Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa
File:                     40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa (raw, json)
Hash identifier:          Zve/LH8RG650/f83IYK80df5uMSthVYxbFbovmChqKw=
Subject key identifier:   B1:AF:3F:48:49:49:2F:19:A9:48:80:61:ED:84:B3:A4:DF:0D:00:38
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584D75D537EA99382044C936B1A0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     1239
IP address blocks:        141.140.64.0/24 maxlen: 24
                          141.140.67.0/24 maxlen: 24
                          141.140.70.0/24 maxlen: 24
                          141.140.73.0/24 maxlen: 24
                          141.140.76.0/24 maxlen: 24
                          141.140.79.0/24 maxlen: 24
                          141.140.82.0/24 maxlen: 24
                          141.140.85.0/24 maxlen: 24
                          141.140.88.0/24 maxlen: 24
                          141.140.91.0/24 maxlen: 24
                          141.140.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:37:ea:99:38:20:44:c9:36:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=202c91d3-78d3-46a3-afcb-7a664ee3221b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:5a:c7:0f:52:af:c4:66:25:6a:22:04:24:
                    8a:51:67:95:2d:43:df:7e:cd:40:f8:1b:eb:7c:9f:
                    fe:d0:53:32:64:93:0a:32:97:b7:cf:d2:9b:ac:14:
                    0b:ee:08:82:65:14:57:ba:e3:ff:a2:6f:49:f8:d4:
                    35:05:c8:b7:12:a6:46:a1:06:34:6f:4d:79:8b:41:
                    93:10:cb:cf:b1:29:b1:da:da:41:1d:13:b4:61:55:
                    52:72:31:99:1b:11:28:9b:d5:52:9b:2a:1c:50:db:
                    08:f5:ca:43:03:df:0f:f7:7b:a7:9f:09:e8:8b:a9:
                    ba:b2:f2:3e:29:da:69:20:d2:80:b4:88:30:4d:9e:
                    55:7b:99:c8:44:b1:ab:35:ee:eb:0f:66:e8:b0:2a:
                    26:07:a2:1d:06:d2:cf:5c:93:38:b0:6e:43:35:17:
                    fb:5d:ae:fe:67:f6:aa:0f:18:54:e4:7c:6f:49:37:
                    62:b0:37:85:c0:05:ec:81:6b:60:a1:98:48:3b:2c:
                    08:db:39:e8:0b:8a:2b:11:37:11:1c:4f:f8:49:fd:
                    5a:ea:7d:a0:c3:ae:48:d9:a2:cd:6d:09:87:8d:77:
                    0e:cc:ad:be:3d:d1:1c:9c:78:59:e7:9c:99:17:4e:
                    37:1c:97:01:c0:fa:05:fe:c7:0a:24:a3:b4:b3:e7:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AF:3F:48:49:49:2F:19:A9:48:80:61:ED:84:B3:A4:DF:0D:00:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.64.0/24
                  141.140.67.0/24
                  141.140.70.0/24
                  141.140.73.0/24
                  141.140.76.0/24
                  141.140.79.0/24
                  141.140.82.0/24
                  141.140.85.0/24
                  141.140.88.0/24
                  141.140.91.0/24
                  141.140.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:2d:6f:59:55:f2:90:08:0a:69:df:3a:5c:46:f2:04:f1:
         4d:67:77:56:b1:47:3f:60:07:b7:a6:50:b3:47:d7:1c:3a:9f:
         62:03:39:56:ea:57:a8:11:76:c7:01:3a:47:b6:d1:90:1f:4c:
         80:17:32:85:15:c6:1b:74:c5:e5:c4:59:28:c0:7f:17:c5:a3:
         07:48:fb:78:49:75:1c:2e:6a:c7:ab:bb:b4:78:a0:61:89:4e:
         a4:9c:c5:55:3b:52:b2:53:1c:a3:04:06:6c:03:b6:fe:3a:e8:
         6e:6b:a0:b6:86:71:b6:02:0f:51:98:a2:2b:63:3f:94:4c:7a:
         01:ff:5f:ee:55:00:87:4d:cd:b3:38:a0:24:0a:47:d4:97:69:
         9d:4d:17:2c:77:74:ab:72:7b:7f:98:8b:fb:02:9b:38:30:d0:
         76:07:a5:f5:d9:6e:a4:92:96:0e:35:43:7c:f7:d3:9f:40:5e:
         7e:56:a9:84:13:1f:f4:8f:0b:36:de:2c:53:95:d6:45:66:51:
         9d:98:10:34:c4:eb:84:69:b4:36:d0:6b:39:49:a7:13:e5:da:
         63:ae:55:9a:4f:6b:31:fa:a0:87:9d:03:cb:20:1b:4e:e1:d5:
         68:c5:fd:35:dc:4e:0a:a8:0f:3d:a4:94:ff:c8:c3:46:65:e8:
         b7:79:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:32 2026 by rpki-client