Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa
File:                     6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa (raw, json)
Hash identifier:          Gg48uVhSGblDWyQHrm5830Jk9hPREv5JpX3z/YYQd/I=
Subject key identifier:   54:0D:08:2A:7E:8E:2B:D9:2A:94:19:1C:74:47:F7:6F:F6:EF:73:4B
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584CC3473C282297BFA196BF4D00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     3477
IP address blocks:        140.90.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:3c:28:22:97:bf:a1:96:bf:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=9a22e9db-b07a-4f9d-83dc-72dd69bef5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:7e:ed:42:f4:8d:28:05:61:8b:02:78:0d:
                    3c:87:93:29:df:2d:d6:82:e7:cc:c3:13:70:09:06:
                    3d:7e:db:71:cb:fa:d4:b9:4c:3c:ed:1b:4f:11:42:
                    d8:cb:ec:a5:fe:05:44:98:89:a8:c4:fb:f7:bc:64:
                    5b:89:a5:c2:93:04:ac:df:7b:3c:1c:df:12:6a:db:
                    a2:41:42:a4:41:a9:fa:43:36:21:c5:a5:51:a9:a0:
                    83:2d:76:a1:93:03:a4:1b:00:f8:5a:03:20:89:47:
                    ae:a5:82:06:c3:54:55:e0:5f:c9:8c:81:e6:21:50:
                    74:e9:f6:4e:b3:be:65:f9:dd:6b:5d:3d:e3:a1:2d:
                    c2:7d:0f:de:58:85:ba:27:db:c9:a4:37:39:53:4e:
                    6a:22:89:bc:22:11:ec:e7:d4:6f:15:c7:cf:28:e6:
                    db:d3:8e:35:e3:9b:70:38:0a:db:e7:22:28:28:20:
                    48:e8:52:83:37:b2:a0:70:33:dc:67:fd:5d:4a:84:
                    6c:fc:2a:84:5b:ce:43:5d:44:c7:ed:d7:4a:8f:d9:
                    f4:fb:5e:f4:a0:10:12:ce:e6:ff:e3:7c:4f:62:95:
                    da:fc:28:ab:e4:45:7b:c0:62:a6:66:cb:18:d9:e4:
                    cc:5e:62:60:25:33:0d:25:6d:0c:51:03:9a:27:2e:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0D:08:2A:7E:8E:2B:D9:2A:94:19:1C:74:47:F7:6F:F6:EF:73:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:a6:3d:63:af:d4:63:2e:d0:b0:0b:e3:44:34:74:c6:25:
         67:64:e0:7d:f8:b1:a5:ca:fa:50:33:dd:9b:9d:43:5a:68:ef:
         4a:6e:71:fb:ec:be:bc:51:8b:f5:19:d4:cf:0f:93:37:a9:75:
         3c:33:83:64:aa:bf:a3:40:89:fc:ea:23:fc:cc:2f:f7:41:30:
         36:4b:1f:94:b2:20:56:9d:a8:87:dd:74:a6:a6:50:ee:02:6c:
         90:7b:25:b1:ee:3c:3c:54:f2:78:2f:fb:3c:8c:42:64:96:5f:
         aa:8a:d7:16:07:63:97:7d:a5:ad:03:e7:80:d8:80:f1:01:ed:
         f7:9d:86:5b:28:a2:06:0a:c6:6d:84:7f:85:ea:77:80:49:43:
         e3:d9:2d:c6:db:7a:02:91:47:85:d4:bc:56:bb:18:48:89:8b:
         8f:ea:70:4b:6d:28:8b:94:0b:2b:70:41:fb:b6:00:85:fe:98:
         a9:4f:91:00:4f:f4:a5:98:45:a4:f7:13:1b:f0:fd:10:4d:89:
         b5:1c:fa:d1:e8:19:30:ec:5f:18:d9:36:c4:c3:73:92:2b:43:
         66:a3:d8:b1:bd:9b:9d:4c:59:c7:4e:75:d1:a0:0b:17:1d:e0:
         b4:3d:41:3d:a9:c8:61:15:95:05:58:39:fa:52:60:86:9f:4d:
         36:79:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:27 2026 by rpki-client