Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/84541e23-1f43-3a2c-93be-e8523eb77461.roa
File:                     84541e23-1f43-3a2c-93be-e8523eb77461.roa (raw, json)
Hash identifier:          c2KdY8zDiIgrJZCy0BGAdwWfJ7BBO2mCHkWWeta07yw=
Subject key identifier:   98:E8:F5:B6:49:37:F9:A8:5F:87:17:8B:A1:59:14:3C:77:AD:47:37
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584EBDDC63FD39B0ECBEC4673240
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/84541e23-1f43-3a2c-93be-e8523eb77461.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     135542
IP address blocks:        141.140.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:63:fd:39:b0:ec:be:c4:67:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=e37233f9-f956-4b75-8797-111866b40f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:d2:6a:db:6e:58:6a:5d:37:6b:58:85:2d:
                    a8:b3:2b:84:e1:2b:4b:7f:b7:e2:64:17:61:82:f0:
                    3d:7c:be:6b:32:90:6f:60:7a:80:0c:3e:70:63:9d:
                    74:86:6c:1e:9d:22:90:56:d3:04:19:dd:53:c9:77:
                    78:c8:43:61:e6:a6:7f:e4:ee:91:1c:a9:57:a3:4a:
                    d6:30:7d:9f:fb:16:d8:44:c2:75:00:c2:69:d0:38:
                    be:b0:77:fe:b5:40:87:d9:59:21:de:f6:f5:95:07:
                    7e:f8:8d:dc:e6:1a:5b:d4:cd:a9:2d:7f:18:61:fc:
                    6f:fe:27:30:ad:e4:1e:27:0d:1f:f7:5d:bd:2a:ff:
                    62:60:6e:a7:13:7b:e3:25:81:6b:8a:90:3a:23:cd:
                    17:64:c7:17:70:d6:ca:e3:24:b3:3d:79:51:a7:da:
                    f6:d1:1a:61:f4:24:b5:26:b6:df:16:2b:7e:ae:f9:
                    87:1a:55:2f:eb:f8:dd:44:a9:f3:8d:e9:92:31:91:
                    03:d4:70:cf:41:b7:79:f8:cb:b7:31:83:b7:6b:ab:
                    9e:48:46:dc:af:ee:37:17:79:14:4e:bd:4f:dd:95:
                    ca:6f:ad:db:27:1c:67:9a:46:55:f9:94:97:8b:e1:
                    34:b2:7d:88:fa:75:7b:01:1e:09:fd:75:87:6e:1f:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:F5:B6:49:37:F9:A8:5F:87:17:8B:A1:59:14:3C:77:AD:47:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/84541e23-1f43-3a2c-93be-e8523eb77461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:aa:60:33:a2:db:b2:da:ab:5b:51:1b:8a:a9:a2:84:05:
         ff:58:07:eb:7a:0c:f8:01:ed:00:ca:39:1a:b1:cc:52:44:5d:
         bf:75:fb:b8:5c:f0:25:21:3c:63:14:94:3e:b2:02:ae:9a:6d:
         d4:9b:5d:08:a5:44:a4:19:d3:9a:da:57:a0:27:6e:2d:d5:a1:
         6f:f6:a3:3b:ed:80:d2:49:ea:8a:d0:4f:b1:9b:79:38:72:99:
         e2:02:3f:bb:60:2e:20:12:23:e0:d2:00:ff:94:0f:ac:f6:bc:
         aa:65:d8:5a:80:f1:ab:d1:2a:59:c9:78:90:c0:74:93:5d:bd:
         05:f0:19:d5:f9:12:8a:19:7a:7d:8d:50:78:73:17:b4:1d:f9:
         21:ad:d7:55:75:e4:eb:c2:57:08:f0:2d:16:f2:bf:46:f7:70:
         93:1c:d8:19:bd:44:ed:1a:6d:ef:8b:1a:75:30:b8:7c:84:e1:
         03:d0:8e:ec:99:8e:74:ec:66:53:d8:96:90:b9:3c:2a:fa:04:
         c7:d8:76:14:8e:22:2d:a0:70:3c:dd:53:08:fa:e0:c0:c0:fb:
         01:73:e6:b7:54:84:0e:06:bb:9b:84:be:12:2a:66:85:be:dc:
         a4:b9:e4:0b:e7:88:48:32:59:fd:e7:0f:e0:d5:b7:c8:39:25:
         60:99:3b:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE693GP9ObDsvsRnMkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTM3MjMzZjktZjk1Ni00Yjc1LTg3OTctMTExODY2YjQwZjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE/SattuWGpdN2tYhS2osyuE4StLf7fiZBdh
gvA9fL5rMpBvYHqADD5wY510hmwenSKQVtMEGd1TyXd4yENh5qZ/5O6RHKlXo0rW
MH2f+xbYRMJ1AMJp0Di+sHf+tUCH2Vkh3vb1lQd++I3c5hpb1M2pLX8YYfxv/icw
reQeJw0f9129Kv9iYG6nE3vjJYFripA6I80XZMcXcNbK4ySzPXlRp9r20Rph9CS1
JrbfFit+rvmHGlUv6/jdRKnzjemSMZED1HDPQbd5+Mu3MYO3a6ueSEbcr+43F3kU
Tr1P3ZXKb63bJxxnmkZV+ZSXi+E0sn2I+nV7AR4J/XWHbh+kHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJjo9bZJN/moX4cXi6FZFDx3rUc3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvODQ1NDFlMjMtMWY0My0z
YTJjLTkzYmUtZTg1MjNlYjc3NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtxqmAzotuy2qtbURuKqaKEBf9YB+t6DPgB7QDKORqxzFJEXb91+7hc
8CUhPGMUlD6yAq6abdSbXQilRKQZ05raV6Anbi3VoW/2ozvtgNJJ6orQT7GbeThy
meICP7tgLiASI+DSAP+UD6z2vKpl2FqA8avRKlnJeJDAdJNdvQXwGdX5EooZen2N
UHhzF7Qd+SGt11V15OvCVwjwLRbyv0b3cJMc2Bm9RO0abe+LGnUwuHyE4QPQjuyZ
jnTsZlPYlpC5PCr6BMfYdhSOIi2gcDzdUwj64MDA+wFz5rdUhA4Gu5uEvhIqZoW+
3KS55AvniEgyWf3nD+DVt8g5JWCZOz0=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:54 2026 by rpki-client