Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa
File:                     491a7f76-8e8e-3356-9245-7144be78c024.roa (raw, json)
Hash identifier:          SgWfS5IxZHZCRN2t/iO/OcXdbCnOyXLG259yElo1ECQ=
Subject key identifier:   6D:CC:E8:DB:A8:4B:01:32:9E:AB:7F:4C:03:D7:BC:16:96:E8:3E:4A
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D86955F9479588B0755BB6980
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     137517
IP address blocks:        140.228.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:5f:94:79:58:8b:07:55:bb:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=3834079a-e269-478e-b943-3bdfd793ba79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:bb:2b:d8:e1:49:f9:a3:4d:55:1e:dc:94:
                    f2:89:5d:de:57:e6:88:82:7d:4a:de:ed:8a:98:42:
                    05:03:0f:5d:27:69:6b:5c:b2:6a:ff:25:ce:18:af:
                    59:e4:ac:69:c5:35:f8:d3:b4:09:c1:8f:f0:7c:3f:
                    64:16:a9:cb:6b:6c:c9:ac:c1:6a:16:f6:93:8d:d6:
                    b0:a3:46:e6:ad:b6:a3:f5:07:96:49:27:25:55:3a:
                    5c:ac:98:f1:5e:4e:0e:1e:60:af:36:1a:e2:62:07:
                    b3:d4:af:d4:2d:81:7b:a4:fa:b6:7e:90:a6:d2:6b:
                    97:9a:7e:19:7c:70:00:92:3a:0f:4e:a1:07:92:a9:
                    53:2a:ff:b5:fe:94:f2:00:0c:f7:1a:f8:b9:ba:78:
                    db:4d:06:61:59:f3:bd:56:15:81:3a:e9:44:43:b9:
                    5b:37:6a:53:f7:1c:51:f3:99:22:09:20:aa:d3:f5:
                    ef:57:c0:98:6c:d1:0f:f1:0f:ab:8c:dc:69:d5:c6:
                    af:e8:8e:00:3b:3e:4c:04:4b:67:d4:37:9d:03:5a:
                    7e:75:7d:19:9b:e5:10:7d:8d:c8:93:63:a8:8e:5b:
                    dc:c3:f7:9d:6a:e5:07:17:02:16:fd:4c:cb:8b:f3:
                    96:08:0f:3b:64:3e:d4:ff:4d:36:40:dd:a6:65:aa:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CC:E8:DB:A8:4B:01:32:9E:AB:7F:4C:03:D7:BC:16:96:E8:3E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b8:b1:37:2e:c0:97:45:0b:b7:f1:c8:81:fa:30:8e:b6:72:
         38:b6:40:da:35:4e:45:6c:b6:07:a6:60:6c:c3:e1:0a:d2:1d:
         3d:e0:c5:e1:4a:f8:4a:c2:8c:f1:52:58:6c:13:c4:f6:8a:d2:
         80:2d:41:03:39:9d:28:8e:fc:67:e1:db:11:1a:a3:d8:60:7d:
         47:47:4a:23:73:b9:c9:82:bf:24:38:37:ed:07:44:70:1b:61:
         b7:00:99:d7:4b:65:f8:5c:1f:f6:f9:18:ff:b6:68:f5:78:5a:
         5a:f3:16:11:7e:d8:7e:e2:7e:c9:f9:a9:bd:82:21:b8:be:55:
         0f:06:86:54:1a:28:7c:c1:54:d3:f9:07:fe:1e:f4:3b:2a:b7:
         1f:45:c2:56:ec:9c:5f:c3:29:0e:ff:c5:79:bb:83:98:8a:b7:
         22:13:aa:bb:3a:ac:95:8b:fa:d3:38:fa:f6:a4:e0:b0:e5:09:
         39:91:6e:87:63:b1:ee:69:ed:fd:09:c0:a2:f7:f8:ac:f7:eb:
         77:a5:49:dc:0d:68:7c:55:5b:97:c6:10:3c:fc:84:90:a6:eb:
         40:62:47:ea:82:13:14:7e:6e:61:84:25:16:bb:e5:8e:16:d9:
         95:21:34:a8:00:fc:04:d3:a8:2f:af:b6:1a:da:34:a9:a6:28:
         cc:3b:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:56 2026 by rpki-client