Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f283e77-0b15-3532-a6e6-d224e3cb31ed.roa
File:                     5f283e77-0b15-3532-a6e6-d224e3cb31ed.roa (raw, json)
Hash identifier:          65Oes50/+WJIhyNGtGMso7uTW5WkE0AQz7DtTXDXXDw=
Subject key identifier:   06:55:70:BF:FA:25:3A:48:D6:57:3F:05:C9:47:74:79:94:49:75:70
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6DD4D1A9E5B72E4CA2ABE480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f283e77-0b15-3532-a6e6-d224e3cb31ed.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        140.91.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d1:a9:e5:b7:2e:4c:a2:ab:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=9a73ecbc-9935-48c9-95ce-410c62f94f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:60:66:3f:52:16:fa:ad:be:46:37:6d:b4:
                    57:5a:d8:4c:ec:e5:9e:ac:03:3e:d5:1b:27:e5:68:
                    7c:ab:27:a1:9d:7f:ac:47:49:e7:07:72:93:3d:0d:
                    40:bb:40:28:7a:a6:60:52:f6:7c:08:7f:b0:83:76:
                    92:6e:35:04:84:ec:d3:b7:85:e9:fe:f1:fb:73:21:
                    ae:36:75:61:75:29:3b:f2:52:b6:da:78:1c:88:ef:
                    7d:79:fd:aa:f1:05:90:7f:6b:7f:a0:45:f1:da:56:
                    e4:97:da:46:c0:aa:66:c3:1c:0e:86:c8:a5:81:37:
                    88:25:6d:ba:bc:ea:cf:96:ca:7e:35:e6:58:2c:75:
                    6a:7f:52:4d:c6:2a:b8:ba:62:56:8f:ef:bd:7f:15:
                    b9:4f:75:e7:b7:24:3f:62:a9:55:12:7c:80:2d:8c:
                    a9:87:83:c1:0d:36:74:55:65:0f:99:cc:32:af:58:
                    02:bb:e5:35:5f:c6:09:24:c2:b9:df:d7:e2:60:60:
                    35:cd:77:85:69:ba:93:f2:56:f8:9e:53:dd:dd:56:
                    f9:a7:34:38:0c:6a:7a:41:3e:b6:2b:49:39:9c:74:
                    e8:19:16:59:af:11:af:7d:1b:f5:60:57:5a:19:7a:
                    90:e2:01:af:2a:a3:d5:98:b9:dd:03:4f:58:9f:6e:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:70:BF:FA:25:3A:48:D6:57:3F:05:C9:47:74:79:94:49:75:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f283e77-0b15-3532-a6e6-d224e3cb31ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1d:7c:03:83:69:64:4f:66:a8:7f:d6:dd:d7:6c:ee:ac:a6:
         61:f8:91:c8:55:0f:5b:8d:63:4f:68:54:dd:ea:69:79:cc:72:
         e8:e8:d0:4b:9f:e1:5c:73:17:fd:74:e9:8d:d8:8f:cf:a5:37:
         b4:3f:97:0a:cb:b1:28:8c:7e:81:38:b2:26:34:59:83:55:06:
         99:68:08:88:ce:2a:5e:9c:32:f0:ed:55:cb:b7:7d:b8:76:6d:
         4c:69:8b:12:84:0c:1c:04:73:1c:28:f4:50:63:ff:41:c8:b5:
         61:2f:c3:af:63:b7:50:54:d2:bb:23:3d:6b:17:e4:be:7f:93:
         c1:b1:80:b6:2b:66:78:7b:8d:a3:75:43:93:c6:4c:dd:52:c9:
         86:c2:4b:74:71:9d:bd:f6:ae:41:bb:84:6d:70:bd:ef:2c:4f:
         90:a6:86:55:a4:7b:4d:bf:f0:2f:c9:e7:1e:ce:3a:de:38:d2:
         68:6b:62:97:9d:c7:56:48:cb:c9:61:0a:e9:bd:8e:5b:4e:b6:
         01:8f:b5:ec:39:f8:a9:77:e6:f4:d1:b9:c2:f3:8a:d8:95:05:
         ef:41:5b:de:e9:79:35:7d:ac:78:e3:0f:f8:9b:bc:18:bb:38:
         13:34:5a:a2:f0:ee:d4:70:84:17:ca:08:06:07:f1:cc:f0:40:
         25:34:57:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1NGp5bcuTKKr5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
OWE3M2VjYmMtOTkzNS00OGM5LTk1Y2UtNDEwYzYyZjk0ZjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCJgZj9SFvqtvkY3bbRXWthM7OWerAM+1Rsn
5Wh8qyehnX+sR0nnB3KTPQ1Au0AoeqZgUvZ8CH+wg3aSbjUEhOzTt4Xp/vH7cyGu
NnVhdSk78lK22ngciO99ef2q8QWQf2t/oEXx2lbkl9pGwKpmwxwOhsilgTeIJW26
vOrPlsp+NeZYLHVqf1JNxiq4umJWj++9fxW5T3XntyQ/YqlVEnyALYyph4PBDTZ0
VWUPmcwyr1gCu+U1X8YJJMK539fiYGA1zXeFabqT8lb4nlPd3Vb5pzQ4DGp6QT62
K0k5nHToGRZZrxGvfRv1YFdaGXqQ4gGvKqPVmLndA09Yn24T3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZVcL/6JTpI1lc/BclHdHmUSXVwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWYyODNlNzctMGIxNS0z
NTMyLWE2ZTYtZDIyNGUzY2IzMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFs4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFodfAODaWRPZqh/1t3XbO6spmH4kchVD1uNY09oVN3qaXnMcujo0Euf
4VxzF/106Y3Yj8+lN7Q/lwrLsSiMfoE4siY0WYNVBploCIjOKl6cMvDtVcu3fbh2
bUxpixKEDBwEcxwo9FBj/0HItWEvw69jt1BU0rsjPWsX5L5/k8GxgLYrZnh7jaN1
Q5PGTN1SyYbCS3Rxnb32rkG7hG1wve8sT5CmhlWke02/8C/J5x7OOt440mhrYped
x1ZIy8lhCum9jltOtgGPtew5+Kl35vTRucLzitiVBe9BW97peTV9rHjjD/ibvBi7
OBM0WqLw7tRwhBfKCAYH8czwQCU0V4c=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:32 2026 by rpki-client