Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa
File:                     dadb8667-9016-3ed9-aec9-53a09735cd1a.roa (raw, json)
Hash identifier:          3gH/e7Qn/GnrtL9KZcKVaQ4H9lPKWUMhniRdJyPv8BM=
Subject key identifier:   82:16:A8:F3:5B:D5:58:97:E8:E2:EE:69:D6:76:A3:35:A6:DC:6C:D9
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F94D30674ADCE2F3E66AB1140
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     396073
IP address blocks:        140.228.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:06:74:ad:ce:2f:3e:66:ab:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=2ebf9b4d-6573-41a0-9967-efc4b5f2f818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:7b:f6:a9:28:05:5c:e1:c3:51:7c:3b:43:
                    75:75:90:fc:8b:8e:8f:c1:41:8a:cb:7c:cb:80:d7:
                    3e:56:79:c4:47:ee:d2:bd:2c:b0:84:80:31:a5:8a:
                    ba:7d:41:96:23:77:21:17:da:34:6a:13:1f:e0:ea:
                    0b:f0:74:f2:dd:a8:37:51:dc:20:63:eb:5f:f1:44:
                    61:05:a5:d1:1b:9a:11:83:90:a5:8c:cc:2e:fa:b3:
                    33:d5:06:c9:9d:1c:9c:89:7d:92:01:70:09:66:85:
                    4b:62:1a:de:bb:ec:28:6c:db:4b:4a:95:74:42:8e:
                    6c:1d:2f:6c:48:e4:da:b6:f9:b6:84:dd:d1:11:de:
                    e4:74:65:d1:a0:3d:a2:3c:96:e3:90:f7:bd:e5:f6:
                    c8:b1:f4:f0:a8:92:0a:c7:26:72:ab:8b:95:42:e2:
                    6f:6e:03:ca:fe:48:a3:cd:06:d0:df:83:ab:42:42:
                    f4:88:79:41:53:46:6f:a9:5e:b4:2f:9a:47:d2:3d:
                    1c:f7:50:ae:71:d7:99:5f:14:ba:3d:37:db:9c:ef:
                    23:60:be:60:40:9e:28:a9:8c:fc:62:dc:f2:bf:29:
                    71:8e:4d:eb:34:b5:bd:e8:dd:c1:c2:32:d8:e6:c3:
                    00:55:04:4a:bb:c0:a1:83:53:53:fd:0b:11:1a:ad:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:A8:F3:5B:D5:58:97:E8:E2:EE:69:D6:76:A3:35:A6:DC:6C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b3:f4:6b:cf:c5:e9:26:ba:37:55:20:f4:da:4f:5b:c3:c3:
         df:6d:e0:90:dd:e8:25:fe:80:5c:a7:3f:bf:7a:c1:15:39:23:
         19:67:9c:09:76:3d:ee:31:1b:1c:d6:19:2b:78:69:0f:99:0e:
         96:98:08:2e:16:51:01:60:1f:42:95:f4:7d:01:03:04:0f:d1:
         71:b4:13:2e:ea:36:e4:bf:90:63:5c:8f:7f:02:35:76:22:9d:
         7d:b0:58:18:c3:6e:78:05:37:6e:f6:d4:95:e0:cd:61:17:88:
         44:80:a5:50:43:eb:60:8b:fe:37:e2:dd:da:ae:df:9d:93:0d:
         81:4f:54:74:42:7e:96:21:07:31:99:fe:4c:ba:41:8e:ed:dd:
         23:1d:85:6a:2c:aa:04:9a:1c:2b:e9:46:1c:5a:f2:ef:80:18:
         73:1e:a4:dc:1f:14:37:36:d7:9d:9a:5e:4e:8e:cc:10:14:e8:
         0b:a4:4a:99:72:18:8b:de:08:26:ff:d2:a8:b9:89:54:29:78:
         9b:71:dc:74:c7:1d:8e:f7:67:e0:df:43:f6:c5:a4:da:52:96:
         1a:09:9d:d4:0e:a8:d4:9c:2e:ef:dd:b8:a8:09:e0:28:6a:9b:
         08:f0:46:9f:98:2c:69:ee:d2:eb:55:6c:28:a0:ef:e2:46:57:
         7d:64:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 17:24:26 2026 by rpki-client