Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/5ce30dd3-7307-3276-8369-f37f21559366.roa
File:                     5ce30dd3-7307-3276-8369-f37f21559366.roa (raw, json)
Hash identifier:          1r/Pdqem1p76JYrihwIrdVuyQrO8ACEnNzAUP4yZ1Ic=
Subject key identifier:   53:8E:5F:60:B7:56:4B:E7:26:41:A7:C7:56:20:1D:C4:63:07:4C:FF
Certificate issuer:       /CN=02d642b9-8f67-4883-b980-ce36229bb587
Certificate serial:       010D0C9F4328584DAAE030AF17153AC452899040
Authority key identifier: 83:CC:82:AA:12:F9:ED:D3:9D:48:89:FC:1B:8D:F2:AC:3B:51:FB:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/5ce30dd3-7307-3276-8369-f37f21559366.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     398019
IP address blocks:        140.235.16.0/24 maxlen: 24
                          140.235.17.0/24 maxlen: 24
                          140.235.18.0/24 maxlen: 24
                          140.235.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/02d642b9-8f67-4883-b980-ce36229bb587.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/02d642b9-8f67-4883-b980-ce36229bb587.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:30:af:17:15:3a:c4:52:89:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d642b9-8f67-4883-b980-ce36229bb587
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=96f03477-4883-4f30-975c-dfa08b1d04c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:51:44:f1:d8:4d:15:24:b4:e6:91:07:c8:
                    80:aa:7a:bb:34:34:56:bc:71:b1:83:7d:d7:20:27:
                    2a:25:71:0b:88:44:35:d2:e7:73:9b:b6:a4:2f:4c:
                    0b:ec:2f:cf:0b:ca:2b:a8:b0:7b:be:d5:8c:88:6c:
                    64:d0:6f:48:07:d7:a6:c9:d7:d0:80:2e:05:c5:f1:
                    d7:d7:d5:e4:ba:f0:6e:71:ca:ea:5d:8a:aa:0b:73:
                    31:fd:aa:20:29:20:ef:06:13:b3:03:d9:43:3b:8c:
                    d4:d3:3e:93:04:5d:0e:f6:e9:55:ea:85:73:5d:4f:
                    4b:c9:bd:8b:c7:83:63:72:42:1d:99:16:4d:81:e2:
                    38:6d:12:94:bc:92:af:c7:5f:0a:8d:6d:fe:2e:67:
                    3d:73:7f:b4:b7:43:41:a8:20:af:7d:89:1a:f2:3b:
                    01:ba:28:9f:34:4c:94:88:1b:8a:12:f7:00:ed:a3:
                    19:2b:c2:77:01:97:da:2a:fe:3a:d3:e5:38:29:fb:
                    6a:1f:f1:5c:c6:5c:34:79:f1:0b:c3:78:b7:31:5a:
                    ad:29:6f:1f:68:8e:03:c2:d0:98:35:87:2d:54:0f:
                    1b:f9:5e:c0:26:9e:fe:ad:84:15:1a:ee:f5:90:c5:
                    5c:26:39:6d:94:39:a6:cd:51:cc:dd:5b:26:a2:a4:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8E:5F:60:B7:56:4B:E7:26:41:A7:C7:56:20:1D:C4:63:07:4C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/5ce30dd3-7307-3276-8369-f37f21559366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/02d642b9-8f67-4883-b980-ce36229bb587.crl

