Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa
File:                     e75d8978-0cca-3d04-885f-aabcb43ccc66.roa (raw, json)
Hash identifier:          su/zCIofMteq58Uf5oXq8ww8DuWbi1eh+2/PbwMFeII=
Subject key identifier:   C3:5F:77:5F:6E:B5:A9:6B:3A:AB:D5:AB:AD:66:F8:C1:45:A3:98:32
Certificate issuer:       /CN=df156af0-49c2-46d4-906b-5cf25869e65f
Certificate serial:       010D0C9F4328584CC3473BD64EC7BCAA1F808900
Authority key identifier: B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     26548
IP address blocks:        140.235.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:3b:d6:4e:c7:bc:aa:1f:80:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df156af0-49c2-46d4-906b-5cf25869e65f
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=9e977c89-039b-4f2d-873c-a536dcd6d853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d3:38:da:26:91:1d:30:4b:ef:f4:4e:5f:82:
                    6c:b8:d1:00:09:5b:02:4a:78:7b:df:0d:22:91:64:
                    29:b4:8b:6e:a4:1d:30:95:05:f3:4a:44:55:f4:16:
                    7a:4c:ea:5b:32:dc:43:02:96:56:8d:79:e5:09:4b:
                    55:d7:93:2f:d2:b3:be:e0:0b:b6:83:36:fe:35:e3:
                    2c:7a:e9:f3:e3:89:ec:41:95:f2:87:38:c6:b6:68:
                    d6:81:40:70:e6:07:b7:b7:22:5a:8c:e9:a5:b5:bc:
                    10:01:52:23:ab:8a:6f:b4:9b:89:1a:36:78:c9:0b:
                    96:af:40:43:3c:fd:42:7c:c2:27:06:fc:1d:f2:77:
                    5e:25:bd:2d:21:7f:dc:80:c7:d3:20:29:58:a7:af:
                    18:42:9f:1c:e9:52:66:4e:9e:2f:79:9a:41:83:85:
                    aa:dc:b4:a0:1b:55:b4:d6:ab:ac:84:99:c7:05:e7:
                    10:af:6e:5d:96:86:05:9f:08:13:11:d8:72:94:bc:
                    78:a2:48:d4:f8:12:fe:a9:bf:48:d7:77:c6:cc:8d:
                    1b:bd:cd:d6:59:7e:18:e8:9c:cc:22:c3:22:16:51:
                    10:01:02:40:be:a4:71:49:b2:e7:88:57:41:06:5f:
                    0c:8a:c2:98:73:8d:e5:c2:8b:a4:f8:ce:0c:43:4c:
                    f9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:77:5F:6E:B5:A9:6B:3A:AB:D5:AB:AD:66:F8:C1:45:A3:98:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl

            X509v3 Authority Key Identifier:
                keyid:B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:f8:4a:25:6c:7f:c1:89:a4:64:bc:79:82:75:2b:d4:d4:41:
         17:23:0b:72:be:f3:fc:f0:4f:c0:0e:f6:98:34:0b:ea:bb:a0:
         2e:ff:14:7a:26:8b:ee:46:94:d2:79:fd:3a:b5:e5:ea:82:75:
         51:21:97:50:61:2b:65:b7:73:07:13:64:99:a9:92:8c:8c:e5:
         6a:0b:45:59:64:2e:2f:86:b8:d8:86:6f:de:68:2b:5d:4f:f4:
         76:2a:61:27:b3:75:8e:09:8f:1c:b8:80:5d:98:94:00:92:60:
         b4:dc:32:79:dd:0d:25:af:ff:b5:53:24:10:0b:b8:bc:45:ec:
         2f:62:66:b2:3c:de:5e:63:e6:2c:3b:78:8f:26:8f:99:c5:38:
         da:a4:0e:ea:a5:ee:96:52:ec:11:b2:64:08:37:4d:5b:15:01:
         a7:66:d8:6a:7e:ef:7f:6b:c2:f1:01:7e:61:73:6e:2f:fb:3d:
         8a:4a:52:e0:36:24:bd:8c:1c:8b:81:bd:43:94:61:93:6a:08:
         20:fb:ed:58:91:c8:5e:1f:b3:41:51:42:a4:04:55:84:62:2b:
         3d:bb:13:7d:a1:50:b8:20:87:0d:2c:62:34:c2:a7:b6:ee:03:
         e5:65:67:77:a7:f9:48:0a:90:06:8e:22:72:ab:3c:75:c6:06:
         ca:15:78:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDRzvWTse8qh+AiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYxNTZhZjAtNDljMi00NmQ0LTkwNmItNWNmMjU4Njll
NjVmMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk
OWU5NzdjODktMDM5Yi00ZjJkLTg3M2MtYTUzNmRjZDZkODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtM42iaRHTBL7/ROX4JsuNEACVsCSnh73w0i
kWQptItupB0wlQXzSkRV9BZ6TOpbMtxDApZWjXnlCUtV15Mv0rO+4Au2gzb+NeMs
eunz44nsQZXyhzjGtmjWgUBw5ge3tyJajOmltbwQAVIjq4pvtJuJGjZ4yQuWr0BD
PP1CfMInBvwd8ndeJb0tIX/cgMfTIClYp68YQp8c6VJmTp4veZpBg4Wq3LSgG1W0
1qushJnHBecQr25dloYFnwgTEdhylLx4okjU+BL+qb9I13fGzI0bvc3WWX4Y6JzM
IsMiFlEQAQJAvqRxSbLniFdBBl8MisKYc43lwouk+M4MQ0z5jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNfd19utalrOqvVq61m+MFFo5gyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZjE1
NmFmMC00OWMyLTQ2ZDQtOTA2Yi01Y2YyNTg2OWU2NWYvZTc1ZDg5NzgtMGNjYS0z
ZDA0LTg4NWYtYWFiY2I0M2NjYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGYxNTZhZjAtNDljMi00NmQ0LTkw
NmItNWNmMjU4NjllNjVmL2RmMTU2YWYwLTQ5YzItNDZkNC05MDZiLTVjZjI1ODY5
ZTY1Zi5jcmwwHwYDVR0jBBgwFoAUuWmEbS7iLBAssqrG5qNbrvFCRk8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZjE1NmFmMC00OWMyLTQ2ZDQtOTA2Yi01Y2Yy
NTg2OWU2NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL74SiVsf8GJpGS8eYJ1K9TUQRcjC3K+8/zwT8AO9pg0C+q7oC7/FHom
i+5GlNJ5/Tq15eqCdVEhl1BhK2W3cwcTZJmpkoyM5WoLRVlkLi+GuNiGb95oK11P
9HYqYSezdY4Jjxy4gF2YlACSYLTcMnndDSWv/7VTJBALuLxF7C9iZrI83l5j5iw7
eI8mj5nFONqkDuql7pZS7BGyZAg3TVsVAadm2Gp+739rwvEBfmFzbi/7PYpKUuA2
JL2MHIuBvUOUYZNqCCD77ViRyF4fs0FRQqQEVYRiKz27E32hULgghw0sYjTCp7bu
A+VlZ3en+UgKkAaOInKrPHXGBsoVeBA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:50 2026 by rpki-client