Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa
File:                     491a7f76-8e8e-3356-9245-7144be78c024.roa (raw, json)
Hash identifier:          pG1vD00eCXRl61vw1XcFJGUnALgEUsWuirfcjn+CM/0=
Subject key identifier:   5B:18:2D:17:82:07:46:44:D5:9E:52:E6:8A:05:CF:7E:84:B1:C7:C9
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F093CF384980F01DEB2172C80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     137517
IP address blocks:        140.228.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f3:84:98:0f:01:de:b2:17:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=bb2da45e-d202-4dca-ac92-947643316bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:a5:d4:93:c1:f6:b0:a5:d4:fa:63:9b:88:
                    57:3d:14:e6:ca:a7:a4:a4:1b:e8:8f:26:d0:57:76:
                    bc:0d:bc:94:7e:69:ea:ab:66:93:5b:f8:29:86:6b:
                    3e:ef:0b:7a:b7:74:98:f1:14:7c:ab:f3:4e:4f:84:
                    2f:eb:18:75:cd:da:8e:30:86:a1:d6:3a:0c:f8:c1:
                    4c:a3:cb:a7:32:0e:aa:10:44:4e:64:8a:01:a2:34:
                    74:41:0e:6f:24:4c:35:04:99:19:da:a9:94:7a:e0:
                    68:93:8f:83:da:8c:f2:15:c8:79:1e:15:57:00:49:
                    b5:39:bb:41:ae:aa:42:39:d1:1b:91:90:35:1e:68:
                    63:3a:ef:3a:4f:78:e1:6d:1d:10:8f:79:5b:80:6f:
                    31:f5:d8:c8:87:b3:68:f2:33:46:9d:61:0e:c1:16:
                    69:2c:be:c4:78:fd:66:b1:b5:3b:67:4c:ff:51:a3:
                    54:95:a6:37:b0:c9:40:72:52:63:e4:90:53:f3:89:
                    de:db:1d:9a:03:e2:44:ba:43:35:55:47:60:c4:37:
                    6b:bf:92:41:05:86:de:46:49:32:38:73:34:bf:78:
                    f9:a0:6c:b9:f4:70:2c:85:d2:da:10:54:93:a3:32:
                    27:d3:9a:d7:82:99:aa:37:3d:33:01:fe:52:01:4c:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:18:2D:17:82:07:46:44:D5:9E:52:E6:8A:05:CF:7E:84:B1:C7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:e6:74:8f:73:cb:12:72:32:70:31:c3:bc:60:ff:4d:98:
         ef:a9:0c:d3:97:2e:93:82:e9:79:7e:72:02:f9:69:51:95:e0:
         a6:4e:ff:df:7a:ae:85:20:ab:46:66:1c:a0:17:d2:03:6c:1b:
         01:27:cd:23:e0:37:a8:80:93:20:9e:59:f5:66:7d:2d:dc:d0:
         5b:30:f3:6f:f0:ee:3f:33:10:3f:27:64:06:a0:d0:23:1f:9d:
         8b:f0:43:72:0d:50:00:a0:75:11:e1:4a:03:06:2f:6c:48:10:
         12:26:54:ac:bc:28:7b:4e:e1:47:a8:20:02:01:fc:96:bf:31:
         b4:ce:e4:92:27:e4:19:38:07:60:62:68:7f:62:57:bb:b2:1e:
         12:59:c6:90:8b:33:e5:67:8c:14:80:75:a1:1e:0a:ff:2b:b5:
         67:13:67:96:55:70:39:39:fa:d6:b6:c0:39:71:c1:3b:06:1f:
         66:b3:32:ed:8f:ff:fa:01:5c:fc:d4:45:a4:91:30:2d:aa:7c:
         1a:86:12:90:05:81:90:41:21:a1:98:ad:94:b6:36:8f:da:d3:
         21:a6:a9:f4:b3:5e:a1:b0:da:9a:82:01:dc:cb:72:ad:e4:61:
         bb:c6:6d:81:11:94:61:a0:25:8f:b8:fa:57:4f:6a:d8:cf:67:
         38:77:0e:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPOEmA8B3rIXLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
YmIyZGE0NWUtZDIwMi00ZGNhLWFjOTItOTQ3NjQzMzE2YmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriil1JPB9rCl1Ppjm4hXPRTmyqekpBvojybQ
V3a8DbyUfmnqq2aTW/gphms+7wt6t3SY8RR8q/NOT4Qv6xh1zdqOMIah1joM+MFM
o8unMg6qEEROZIoBojR0QQ5vJEw1BJkZ2qmUeuBok4+D2ozyFch5HhVXAEm1ObtB
rqpCOdEbkZA1HmhjOu86T3jhbR0Qj3lbgG8x9djIh7No8jNGnWEOwRZpLL7EeP1m
sbU7Z0z/UaNUlaY3sMlAclJj5JBT84ne2x2aA+JEukM1VUdgxDdrv5JBBYbeRkky
OHM0v3j5oGy59HAshdLaEFSTozIn05rXgpmqNz0zAf5SAUyeRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsYLReCB0ZE1Z5S5ooFz36EscfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNDkxYTdmNzYtOGU4ZS0z
MzU2LTkyNDUtNzE0NGJlNzhjMDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe25nSPc8sScjJwMcO8YP9NmO+pDNOXLpOC6Xl+cgL5aVGV4KZO/996
roUgq0ZmHKAX0gNsGwEnzSPgN6iAkyCeWfVmfS3c0Fsw82/w7j8zED8nZAag0CMf
nYvwQ3INUACgdRHhSgMGL2xIEBImVKy8KHtO4UeoIAIB/Ja/MbTO5JIn5Bk4B2Bi
aH9iV7uyHhJZxpCLM+VnjBSAdaEeCv8rtWcTZ5ZVcDk5+ta2wDlxwTsGH2azMu2P
//oBXPzURaSRMC2qfBqGEpAFgZBBIaGYrZS2No/a0yGmqfSzXqGw2pqCAdzLcq3k
YbvGbYERlGGgJY+4+ldPatjPZzh3DqY=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:06:08 2026 by rpki-client