            X509v3 Authority Key Identifier:
                keyid:83:CC:82:AA:12:F9:ED:D3:9D:48:89:FC:1B:8D:F2:AC:3B:51:FB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:96:89:a0:0c:cf:26:80:7d:0e:ce:e3:e0:db:c9:f6:fa:af:
         ae:c4:70:2d:8a:62:f9:12:43:46:e2:e1:10:08:c2:90:be:26:
         05:5f:ec:8d:54:a0:1b:79:04:be:64:70:6e:96:86:8c:0c:c0:
         aa:9d:cb:5e:09:74:7b:cb:ec:22:7c:91:55:ed:d9:17:ee:4a:
         eb:10:dd:eb:93:e1:fa:f3:6c:98:80:8f:17:06:a8:d9:72:e9:
         01:ff:3d:ca:1a:4f:a0:a7:b1:75:77:3b:7f:0a:01:2f:12:97:
         00:89:a7:8b:ed:69:4a:8e:0b:d5:7b:d3:b4:09:7f:4b:82:b6:
         fc:37:1e:f8:ce:b2:c4:7c:1e:42:ad:32:ea:e4:e4:52:36:1c:
         9e:23:51:b1:6c:cc:eb:16:79:9a:0f:38:cc:eb:88:26:e4:94:
         8f:4f:83:62:56:1a:70:8f:be:4d:ec:65:c4:b5:a9:3d:40:8c:
         58:2b:c1:91:8c:81:e0:d7:14:38:dc:07:83:a0:5c:5d:73:a7:
         30:3d:a9:67:de:45:c1:a9:67:20:95:73:bb:b5:56:1c:cf:ef:
         6f:e9:7a:c1:f4:3e:90:e2:37:af:b3:1e:32:ef:3b:76:74:e7:
         f9:6d:f3:d9:28:73:ad:c0:23:8d:f2:83:62:06:00:3e:0b:be:
         0e:3c:af:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DCvFxU6xFKJkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJkNjQyYjktOGY2Ny00ODgzLWI5ODAtY2UzNjIyOWJi
NTg3MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
OTZmMDM0NzctNDg4My00ZjMwLTk3NWMtZGZhMDhiMWQwNGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheBRRPHYTRUktOaRB8iAqnq7NDRWvHGxg33X
ICcqJXELiEQ10udzm7akL0wL7C/PC8orqLB7vtWMiGxk0G9IB9emydfQgC4FxfHX
19XkuvBuccrqXYqqC3Mx/aogKSDvBhOzA9lDO4zU0z6TBF0O9ulV6oVzXU9Lyb2L
x4NjckIdmRZNgeI4bRKUvJKvx18KjW3+Lmc9c3+0t0NBqCCvfYka8jsBuiifNEyU
iBuKEvcA7aMZK8J3AZfaKv460+U4KftqH/Fcxlw0efELw3i3MVqtKW8faI4DwtCY
NYctVA8b+V7AJp7+rYQVGu71kMVcJjltlDmmzVHM3VsmoqQVPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOOX2C3VkvnJkGnx1YgHcRjB0z/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMmQ2
NDJiOS04ZjY3LTQ4ODMtYjk4MC1jZTM2MjI5YmI1ODcvNWNlMzBkZDMtNzMwNy0z
Mjc2LTgzNjktZjM3ZjIxNTU5MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDJkNjQyYjktOGY2Ny00ODgzLWI5
ODAtY2UzNjIyOWJiNTg3LzAyZDY0MmI5LThmNjctNDg4My1iOTgwLWNlMzYyMjli
YjU4Ny5jcmwwHwYDVR0jBBgwFoAUg8yCqhL57dOdSIn8G43yrDtR+7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wMmQ2NDJiOS04ZjY3LTQ4ODMtYjk4MC1jZTM2
MjI5YmI1ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIaWiaAMzyaAfQ7O4+Dbyfb6r67EcC2KYvkSQ0bi4RAIwpC+JgVf7I1U
oBt5BL5kcG6WhowMwKqdy14JdHvL7CJ8kVXt2RfuSusQ3euT4frzbJiAjxcGqNly
6QH/PcoaT6CnsXV3O38KAS8SlwCJp4vtaUqOC9V707QJf0uCtvw3HvjOssR8HkKt
Murk5FI2HJ4jUbFszOsWeZoPOMzriCbklI9Pg2JWGnCPvk3sZcS1qT1AjFgrwZGM
geDXFDjcB4OgXF1zpzA9qWfeRcGpZyCVc7u1VhzP72/pesH0PpDiN6+zHjLvO3Z0
5/lt89koc63AI43yg2IGAD4Lvg48ryc=
-----END CERTIFICATE-----
Generated at Fri May 1 18:35:37 2026 by rpki-client