Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/b392a937-361f-3780-8186-d38eb5aeb2b1.roa
File:                     b392a937-361f-3780-8186-d38eb5aeb2b1.roa (raw, json)
Hash identifier:          4VIqBMxQQjEssIoo7l7sCGobZzjqUE8dsYw3KoteJNI=
Subject key identifier:   B9:84:1A:FA:99:4A:0B:08:E8:70:CD:91:06:C6:4E:97:F5:9E:85:02
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584CAE5EA859491A7665115B2DB8
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/b392a937-361f-3780-8186-d38eb5aeb2b1.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     1742
IP address blocks:        140.247.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:a8:59:49:1a:76:65:11:5b:2d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=788923e1-613e-4784-b77d-42e400b3863e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:d2:49:d5:a8:89:fd:72:7e:b9:be:ad:dc:
                    05:4d:dc:1b:89:8a:8f:49:eb:83:ec:31:d2:65:fb:
                    ba:4f:93:63:46:96:54:bf:1f:e9:b0:83:6c:a6:45:
                    ed:16:0d:cb:f5:1e:9b:a7:06:d1:cc:fc:01:fe:d9:
                    ac:2d:d9:fa:fe:60:84:ba:e4:6e:7d:5d:ab:9a:fb:
                    96:93:5b:b0:f3:29:15:de:65:b2:21:d5:fb:ea:f5:
                    4e:9f:8d:9e:53:44:2f:da:1e:0c:2b:09:90:e7:63:
                    5e:f0:04:34:49:89:35:d7:f6:6e:ad:59:7c:35:05:
                    51:a7:dc:e8:37:30:46:7c:eb:df:e9:a7:cd:08:da:
                    a6:38:2e:54:93:24:9b:3d:74:35:e3:35:3f:7d:0d:
                    7e:5f:b1:14:3f:a9:02:04:fb:b4:b9:b2:f5:7d:94:
                    5f:94:da:45:aa:ee:0c:af:99:e7:1b:54:2a:a9:83:
                    f7:b2:42:66:8e:52:06:1b:c6:a5:2c:03:6a:28:22:
                    c1:9e:07:92:f7:3b:c7:df:70:89:74:46:e1:9f:5b:
                    13:91:c6:28:6c:05:b4:d9:40:e5:5f:0d:e6:32:c4:
                    3f:dd:cb:9a:cc:9b:48:d1:83:2a:00:f1:1f:6e:f9:
                    52:ed:32:65:bb:40:0b:1c:19:29:53:90:2a:2e:d6:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:1A:FA:99:4A:0B:08:E8:70:CD:91:06:C6:4E:97:F5:9E:85:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/b392a937-361f-3780-8186-d38eb5aeb2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:83:78:78:4b:ce:e6:e0:fb:35:fc:70:2f:88:c0:d5:f1:11:
         65:7b:5f:ca:06:b9:70:c6:fd:96:40:5c:c9:06:67:30:71:1d:
         95:6f:05:bd:24:b8:f2:d2:d3:a5:00:60:a9:8b:50:27:99:c9:
         9d:e2:68:05:57:5e:72:36:3b:23:aa:42:45:18:9c:91:74:11:
         b3:89:55:d5:4f:3b:6f:f7:6d:a8:51:6f:de:38:53:17:1e:24:
         67:1a:55:ef:4a:a1:28:11:fe:0c:12:55:49:1d:33:f5:c0:72:
         d4:d9:66:8f:89:9e:87:eb:cb:b5:1e:7e:3f:37:b3:41:c4:0c:
         df:2f:0e:0a:fa:1b:73:f5:41:cf:90:bc:e0:10:e3:cc:cf:4c:
         a8:4f:9d:41:90:f1:a6:2f:35:c5:d7:6e:92:af:02:fd:88:63:
         ae:c0:97:63:00:89:27:e5:11:07:68:4e:95:c3:e3:c1:6c:14:
         5b:80:6a:7b:2a:8f:d5:49:7f:1e:db:2a:00:fb:08:4f:7d:08:
         df:e6:48:49:e2:6a:7f:73:34:0e:f9:86:ad:99:87:4a:8a:d3:
         95:9a:1f:e2:b2:f3:3e:73:95:ca:d5:6d:a8:28:de:2e:dd:72:
         0b:7c:d9:17:3b:bc:7c:21:56:47:d0:38:67:45:3a:a4:4c:17:
         e7:ce:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:40:35 2026 by rpki-client