Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/f15656b2-8afb-3aab-a898-82ed1b55cc27.roa
File:                     f15656b2-8afb-3aab-a898-82ed1b55cc27.roa (raw, json)
Hash identifier:          w7TStGkyjBcYF46LUutPKTaTnMnGKVbfMUTgTrwFTJE=
Subject key identifier:   E3:E1:A1:B4:12:FC:CD:10:7A:A3:3E:E6:6D:3B:5B:D5:36:B0:3F:FB
Certificate issuer:       /CN=e90a5d5f-94f4-480a-8d34-3368d2841674
Certificate serial:       010D0C9F4328584F612D6A328CEB687696E591A0
Authority key identifier: A0:D6:BD:62:A6:0A:E0:25:9C:89:14:8F:BD:71:D6:88:50:4C:C9:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/f15656b2-8afb-3aab-a898-82ed1b55cc27.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     15830
IP address blocks:        140.212.110.0/24 maxlen: 24
                          140.212.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/e90a5d5f-94f4-480a-8d34-3368d2841674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/e90a5d5f-94f4-480a-8d34-3368d2841674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:6a:32:8c:eb:68:76:96:e5:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90a5d5f-94f4-480a-8d34-3368d2841674
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=7d4bd257-4591-484d-9e02-7677455b7775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:62:67:7e:32:3d:53:c5:24:83:f0:ba:26:
                    6a:18:0d:ae:34:e1:79:e0:e7:72:d6:e8:bc:01:f6:
                    e6:41:9e:0a:12:5d:2c:65:ef:7c:a4:d5:bb:6a:4f:
                    66:89:ea:59:d7:c0:3c:67:be:2c:7a:90:f5:86:b8:
                    2b:ae:42:0a:b2:49:2a:55:4c:ec:16:0b:d8:c6:1e:
                    2c:b8:3a:48:99:70:86:50:5a:9d:31:2a:10:02:51:
                    ba:c1:42:2b:35:0e:99:08:41:bf:cb:8f:6d:db:f1:
                    ca:fd:bb:91:80:d7:16:65:1c:52:14:f8:14:b0:4a:
                    41:7c:df:68:2f:22:e2:cc:d1:cb:91:ec:8f:cc:05:
                    dd:f2:60:6f:a1:a0:f3:e3:af:35:4c:59:00:19:ff:
                    64:ea:07:06:77:fa:6c:bf:3d:58:d5:fc:bb:7a:68:
                    83:fc:c1:68:fe:55:ba:d1:71:06:c3:33:07:ab:2d:
                    58:84:59:c7:eb:29:98:7d:5e:03:db:a1:dc:92:81:
                    27:6b:d8:eb:48:5b:be:97:2d:9e:d5:94:dc:e3:b9:
                    90:c7:4b:92:80:e7:8d:ad:05:61:fc:01:a4:cf:e5:
                    de:3b:0d:75:e9:65:a8:c5:41:81:5d:33:b4:c0:29:
                    75:79:22:4d:bb:46:83:3b:0f:9d:f8:8c:b1:6c:c1:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E1:A1:B4:12:FC:CD:10:7A:A3:3E:E6:6D:3B:5B:D5:36:B0:3F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/f15656b2-8afb-3aab-a898-82ed1b55cc27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/e90a5d5f-94f4-480a-8d34-3368d2841674.crl

            X509v3 Authority Key Identifier:
                keyid:A0:D6:BD:62:A6:0A:E0:25:9C:89:14:8F:BD:71:D6:88:50:4C:C9:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.212.110.0/24
                  140.212.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:b9:12:6e:bc:8f:b2:6c:ae:6a:40:20:09:e3:af:e4:14:
         73:5f:a4:95:1b:b5:83:83:de:9a:b4:e4:6a:db:94:4d:f7:5a:
         75:2a:75:bb:a3:a3:a8:be:58:ce:5d:97:d5:79:1c:c6:06:a1:
         01:3b:ab:1d:5e:a4:ea:1c:dd:0b:c6:38:d4:4d:03:46:48:73:
         40:64:2f:83:3d:de:52:85:ee:72:13:7c:41:c6:90:a2:ab:05:
         90:ff:01:4c:ce:9a:01:6b:df:1d:d1:6a:75:71:88:97:53:ce:
         ff:e7:48:c7:c4:ca:a5:4d:7b:d2:72:06:4c:2d:28:75:89:1c:
         55:7c:1f:80:8e:44:80:c2:50:15:de:99:72:48:34:0f:28:f2:
         00:44:2a:8a:0b:da:b4:75:1c:97:b3:e5:aa:12:e6:c9:8d:1a:
         42:39:cd:b2:fd:e4:42:59:31:97:7b:0d:78:b4:e0:93:5a:49:
         89:6a:38:80:16:e8:0b:bf:fb:08:8b:fe:5e:74:54:f0:de:bb:
         9c:f8:72:61:e0:b4:ff:cd:18:36:6b:d4:47:27:c2:3d:68:51:
         0f:f0:d5:75:55:f1:95:e1:23:cb:1a:6b:ae:03:fe:4c:e8:44:
         f7:fe:bb:ce:b9:b9:cf:cc:16:b6:db:75:d9:86:e7:9e:b7:3b:
         88:f9:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:25:30 2026 by rpki-client