Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ff8947d2-271e-319d-b4ce-cfea51476eb2.roa
File:                     ff8947d2-271e-319d-b4ce-cfea51476eb2.roa (raw, json)
Hash identifier:          rDhEmJp0McpIWOKgdqoIeDDNlj7VqmD4aBSXJKXofek=
Subject key identifier:   5A:BB:36:70:A5:B2:99:8E:D6:FC:2B:15:20:83:CD:E5:99:E4:10:2D
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584F57681EFE178EBD7A1EC8EB10
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ff8947d2-271e-319d-b4ce-cfea51476eb2.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     21859
IP address blocks:        141.140.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:1e:fe:17:8e:bd:7a:1e:c8:eb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=0eb454c9-e48c-41e3-8748-1694f7eb0923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:3f:76:f7:b9:0b:ae:3c:1e:ff:f8:0f:c3:
                    03:39:23:4a:f3:90:38:65:76:a8:7e:78:8b:d6:22:
                    db:7a:13:f3:9a:2e:b7:ec:91:c6:92:1c:45:0f:98:
                    2e:fd:5b:2d:58:ad:ae:03:39:75:b9:63:65:f5:e3:
                    19:c9:41:dd:03:58:9d:88:a1:30:e4:30:ed:02:ff:
                    ad:3b:0a:54:4e:89:3a:83:a9:c0:cc:df:c6:3c:5f:
                    8d:0a:76:5b:c9:52:e5:00:9b:b0:47:85:fe:a3:2c:
                    ac:a6:f4:15:cd:82:4f:52:16:f0:55:f2:58:c7:97:
                    4a:61:d7:49:da:1e:06:e6:1b:38:f0:6e:c3:9e:c8:
                    ef:ba:37:af:13:93:78:43:fa:9b:49:df:58:ea:b9:
                    bd:0b:84:6f:cd:01:ae:17:9d:9f:21:40:8f:71:4f:
                    83:dc:cf:1f:e5:f0:2d:d1:89:e2:ca:7c:b4:c8:7f:
                    fd:42:77:a0:64:73:94:57:f6:0e:f1:f2:19:c5:50:
                    3d:27:6a:b0:ff:03:0e:8d:58:82:7a:ec:9b:52:e3:
                    05:ca:87:00:3e:c3:00:67:70:e0:4f:cd:7a:1f:80:
                    70:51:b8:1b:ff:f9:ff:a3:74:eb:47:2a:46:51:c7:
                    bd:13:6b:d5:8e:0f:6a:26:1b:10:38:33:5b:40:bb:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BB:36:70:A5:B2:99:8E:D6:FC:2B:15:20:83:CD:E5:99:E4:10:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ff8947d2-271e-319d-b4ce-cfea51476eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:a6:41:e1:c3:0f:a1:8e:ec:c3:f0:58:b5:6a:48:7d:82:
         fe:cb:52:12:3f:d2:48:c8:9c:80:a1:7f:ea:76:da:ed:03:ad:
         e0:f0:f1:ea:1a:10:8c:d2:2e:a8:6d:03:99:87:65:3a:ee:8e:
         12:57:ea:76:c9:ee:54:da:55:d0:cd:e3:d7:a6:d7:ee:f1:17:
         b9:01:49:b1:65:40:a3:ed:10:58:0d:a1:47:10:dd:41:26:dd:
         48:9e:b7:68:f9:cb:55:22:35:11:82:7f:ad:43:28:b2:62:3c:
         7f:f6:e8:e4:40:fe:2f:6e:fa:04:43:59:24:9d:49:3f:03:d6:
         e3:9b:c9:85:09:6c:df:80:3b:aa:3f:f3:b4:93:b6:b6:d5:03:
         54:7d:f7:07:05:e3:00:89:7a:b3:ae:0c:8d:66:09:0e:b6:09:
         c5:dc:4a:25:2a:07:27:14:d2:53:c3:30:f4:3d:02:fa:61:3a:
         58:df:0f:f0:b4:cb:3e:ed:94:b7:d7:4b:87:5e:0a:d9:81:8d:
         c9:29:15:c0:bb:a4:3a:87:e0:e9:8b:d7:8e:c6:6e:dd:9b:fa:
         91:75:18:5b:85:bd:d2:90:b8:76:d6:21:a4:7c:5f:53:cb:c4:
         03:a3:4e:ef:46:f5:22:4e:87:02:a5:a6:7b:96:a1:2a:92:f5:
         0c:9b:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:56:29 2026 by rpki-client