Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ddb74b54-1332-3a11-86d2-cc2407c5843c.roa
File:                     ddb74b54-1332-3a11-86d2-cc2407c5843c.roa (raw, json)
Hash identifier:          R2LkAoq2/QQuP2Z8gZiBNLaDnzBhnfJadAQEGG/6c+0=
Subject key identifier:   06:57:80:FB:4A:D7:D4:2C:83:1A:01:8D:A7:D6:C1:E7:28:3B:C6:28
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584CC3473D49176DF0953EFAC280
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ddb74b54-1332-3a11-86d2-cc2407c5843c.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     3477
IP address blocks:        140.90.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:3d:49:17:6d:f0:95:3e:fa:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=73618142-86dd-4ccf-9b21-837dbdcf25a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:10:7f:18:99:9f:a3:46:b7:c8:16:ad:45:52:
                    6b:15:bc:d2:a1:bb:ac:3c:55:f1:d4:a8:c7:12:07:
                    49:8c:68:bf:38:cf:94:93:a4:87:dd:4c:13:54:5f:
                    f1:5a:9d:18:ea:48:b1:b5:5c:b3:6d:2f:28:a0:df:
                    a7:aa:49:f8:b5:0c:74:29:67:b0:e2:09:9c:6a:b9:
                    17:be:ef:85:22:e9:a2:a8:fd:4c:4f:d6:e7:46:8b:
                    d0:2f:27:6f:20:7f:ac:52:4e:57:6c:83:37:b0:e3:
                    9d:d8:1a:ee:9e:30:84:95:96:41:83:e1:59:d9:ac:
                    8b:0a:49:b3:ae:e7:77:0b:11:8f:45:02:58:3a:86:
                    76:70:56:21:24:25:35:d7:a4:ee:a8:1f:b9:08:f6:
                    e1:54:3a:dc:a9:33:d6:fd:72:5b:77:29:7c:34:d8:
                    60:96:e3:2d:dd:5b:3d:e8:3d:5b:c0:7a:ed:2e:53:
                    e8:7d:f6:a1:b1:ed:65:94:56:75:bd:d3:9d:6a:3a:
                    30:a7:b6:cf:f7:ba:37:49:cb:d7:38:e0:2d:d5:60:
                    46:85:7f:25:bc:64:74:78:d4:90:84:01:67:2b:56:
                    38:dc:09:b8:bc:0a:b0:30:1d:a5:e4:6c:3a:b9:18:
                    d4:30:91:7c:66:78:c2:01:9c:93:f7:98:12:c3:a0:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:57:80:FB:4A:D7:D4:2C:83:1A:01:8D:A7:D6:C1:E7:28:3B:C6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ddb74b54-1332-3a11-86d2-cc2407c5843c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:e7:cb:53:0d:e9:0f:2d:82:b4:33:8a:eb:80:46:c0:94:
         49:94:b1:1b:f0:7f:1c:32:0b:6e:f4:cf:bd:80:82:ef:ee:4f:
         7a:80:95:e8:0d:fc:d4:0f:6c:6c:42:52:27:eb:3c:ff:b5:d2:
         94:87:75:89:ac:a5:91:40:7f:0d:af:79:14:f9:2e:56:2b:df:
         53:a4:92:bb:64:3f:56:d9:42:5c:c2:24:44:98:94:75:35:ad:
         d7:40:6e:ce:f4:21:df:54:b3:a2:4e:4f:cf:db:9a:09:78:5f:
         ee:62:c5:06:9b:27:ef:58:dd:1f:66:42:2f:9c:81:d8:c2:d2:
         2e:7c:6b:51:40:33:4a:71:4a:06:cd:d8:36:2a:d2:84:59:da:
         3a:49:2f:91:b0:29:04:b0:4e:b9:14:50:38:6f:bc:f4:64:06:
         91:84:82:25:31:99:8b:cb:22:28:9e:1d:e9:d6:19:f9:cf:23:
         08:0b:14:5c:b3:56:ee:e9:12:cf:09:c0:cf:68:48:97:99:a8:
         36:8c:32:b3:a4:be:12:cb:a5:b7:6c:a7:7e:b7:8f:a2:22:78:
         4a:57:22:02:6a:ec:85:f5:b2:a4:e8:e4:5e:69:c5:88:b2:27:
         2f:2e:c0:30:c1:1a:2c:5c:46:9b:13:91:f5:40:3c:c7:a2:a2:
         6f:01:01:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDRz1JF23wlT76woAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk
NzM2MTgxNDItODZkZC00Y2NmLTliMjEtODM3ZGJkY2YyNWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhB/GJmfo0a3yBatRVJrFbzSobusPFXx1KjH
EgdJjGi/OM+Uk6SH3UwTVF/xWp0Y6kixtVyzbS8ooN+nqkn4tQx0KWew4gmcarkX
vu+FIumiqP1MT9bnRovQLydvIH+sUk5XbIM3sOOd2BrunjCElZZBg+FZ2ayLCkmz
rud3CxGPRQJYOoZ2cFYhJCU116TuqB+5CPbhVDrcqTPW/XJbdyl8NNhgluMt3Vs9
6D1bwHrtLlPoffahse1llFZ1vdOdajowp7bP97o3ScvXOOAt1WBGhX8lvGR0eNSQ
hAFnK1Y43Am4vAqwMB2l5Gw6uRjUMJF8ZnjCAZyT95gSw6ClpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZXgPtK19QsgxoBjafWwecoO8YoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvZGRiNzRiNTQtMTMzMi0z
YTExLTg2ZDItY2MyNDA3YzU4NDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjFq+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIY858tTDekPLYK0M4rrgEbAlEmUsRvwfxwyC270z72Agu/uT3qAlegN
/NQPbGxCUifrPP+10pSHdYmspZFAfw2veRT5LlYr31OkkrtkP1bZQlzCJESYlHU1
rddAbs70Id9Us6JOT8/bmgl4X+5ixQabJ+9Y3R9mQi+cgdjC0i58a1FAM0pxSgbN
2DYq0oRZ2jpJL5GwKQSwTrkUUDhvvPRkBpGEgiUxmYvLIiieHenWGfnPIwgLFFyz
Vu7pEs8JwM9oSJeZqDaMMrOkvhLLpbdsp363j6IieEpXIgJq7IX1sqTo5F5pxYiy
Jy8uwDDBGixcRpsTkfVAPMeiom8BAUE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:45 2026 by rpki-client