Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/5ada8445-3f7b-3125-a598-b94b15e97031.roa
File:                     5ada8445-3f7b-3125-a598-b94b15e97031.roa (raw, json)
Hash identifier:          F81i1WvMTDBMjAsualj8zgnXkkeEvpsX7eE3nclvOYI=
Subject key identifier:   69:98:66:3C:96:80:04:24:DD:DD:72:7B:F2:B1:60:30:BA:49:30:C1
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328584E3E5F490C5F7F1A843D9E8480
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/5ada8445-3f7b-3125-a598-b94b15e97031.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     329097
IP address blocks:        165.140.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:49:0c:5f:7f:1a:84:3d:9e:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=1fbe9020-fee7-4590-addb-027b36c3f694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:ae:b2:6f:a0:bd:02:d7:fa:80:e9:5e:cb:
                    25:3c:f1:38:dd:7f:35:a8:37:a3:05:35:6d:0c:73:
                    c4:fc:0a:a9:bc:3a:60:b3:d8:d1:fd:96:64:16:12:
                    22:45:7c:13:1b:d3:9a:f4:ff:6e:a4:87:9e:a9:db:
                    24:39:f5:be:c2:c4:68:d2:5c:49:14:63:ae:95:33:
                    74:59:bf:f7:0f:43:5b:c4:c7:0a:bc:9e:f9:bd:21:
                    f2:75:75:92:20:52:16:08:20:5d:20:df:32:d6:67:
                    e5:29:a9:fe:10:ff:2a:1d:38:d6:5c:04:c9:ea:9b:
                    8c:00:b8:2d:29:f1:4b:ca:99:23:51:f8:21:fb:a8:
                    4a:27:dd:1f:19:91:f6:4e:8e:57:25:15:eb:93:4a:
                    c9:9a:84:80:ef:eb:7e:0f:d3:73:61:f2:0f:70:dc:
                    1d:94:c9:d1:43:e7:7f:88:82:ef:66:48:25:75:bf:
                    88:33:46:0f:2b:ef:1b:79:19:da:b2:c1:f9:a3:ca:
                    78:24:93:cc:d5:a3:0e:0a:59:da:55:f4:35:eb:00:
                    6b:ec:9d:40:d6:77:20:1c:9e:0c:ec:f3:03:c1:f2:
                    46:fd:b7:c1:4f:f2:06:d5:30:81:29:2c:e8:10:aa:
                    5e:10:3d:1d:51:22:09:c4:2a:ee:f4:a9:5d:bd:c5:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:98:66:3C:96:80:04:24:DD:DD:72:7B:F2:B1:60:30:BA:49:30:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/5ada8445-3f7b-3125-a598-b94b15e97031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:01:1a:36:e1:ac:2f:70:53:27:fd:f2:d7:4d:b4:99:e7:ef:
         0d:df:f0:d7:7e:fd:59:fc:25:6c:9f:e1:b4:0a:15:35:65:22:
         39:4a:2c:ec:23:0d:e5:51:fa:01:bb:0c:ad:ba:c0:52:ad:f5:
         cc:2b:c8:ed:6c:82:b5:09:18:c2:d3:af:78:36:39:31:17:c9:
         e5:b1:7f:77:a9:9c:82:1b:7a:3c:fb:56:0c:73:60:c2:b4:b8:
         1a:a1:2d:08:f7:db:c7:ca:7e:02:b2:11:cf:f0:33:d2:5f:18:
         b4:bc:8c:ea:00:53:70:3b:c3:ed:b8:70:68:8c:c9:ce:ea:c5:
         e3:4f:48:01:fe:c7:7f:58:e0:bf:d6:07:c3:94:8b:d4:c0:64:
         4f:69:ed:af:6d:2f:4a:93:f5:02:a1:73:9d:ee:5c:6b:9b:68:
         b1:89:83:10:a7:74:77:45:4a:9d:7c:eb:70:93:30:56:9e:24:
         d1:9b:6a:be:e3:49:c8:34:87:ab:de:e7:de:72:dc:71:49:ff:
         4a:54:25:07:9e:92:2f:1d:2e:72:4e:4a:d0:3b:bd:91:8b:d7:
         b6:75:96:39:67:ea:22:ea:64:ba:71:e8:6e:77:25:c0:2f:e6:
         f4:3c:66:61:58:df:85:30:9a:e0:d8:d3:89:44:21:b8:71:ae:
         72:ae:61:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X0kMX38ahD2ehIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5YmZjZTEtNWU3NC00YzkyLTk1NGQtODcyODk2OWQ4
ODM1MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MWZiZTkwMjAtZmVlNy00NTkwLWFkZGItMDI3YjM2YzNmNjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs62usm+gvQLX+oDpXsslPPE43X81qDejBTVt
DHPE/AqpvDpgs9jR/ZZkFhIiRXwTG9Oa9P9upIeeqdskOfW+wsRo0lxJFGOulTN0
Wb/3D0NbxMcKvJ75vSHydXWSIFIWCCBdIN8y1mflKan+EP8qHTjWXATJ6puMALgt
KfFLypkjUfgh+6hKJ90fGZH2To5XJRXrk0rJmoSA7+t+D9NzYfIPcNwdlMnRQ+d/
iILvZkgldb+IM0YPK+8beRnassH5o8p4JJPM1aMOClnaVfQ16wBr7J1A1ncgHJ4M
7PMDwfJG/bfBT/IG1TCBKSzoEKpeED0dUSIJxCru9KldvcX3FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmYZjyWgAQk3d1ye/KxYDC6STDBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYzli
ZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4OTY5ZDg4MzUvNWFkYTg0NDUtM2Y3Yi0z
MTI1LWE1OTgtYjk0YjE1ZTk3MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2M5YmZjZTEtNWU3NC00YzkyLTk1
NGQtODcyODk2OWQ4ODM1L2NjOWJmY2UxLTVlNzQtNGM5Mi05NTRkLTg3Mjg5Njlk
ODgzNS5jcmwwHwYDVR0jBBgwFoAUWSOVY38ODRqcqJwYgOE4O8qtc+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYzliZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4
OTY5ZDg4MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYwKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMBGjbhrC9wUyf98tdNtJnn7w3f8Nd+/Vn8JWyf4bQKFTVlIjlKLOwj
DeVR+gG7DK26wFKt9cwryO1sgrUJGMLTr3g2OTEXyeWxf3epnIIbejz7VgxzYMK0
uBqhLQj328fKfgKyEc/wM9JfGLS8jOoAU3A7w+24cGiMyc7qxeNPSAH+x39Y4L/W
B8OUi9TAZE9p7a9tL0qT9QKhc53uXGubaLGJgxCndHdFSp1863CTMFaeJNGbar7j
Scg0h6ve595y3HFJ/0pUJQeeki8dLnJOStA7vZGL17Z1ljln6iLqZLpx6G53JcAv
5vQ8ZmFY34UwmuDY04lEIbhxrnKuYZ0=
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:33:18 2026 by rpki-client