:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/9d7cc95d-425d-3537-afef-cdb072121f20.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     174
IP address blocks:        140.235.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a3:86:47:68:a5:fc:8b:89:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=aad48f23-fbb1-40c6-90e7-ed7125de7195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:3e:ad:a0:d6:09:a3:8b:a6:3c:89:fc:ba:
                    2a:16:5d:75:49:a4:4f:50:e1:65:05:d5:69:77:e6:
                    be:29:a5:5a:8c:ae:96:3c:f5:1e:64:85:a7:2a:9e:
                    ab:6c:36:2e:10:00:98:a5:5d:a7:e5:dc:fa:f9:da:
                    c9:0b:23:fe:a3:15:63:b9:c0:0b:ea:07:41:e6:82:
                    74:bf:3e:e2:03:1c:71:cf:e4:9d:93:d6:0d:b6:75:
                    77:b7:50:05:f4:66:75:cd:0c:8f:a5:5a:89:10:93:
                    ba:2f:01:a3:fa:e8:e8:c3:32:7b:54:ff:08:b3:e4:
                    2c:85:19:15:d8:86:f6:48:96:e3:e1:1a:55:df:f2:
                    81:2d:c0:43:11:ca:87:f9:c3:1a:81:4a:1e:85:4d:
                    c3:eb:9b:32:da:ba:05:4c:f4:19:e4:66:f4:46:d0:
                    71:c4:1a:3b:36:a3:d3:ab:b3:1c:19:95:bb:82:bc:
                    1b:81:03:af:ee:16:e0:17:d5:14:ee:ff:31:a0:00:
                    f7:6a:c0:1e:40:69:b4:c7:22:92:a5:28:99:15:ec:
                    82:12:11:c3:4e:e2:57:22:26:a2:a2:7f:01:56:63:
                    98:57:a8:63:3a:2f:7e:e1:47:04:d5:e0:63:38:01:
                    0f:9a:ea:d7:82:98:d1:0b:f2:c6:03:be:b2:c6:33:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:45:F1:43:1A:B3:B1:7E:A4:AF:13:F6:71:7D:E9:D5:35:3E:B1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/9d7cc95d-425d-3537-afef-cdb072121f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.crl

            X509v3 Authority Key Identifier:
                keyid:CC:9D:71:42:C5:AF:62:84:18:95:EE:25:BE:54:C8:60:AC:B0:ED:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:26:67:f9:94:d9:38:d7:08:51:5a:a1:e5:eb:f5:b8:f3:a0:
         77:16:be:66:a7:71:e4:bb:e4:b2:be:48:cf:da:54:b6:3e:c4:
         4d:af:f6:4e:ef:47:9d:17:0c:08:73:bd:d2:bb:21:9a:fb:46:
         7c:31:6d:18:51:62:c7:e9:c9:31:e4:10:8b:f6:43:d3:b8:c9:
         36:00:65:16:b1:88:82:f3:ed:3d:67:6c:d9:6f:7c:4e:17:63:
         43:ff:dc:db:12:84:44:d5:39:d4:7c:15:ea:4a:40:ec:92:c6:
         b5:b7:18:5c:4c:90:dd:dc:02:12:f5:1c:16:81:0f:83:84:cc:
         81:bc:45:24:b9:46:e2:7e:6b:49:99:ab:12:52:30:99:1f:71:
         5c:6f:dc:4f:5e:a2:e5:90:89:3b:6c:f5:90:53:28:2e:f1:1c:
         21:1d:dd:7c:d8:e3:47:4d:1a:c0:4d:d4:ec:a4:3c:f0:1e:61:
         94:50:40:12:53:12:82:e1:ee:2e:7d:5a:79:bc:32:ae:c1:62:
         5b:3f:f7:02:aa:30:c8:0e:72:b5:5b:4b:2d:72:f6:43:29:7b:
         e5:f3:ed:02:0e:3e:7a:95:8e:b4:fb:5a:c9:a3:fa:ba:5c:c0:
         e3:43:88:0a:6d:0d:11:6f:2d:a6:36:96:81:1d:b3:c4:8a:52:
         a6:8a:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:52:27 2026 by rpki-client