Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa
File:                     fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa (raw, json)
Hash identifier:          9+EMGjFGCFXGeHqKJNXZ+xrbsEQVHhJyjxqOae5TzxM=
Subject key identifier:   21:BB:85:25:F0:58:66:AC:35:51:46:AE:40:A8:07:FE:53:29:95:99
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584D75D537F93BAD9DE8D2A07220
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     7018
IP address blocks:        141.140.65.0/24 maxlen: 24
                          141.140.68.0/24 maxlen: 24
                          141.140.71.0/24 maxlen: 24
                          141.140.74.0/24 maxlen: 24
                          141.140.77.0/24 maxlen: 24
                          141.140.80.0/24 maxlen: 24
                          141.140.83.0/24 maxlen: 24
                          141.140.86.0/24 maxlen: 24
                          141.140.89.0/24 maxlen: 24
                          141.140.92.0/24 maxlen: 24
                          141.140.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:37:f9:3b:ad:9d:e8:d2:a0:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=f24c880d-b6d2-4c02-9477-c6abba19783c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:0e:18:3c:99:94:ab:53:39:2e:dd:e8:db:
                    08:8e:7a:77:46:6d:c7:41:3c:c3:ac:97:08:73:10:
                    6d:59:ac:bb:91:bc:3a:21:72:74:c9:03:96:c8:02:
                    2f:d5:f4:35:8b:91:5e:43:5e:7a:32:7d:28:22:ab:
                    14:ab:a4:40:ef:84:fe:3a:0b:c2:2a:28:eb:cb:38:
                    59:8a:78:f9:0f:15:d6:e5:a8:f8:ce:c2:0c:4f:f6:
                    fb:45:c9:93:f6:55:5c:69:8b:7e:4d:ee:86:0b:b2:
                    a6:aa:22:a8:c1:a0:d7:71:e1:a5:d2:77:6b:ec:44:
                    db:44:c2:0e:03:37:72:5c:7a:d6:01:b2:fb:56:0a:
                    eb:6a:05:b1:a0:7f:cd:97:f0:56:b5:8b:b6:88:03:
                    13:d9:41:65:08:99:21:25:bf:e7:ef:40:2c:2b:79:
                    fc:55:87:16:76:a7:bb:ea:9b:c3:02:ce:66:4c:b8:
                    52:06:78:52:1b:dc:45:30:16:9d:7c:1b:b0:f6:5f:
                    c4:1a:0f:b0:b0:35:c8:76:51:42:e8:c4:4d:6a:fe:
                    d6:ff:7a:70:52:5e:3d:24:3a:79:3b:4b:cd:b9:a8:
                    57:08:5f:e8:29:05:2f:48:2e:a8:0c:d1:77:77:5a:
                    d5:ff:a0:e6:ff:99:57:e2:66:2e:c8:2b:d0:f0:ce:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BB:85:25:F0:58:66:AC:35:51:46:AE:40:A8:07:FE:53:29:95:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.65.0/24
                  141.140.68.0/24
                  141.140.71.0/24
                  141.140.74.0/24
                  141.140.77.0/24
                  141.140.80.0/24
                  141.140.83.0/24
                  141.140.86.0/24
                  141.140.89.0/24
                  141.140.92.0/24
                  141.140.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:f6:74:da:94:9f:d9:72:e2:73:19:34:0f:4a:c3:3b:3b:
         c3:8b:60:e0:b1:fb:00:66:69:a9:8f:9c:7f:8c:99:01:75:98:
         5a:6e:64:39:c3:56:bc:aa:e2:18:c8:41:74:a3:1c:ee:df:f1:
         3b:78:f7:33:d7:37:f8:7f:3c:58:8a:ca:f1:e9:c0:7c:b0:95:
         f9:ad:be:2c:67:e2:03:36:e2:c4:c0:02:9e:13:d4:8f:ee:63:
         0e:bd:4a:23:7c:c5:3f:1a:8d:aa:89:0b:66:70:55:dc:d6:a1:
         92:30:c4:60:ce:b3:7d:1c:fc:59:3f:b4:d0:d4:16:f9:2d:25:
         4a:20:1e:c6:10:c5:9b:60:99:c9:ff:43:fd:cd:2b:93:a9:89:
         39:23:b9:ee:03:db:bc:86:f1:d8:a8:d1:be:95:ed:aa:51:d6:
         22:c7:03:f3:e2:b7:98:9c:e5:04:46:6b:36:7a:4f:c5:46:e6:
         f2:e2:ef:e2:40:0f:bf:ac:af:ab:2c:f9:70:76:41:48:b0:50:
         53:a3:c1:69:be:48:c2:b3:74:c5:af:e3:bb:e9:f1:3c:23:b6:
         8a:2f:8e:bf:a8:46:78:70:18:78:66:65:25:de:ff:cc:a6:d0:
         dd:f1:ed:d8:ec:f1:c1:86:47:33:ac:1c:d0:7c:0e:2f:ec:94:
         80:e2:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:36 2026 by rpki-client