Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa
File:                     086c1071-1294-3436-beef-cfe7cef951e5.roa (raw, json)
Hash identifier:          8AIfTpctlSfJo0M+F99JIrs/OW3Fq5x1HyG1dpnkGPA=
Subject key identifier:   8A:6D:F5:BB:5A:20:69:CB:F7:8E:7B:32:C6:27:FC:7B:70:E2:5C:F9
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584EA787143263097B5D61E82300
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     136796
IP address blocks:        141.140.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:14:32:63:09:7b:5d:61:e8:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=90bf68e2-2849-4799-b5f9-ef5e68571125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:7c:e7:98:f5:36:d4:ab:77:44:de:38:b0:
                    6a:b8:8b:8a:60:85:6e:16:4b:5e:25:d1:db:e5:88:
                    7e:e5:2e:92:d4:36:ec:d1:58:99:84:97:55:4d:85:
                    ca:89:f9:3b:59:7f:89:b3:88:34:07:13:16:de:f1:
                    c3:6a:94:8d:8d:54:40:4f:dd:57:e0:74:40:45:1a:
                    ee:55:34:01:69:62:08:9d:94:87:11:14:32:52:79:
                    da:12:21:02:f9:5d:b6:83:f3:b8:7b:19:3a:60:a2:
                    58:38:90:7c:91:f0:9c:d0:0d:a8:17:ca:5b:7f:e8:
                    97:4a:60:28:5e:b8:09:1e:55:c3:f7:83:73:a4:02:
                    fc:69:0e:3b:81:ca:22:d9:45:65:98:60:c0:96:2c:
                    6f:3e:64:dc:a9:e9:a5:16:f5:66:72:df:0f:cc:6a:
                    c9:7b:7d:a5:12:2b:4a:7d:65:1d:fc:0e:4e:ab:3f:
                    dc:d9:65:c1:48:60:65:c5:63:0e:4d:fc:92:a6:7a:
                    2c:bf:1d:99:ec:fc:63:15:e6:8b:de:d7:c9:e4:89:
                    a5:34:d0:95:59:b9:a0:13:92:e5:fa:5b:9a:5d:a6:
                    5e:34:bc:ff:0f:cb:87:fd:d8:a6:a1:17:d6:19:f6:
                    ef:eb:7b:49:50:eb:57:65:b5:99:8c:e7:d4:b6:77:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6D:F5:BB:5A:20:69:CB:F7:8E:7B:32:C6:27:FC:7B:70:E2:5C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a3:ec:29:1f:77:4f:e2:ab:02:e8:29:e5:4c:32:23:e2:55:
         be:e9:f7:b3:38:46:4f:c5:dd:c2:dd:fd:98:2a:02:e0:77:c3:
         46:64:9b:60:52:6a:81:c1:0f:f9:bd:4d:ab:24:40:7a:a9:e8:
         a0:66:1a:0e:70:36:8c:cb:8d:e7:95:17:b9:b1:e3:b6:e0:e7:
         c8:7b:0c:fd:fa:1a:c8:2f:be:5f:fe:28:88:6c:22:f8:a5:0f:
         6d:d5:94:78:ed:a7:07:eb:52:fa:68:ab:ef:de:30:68:b4:56:
         c6:1f:f3:fe:79:15:1e:3a:df:2f:39:72:17:44:9d:5d:62:47:
         ce:5d:fe:26:c5:2e:02:23:b7:92:4f:97:0a:0d:fb:b7:4e:cd:
         79:b9:0f:7a:6e:0b:70:54:84:1c:8b:7d:07:e0:bb:67:eb:cb:
         20:7b:ae:75:1c:74:21:6f:12:88:24:f8:97:95:00:25:81:c5:
         b9:9c:4d:97:c8:13:12:dc:20:ef:1b:b4:68:33:09:aa:11:57:
         8a:20:46:1f:38:4d:31:27:7a:b4:21:3d:3d:8c:80:91:d8:14:
         b4:1e:64:d0:8a:3e:f6:1d:84:c1:a1:4b:32:40:0e:57:e3:3b:
         df:8a:43:84:a6:ff:0c:3a:85:63:e3:5f:92:ba:d5:0d:55:3a:
         8c:21:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:28:23 2026 by rpki-client