Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa
File:                     c4fb4054-eaa4-39fc-b010-d008d5751881.roa (raw, json)
Hash identifier:          766qPhyF/4tY5p/9N/tCJxB5fnaqiVNtZJ+jDGcyLqg=
Subject key identifier:   E8:A9:C8:B0:6E:7F:30:BE:85:8A:BE:82:CB:79:83:B4:A0:F1:0F:92
Certificate issuer:       /CN=fc672add-9928-494f-862b-73d618c8d940
Certificate serial:       010D0C9F4328584F2EED1D26F0FB63BFED7691C0
Authority key identifier: B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     53356
IP address blocks:        140.235.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:1d:26:f0:fb:63:bf:ed:76:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc672add-9928-494f-862b-73d618c8d940
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=ac35cfe5-1715-4b7c-bf18-c8ab4b4fe82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:31:e2:24:2e:32:ef:14:4d:50:28:db:de:
                    1b:17:ef:97:96:80:fd:8f:79:fc:6c:74:0e:d8:7d:
                    bc:45:30:0a:11:d6:0b:37:69:29:c5:c7:4c:13:70:
                    eb:c0:47:0d:6c:98:5a:70:b1:4e:69:6e:c9:f6:1c:
                    39:94:3f:96:18:13:e6:b4:69:c5:2e:6a:db:5a:6b:
                    5d:fc:d6:b1:6b:cb:4a:95:49:51:57:c9:43:fe:70:
                    55:53:6d:12:50:5c:42:fe:13:61:ea:1c:b1:42:a5:
                    e4:6a:a2:60:f3:b0:ae:d0:03:9f:45:05:70:7a:81:
                    e4:18:2e:38:91:05:80:11:8b:7c:ed:2d:8a:ce:7a:
                    12:fb:9f:91:16:ac:00:2e:69:b3:cb:8c:30:e4:2e:
                    82:2d:77:c2:62:0b:7f:61:2f:89:76:83:e8:d0:e8:
                    40:b9:61:38:65:14:e9:72:a0:0e:fb:1c:c2:fd:bb:
                    18:28:ef:cb:35:21:ad:c7:54:09:eb:67:52:37:37:
                    d9:ba:1a:21:05:fc:b1:02:ca:4f:60:dc:03:f8:f9:
                    95:90:9a:c3:4f:03:c1:40:be:1f:08:14:db:32:04:
                    35:df:38:7c:8c:3e:7f:60:6a:e6:0f:a5:ac:d2:b3:
                    e1:aa:32:38:08:01:4c:c5:c5:11:25:82:73:d5:f9:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A9:C8:B0:6E:7F:30:BE:85:8A:BE:82:CB:79:83:B4:A0:F1:0F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl

            X509v3 Authority Key Identifier:
                keyid:B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:30:1d:6b:58:ec:25:93:fb:58:32:77:24:c1:79:73:6c:f0:
         28:b1:c3:72:86:40:bf:e8:bd:e0:9e:57:89:d2:e2:82:89:33:
         cc:07:8a:28:2d:5c:25:1a:2c:5d:51:f6:75:cc:f3:0a:53:b1:
         3a:0d:4f:10:06:a6:2e:ad:17:05:1f:84:25:88:f3:8f:01:ad:
         bd:75:9d:b3:07:ca:6f:70:21:a0:a0:f0:ba:bc:46:4c:b9:1e:
         b4:17:ed:de:70:8e:2a:f6:7a:41:43:bd:85:d4:a4:62:db:04:
         ab:e4:4b:d7:f4:38:55:b2:dd:11:9b:7f:8c:91:5f:c5:90:0d:
         04:ce:37:5d:ef:27:ef:01:f0:94:c5:6a:19:3d:44:83:16:0e:
         39:cd:6b:f4:fe:b6:0d:fc:db:7f:b4:ef:df:71:3b:b1:32:60:
         6e:55:f8:10:6b:03:10:32:93:4e:67:e5:e3:de:1d:2d:8b:31:
         6d:e4:45:bb:cf:3b:ae:5c:5d:c9:c3:40:dc:c3:01:3a:24:db:
         6f:f0:69:ca:54:d5:db:25:44:5f:89:bb:86:7e:19:5c:3b:45:
         fd:79:3f:c1:1b:80:65:5f:6b:19:30:e4:1e:83:c8:7e:d1:f7:
         b0:9f:d7:88:a8:44:27:ad:05:41:03:dd:9e:69:41:1f:7b:48:
         04:95:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:43:39 2026 by rpki-client