Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa
File:                     3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa (raw, json)
Hash identifier:          6skJji0CcO9bCC4gBFZZnr746PTS+cC1vftkjCP2cJY=
Subject key identifier:   CB:98:42:42:48:31:A4:39:2C:51:24:79:7E:15:09:07:D4:4E:6D:43
Certificate issuer:       /CN=219f6136-3599-4e41-920e-eccbe6592210
Certificate serial:       010D0C9F4328584F5E62AF5A8AB7031934E65B20
Authority key identifier: CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     17001
IP address blocks:        140.193.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:af:5a:8a:b7:03:19:34:e6:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219f6136-3599-4e41-920e-eccbe6592210
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=5255e024-5ac1-4afc-b6a1-e123ebd1e263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:a5:fe:d4:61:70:ce:a8:d3:f6:c9:66:fe:
                    02:4c:09:08:d8:08:f1:4d:2f:ec:33:8b:31:95:ad:
                    82:0f:7f:34:d1:4e:10:9b:c6:56:a1:80:97:45:10:
                    b3:37:10:56:ef:97:63:32:79:d6:fa:55:a9:dc:44:
                    70:e8:58:41:12:83:aa:77:7b:93:29:62:14:77:8e:
                    3f:73:7a:60:ec:1b:40:f0:eb:c7:3d:fc:14:14:7e:
                    ea:82:d4:1c:60:2a:1e:0c:21:45:e0:a4:41:a0:93:
                    1f:48:0b:12:1c:ad:18:94:81:1b:74:75:1b:f5:a8:
                    21:a6:38:76:63:f6:a7:ec:08:b1:9c:b3:00:84:e6:
                    e3:38:3e:54:4a:5e:bc:79:36:41:fb:eb:8c:38:ab:
                    83:11:27:37:59:67:12:a5:37:4a:05:b5:05:10:d1:
                    42:56:ab:35:a1:9c:8f:66:00:53:6e:67:fe:69:85:
                    94:34:08:98:8b:49:a8:04:7e:5b:c6:00:28:12:b2:
                    cc:a4:de:fe:4a:ff:07:15:b1:ac:88:72:c8:da:f1:
                    03:cb:32:41:32:71:87:52:78:0e:56:89:e9:57:d2:
                    0d:24:f1:0b:e8:97:68:b5:13:e3:dc:77:06:2b:09:
                    d0:7e:16:c6:6a:5a:b8:a8:93:10:2b:da:28:9e:e6:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:98:42:42:48:31:A4:39:2C:51:24:79:7E:15:09:07:D4:4E:6D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl

            X509v3 Authority Key Identifier:
                keyid:CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:57:ec:c0:53:69:95:81:51:ed:de:fa:b1:1c:93:d0:74:cf:
         d8:3d:40:7a:1f:a6:43:88:7e:92:86:5d:24:fa:b0:3a:e5:a7:
         67:bb:cd:1a:ff:8e:94:02:61:b9:72:ed:e2:15:76:05:a6:2f:
         ce:f3:0d:cf:ef:b7:1f:ac:c7:be:2c:85:80:a5:ec:2d:a9:76:
         ae:37:74:2d:88:b2:a2:1b:f4:e3:fe:dc:8a:4c:57:86:d5:22:
         c6:4c:0b:13:d7:94:84:79:cc:cb:5f:78:56:d3:b6:d8:3a:27:
         70:35:40:8d:0c:02:78:e3:74:80:e1:fa:84:39:82:e6:89:50:
         d7:95:e6:9f:fd:f7:a9:8f:69:29:25:67:31:fd:83:f1:05:d1:
         b5:15:9f:61:42:d3:c3:41:88:f1:04:c4:d8:d5:b6:57:ba:e2:
         8a:14:c7:e9:7f:96:5f:66:4c:bc:3b:6f:8c:02:e2:a0:31:34:
         00:64:ad:5f:df:a1:33:8a:28:fc:39:9a:df:76:58:01:d9:a8:
         20:ff:3b:8a:6b:15:70:e5:ed:50:8a:3b:33:8b:da:3c:fc:00:
         88:0c:08:8a:cb:28:03:79:66:a3:b0:45:69:8a:34:f8:b6:a7:
         41:51:08:47:d9:16:e8:e0:5b:ac:97:96:4d:3d:cd:09:5b:65:
         10:7d:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:21:43 2026 by rpki-client