Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/69422b68-8a68-3603-87a0-d6c75caad6fa.roa
File:                     69422b68-8a68-3603-87a0-d6c75caad6fa.roa (raw, json)
Hash identifier:          9c2p6Mp1KABI1IWkMxaKB7iEW5G0ku+YETE4NemrkMA=
Subject key identifier:   11:9D:F4:1B:51:A4:56:E3:B5:6E:79:DE:BD:8E:C4:29:59:36:DD:4A
Certificate issuer:       /CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd
Certificate serial:       010D0C9F4328584EA7947AC93FE7DC55847B1280
Authority key identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/69422b68-8a68-3603-87a0-d6c75caad6fa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     216030
IP address blocks:        140.235.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:7a:c9:3f:e7:dc:55:84:7b:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=237559d0-eecc-4f1d-9046-166d2c274392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:96:8c:82:f8:4c:bd:7e:ca:5a:34:7a:2f:
                    0d:51:70:72:c9:5c:4e:67:ad:c2:ca:56:ea:dd:0a:
                    b8:29:0b:45:9b:43:da:1a:6f:86:d9:98:35:b1:99:
                    f0:98:57:30:6f:a9:25:a1:75:86:3b:03:fe:01:44:
                    70:79:60:3d:cc:2c:f9:11:44:dd:ec:65:67:e0:45:
                    ab:24:02:03:4a:17:d6:60:db:21:41:09:77:2c:98:
                    0f:0b:d7:29:aa:c6:4e:e0:8f:1f:b7:15:57:fc:da:
                    50:04:26:0f:9d:f7:cb:a2:b4:3a:b7:1c:8e:a7:9b:
                    5e:88:80:13:02:16:47:d3:b6:32:11:d4:06:fd:76:
                    47:db:31:05:75:c7:4c:3a:ac:47:76:51:46:d1:71:
                    1a:a7:59:03:6f:50:14:f2:51:a3:bc:f8:bb:2d:1a:
                    dc:dd:27:8e:29:49:3f:52:37:85:ae:c1:be:02:49:
                    5b:c0:e2:4b:d2:4f:ae:b6:e8:4d:dc:21:71:da:4a:
                    ec:f9:4d:57:38:80:56:ea:22:2f:1e:85:60:85:1f:
                    b2:47:e1:c0:c2:3f:ab:96:bb:d4:31:8d:04:ab:4d:
                    73:8c:03:21:9d:e7:38:b9:56:8d:fa:a5:fa:3f:82:
                    af:2e:5b:35:97:24:d0:dd:67:c3:d9:50:17:27:cd:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9D:F4:1B:51:A4:56:E3:B5:6E:79:DE:BD:8E:C4:29:59:36:DD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/69422b68-8a68-3603-87a0-d6c75caad6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl

            X509v3 Authority Key Identifier:
                keyid:F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:d8:7c:9c:f3:d3:ed:1f:ae:87:a6:a1:91:40:51:be:8d:
         17:96:4e:24:0e:ba:c2:1b:f8:30:76:30:a2:37:cf:a0:05:8b:
         0c:44:8a:c1:2d:d5:ff:66:a7:2f:7f:b9:6d:c4:33:cf:9b:c4:
         a6:9b:58:ac:72:0d:c4:b9:61:0b:0b:b5:ff:b8:69:17:45:a9:
         15:75:e6:bc:95:19:2d:13:a5:5f:a4:54:89:ba:3c:79:cf:8b:
         9f:34:39:ef:44:ef:03:f9:8c:25:4d:fe:a7:71:f3:33:e1:4a:
         75:49:6a:af:d3:d1:99:a1:58:43:c8:2b:77:88:09:ec:3f:af:
         6c:e4:cb:63:1b:2f:87:ea:ec:85:e7:33:06:2b:2c:83:13:b5:
         37:c3:90:d4:23:73:cc:68:55:3a:35:71:16:fa:69:c0:19:1e:
         28:78:d5:6d:1e:fe:c9:3b:ec:23:4c:04:dd:0a:fe:a2:a4:b5:
         71:6f:17:30:17:ef:ad:69:72:92:fa:34:3b:1b:44:52:6d:61:
         40:6e:51:89:09:0f:e0:0c:9a:d2:b2:4a:89:31:8b:85:95:e4:
         42:72:79:a5:44:49:48:cb:53:d3:12:3f:ea:97:65:b1:1e:69:
         a9:1c:2a:49:de:ca:f6:6b:3d:2a:44:0a:53:58:43:59:8c:d0:
         fd:2d:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:21:01 2026 by rpki-client