Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa
File:                     a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa (raw, json)
Hash identifier:          L3Bs/K+fxDFMyfxhxIE25tlPZwCmBzUiPLw+RTIrJLk=
Subject key identifier:   1F:BD:44:70:FB:58:B3:EE:F8:38:B0:5C:3D:20:50:97:95:38:45:8A
Certificate issuer:       /CN=1c8f0fea-4d37-4154-9909-d7fb16d78856
Certificate serial:       010D0C9F4328584EAE81B804310AC262DBD6A100
Authority key identifier: 99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     401478
IP address blocks:        140.235.148.0/22 maxlen: 22
                          155.103.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:b8:04:31:0a:c2:62:db:d6:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c8f0fea-4d37-4154-9909-d7fb16d78856
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=830476fc-0d8c-4884-86bc-2584e6f1f6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:c8:5f:e4:25:13:5f:54:9e:bc:55:2e:9d:
                    ad:d3:06:ab:e8:12:ff:90:df:5f:2e:da:ee:18:e6:
                    f9:51:e3:dd:be:96:b8:73:49:fa:d0:8c:6d:19:65:
                    e7:43:be:4f:0e:d2:69:f9:f7:3d:f0:2d:95:64:2e:
                    a7:27:db:cb:05:1c:39:e4:b4:f3:8e:e4:8b:57:28:
                    d5:54:e0:6b:5f:b9:6b:e8:60:92:c8:eb:57:fd:66:
                    ea:ad:49:7c:7e:39:f2:75:c7:81:94:d2:21:4a:66:
                    27:6d:fa:70:c4:1d:29:c6:6d:42:77:83:a8:d7:bf:
                    8a:25:99:db:c4:02:61:1d:e0:79:54:ea:1b:8d:48:
                    14:91:cb:b4:10:de:a4:d5:3f:fa:a3:4c:3d:e4:84:
                    cd:8c:e1:4c:a0:0e:6b:28:0c:df:c3:dd:67:ae:06:
                    f0:79:fb:2d:ef:07:a6:59:3f:56:0f:53:ba:72:51:
                    29:21:1b:8b:d8:4f:40:58:fb:df:0e:4d:41:ba:82:
                    d9:e4:ba:31:43:09:75:7e:73:d1:d1:b4:fd:70:ef:
                    74:4b:3e:a1:83:26:c0:51:26:17:5f:59:c5:2c:29:
                    e7:c2:12:77:25:11:3d:e8:fb:f6:9c:45:c0:85:1d:
                    bd:ef:27:1a:fe:f0:20:d5:9a:3b:c3:b7:1e:f5:6b:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BD:44:70:FB:58:B3:EE:F8:38:B0:5C:3D:20:50:97:95:38:45:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl

            X509v3 Authority Key Identifier:
                keyid:99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.148.0/22
                  155.103.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:35:bd:1e:68:1f:bc:d7:38:2b:9f:70:11:93:6d:81:4d:9f:
         79:c7:3f:4c:e6:1b:ff:71:96:98:7b:99:5a:02:28:fe:aa:9d:
         dd:43:d5:96:43:f7:f3:c9:99:fc:75:db:35:a9:6f:0c:c9:f2:
         3c:c2:f5:e0:26:0e:e5:6b:9b:f8:89:27:b4:46:0a:b1:2e:3d:
         e5:19:dd:52:a5:fb:37:ed:e1:ec:27:3f:2b:22:a7:60:a1:3d:
         24:80:67:d1:d1:35:8c:26:0b:0d:79:9f:8f:cc:61:36:14:64:
         60:e5:42:9c:e9:c1:09:b9:c9:5f:21:ed:cc:07:74:4a:a2:3f:
         15:3b:43:1d:c4:82:5f:6f:46:76:32:bd:f2:a3:43:c2:19:c8:
         a5:02:3d:9e:36:c8:bb:b6:d8:e0:a5:f7:54:46:52:78:e9:ee:
         ff:7a:d4:8c:a5:3b:50:5f:6b:91:c0:2c:fe:43:76:5c:37:b8:
         87:c8:45:a4:5a:d3:f6:46:71:a4:68:d4:98:1c:9f:72:6a:89:
         f6:46:81:8d:db:a1:08:d5:f8:3f:ec:92:38:7c:e2:cf:62:20:
         0c:f4:f1:ce:a9:a9:1e:bf:e2:21:2e:f9:5b:04:8f:46:91:3a:
         ba:fd:0f:df:1b:2e:0a:c6:91:34:df:e8:eb:df:df:ee:27:64:
         17:1b:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:08:18 2026 by rpki-client