Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a07336de-3104-3f62-a4a8-0a52fd6edb4e.roa
File:                     a07336de-3104-3f62-a4a8-0a52fd6edb4e.roa (raw, json)
Hash identifier:          cNo+EloS9XnF+3BZB5EHcrDUUuUUSGJyn0syxuOGmzM=
Subject key identifier:   B1:F7:2D:23:BB:2E:3A:28:50:12:38:AB:E3:3C:21:29:4C:02:A8:A4
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F3E4804B5176A302994BC49C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a07336de-3104-3f62-a4a8-0a52fd6edb4e.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        140.228.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:04:b5:17:6a:30:29:94:bc:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=572a6eb4-6675-4dc3-844c-4cc17d8e18df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:42:a9:ea:07:1f:ce:49:71:d1:6d:8e:f3:
                    dd:f5:b4:f7:5b:5b:50:2d:de:17:fe:aa:0d:49:98:
                    e7:fe:02:23:4a:52:15:78:c9:5b:13:e9:92:99:db:
                    31:6d:06:d0:67:fc:a8:1c:d4:df:d2:e8:1a:35:7c:
                    38:98:92:13:04:a6:e0:e8:8b:5e:4e:7a:0a:06:03:
                    44:db:08:fb:5c:e1:1b:76:85:45:71:51:fd:b0:12:
                    ac:00:b9:67:b6:1c:d6:da:9b:78:b6:8a:39:80:70:
                    d4:82:fd:49:67:15:a3:82:b5:7c:1f:d2:f2:19:2b:
                    5c:e5:81:7e:53:7b:45:69:09:4c:e8:c0:65:79:c6:
                    3a:b5:6b:90:c3:f7:a1:ef:2c:55:8c:ba:f6:7d:39:
                    a7:0b:f6:ef:c3:2d:3d:cf:9a:80:fb:06:0f:6c:c3:
                    4d:31:df:82:03:57:99:53:00:8b:d8:55:10:1e:1f:
                    30:c2:70:11:1e:5b:e1:11:45:4f:63:c4:ff:2b:6a:
                    e0:fa:f4:84:5d:3f:9d:f7:cd:69:aa:d0:95:b0:23:
                    01:56:e8:b6:db:75:7f:de:4a:e3:79:33:1d:f4:4a:
                    03:ff:de:01:2a:84:2d:18:3b:86:03:f6:8c:d3:88:
                    4c:e6:96:f6:64:1c:ea:8d:01:bd:49:61:47:bb:41:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:2D:23:BB:2E:3A:28:50:12:38:AB:E3:3C:21:29:4C:02:A8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a07336de-3104-3f62-a4a8-0a52fd6edb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:0b:00:e2:41:bb:93:fa:f6:b5:29:b7:f1:6e:99:96:35:
         79:8c:46:e9:76:f4:a3:cb:1c:c9:c1:ab:a6:a6:b5:19:fa:78:
         92:33:20:cf:e6:24:d9:0c:64:7d:c0:aa:39:cf:42:f6:c4:66:
         06:72:d6:b7:de:e4:20:82:56:df:6b:f8:aa:f1:1e:27:94:0d:
         04:99:c7:ec:74:12:84:77:a2:a6:cd:05:79:e8:06:e2:73:68:
         bf:62:a7:c0:df:f6:dd:d6:4c:7a:2a:13:3b:15:3b:2b:16:70:
         99:1b:6a:be:d4:38:be:0b:25:21:02:ad:17:65:89:5e:83:d4:
         e0:4f:9a:c3:de:cb:32:6e:a8:00:4c:be:b7:9f:88:0f:09:24:
         a5:6d:eb:28:07:d8:4f:8f:c5:b2:61:32:43:a6:7e:7b:4a:82:
         a7:0a:4e:93:92:e3:78:96:bf:71:87:07:9f:a3:80:2f:0c:38:
         f8:62:c7:6d:43:31:b7:46:26:12:31:bb:a9:b7:0e:cb:54:9c:
         8c:94:82:b9:fb:21:53:c6:48:a8:85:91:cc:1e:e8:27:4e:cc:
         96:b8:ba:d5:8d:c3:9e:22:7a:c0:8f:6f:52:a1:49:fe:93:78:
         2e:04:46:9f:44:b8:41:93:75:3c:8d:70:97:26:97:87:dc:e6:
         9d:1a:a1:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+SAS1F2owKZS8ScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
NTcyYTZlYjQtNjY3NS00ZGMzLTg0NGMtNGNjMTdkOGUxOGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/1CqeoHH85JcdFtjvPd9bT3W1tQLd4X/qoN
SZjn/gIjSlIVeMlbE+mSmdsxbQbQZ/yoHNTf0ugaNXw4mJITBKbg6IteTnoKBgNE
2wj7XOEbdoVFcVH9sBKsALlnthzW2pt4too5gHDUgv1JZxWjgrV8H9LyGStc5YF+
U3tFaQlM6MBlecY6tWuQw/eh7yxVjLr2fTmnC/bvwy09z5qA+wYPbMNNMd+CA1eZ
UwCL2FUQHh8wwnARHlvhEUVPY8T/K2rg+vSEXT+d981pqtCVsCMBVui223V/3krj
eTMd9EoD/94BKoQtGDuGA/aM04hM5pb2ZBzqjQG9SWFHu0GZ8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLH3LSO7LjooUBI4q+M8ISlMAqikMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYTA3MzM2ZGUtMzEwNC0z
ZjYyLWE0YTgtMGE1MmZkNmVkYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0ICwDiQbuT+va1KbfxbpmWNXmMRul29KPLHMnBq6amtRn6eJIzIM/m
JNkMZH3AqjnPQvbEZgZy1rfe5CCCVt9r+KrxHieUDQSZx+x0EoR3oqbNBXnoBuJz
aL9ip8Df9t3WTHoqEzsVOysWcJkbar7UOL4LJSECrRdliV6D1OBPmsPeyzJuqABM
vrefiA8JJKVt6ygH2E+PxbJhMkOmfntKgqcKTpOS43iWv3GHB5+jgC8MOPhix21D
MbdGJhIxu6m3DstUnIyUgrn7IVPGSKiFkcwe6CdOzJa4utWNw54iesCPb1KhSf6T
eC4ERp9EuEGTdTyNcJcml4fc5p0aoWI=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:14:25 2026 by rpki-client