Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2c6cdb0a-57a8-324b-aa01-dd9461a74ba0.roa
File:                     2c6cdb0a-57a8-324b-aa01-dd9461a74ba0.roa (raw, json)
Hash identifier:          I/SMUhGiDUo7TAQJVlbGNCcDAoEdVp3kei83w4HW6s8=
Subject key identifier:   EF:52:89:9B:28:50:2E:26:17:B2:54:BC:57:F6:3F:BE:09:CE:F6:95
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584D7E3461B575FFBBBE47E50800
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2c6cdb0a-57a8-324b-aa01-dd9461a74ba0.roa
Signing time:             Mon 13 Apr 2026 12:58:58 +0000
ROA not before:           Mon 13 Apr 2026 12:58:58 +0000
ROA not after:            Sun 12 Jul 2026 12:58:58 +0000
asID:                     3320
IP address blocks:        141.140.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:34:61:b5:75:ff:bb:be:47:e5:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Apr 13 12:58:58 2026 GMT
            Not After : Jul 12 12:58:58 2026 GMT
        Subject: CN=a25f0a9c-2852-4401-902a-1c769a203375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:44:10:66:ac:e8:09:6c:22:19:1e:c8:e0:2d:
                    02:ac:55:36:28:96:a9:e1:76:b6:71:14:cc:8e:94:
                    de:9e:f8:c3:4d:56:70:3b:0e:0b:fb:11:a4:0b:0f:
                    b6:49:cc:90:88:75:8d:64:df:e5:fc:a8:68:5b:69:
                    f2:a6:e2:d4:c2:0f:a9:59:48:88:39:19:97:71:67:
                    fe:f6:9e:24:ca:f5:7d:2f:4d:b1:4c:ea:eb:68:ce:
                    8b:e2:02:59:72:c5:68:fb:7d:15:a6:31:24:31:b2:
                    e2:22:6b:5f:37:cf:47:4e:ef:05:ae:aa:86:3a:26:
                    ca:74:3e:99:79:79:ae:44:a4:f9:42:f2:de:1a:52:
                    e8:1d:48:77:b2:e8:c2:7b:b9:93:fc:f7:e4:44:45:
                    87:c5:5f:45:4f:c5:d0:c7:49:a2:f9:87:c5:83:e8:
                    f9:5b:d5:21:ee:36:75:19:2e:73:d4:d2:c0:ae:b1:
                    59:5b:9a:91:a7:73:8e:6e:e8:7b:70:3d:ea:58:e9:
                    64:d2:8b:32:4b:13:3b:ee:30:9f:a5:7a:a7:cb:83:
                    9e:44:3d:ce:c1:43:bc:66:e3:ce:be:3e:13:23:5a:
                    d2:ce:53:bc:8d:47:1e:8c:53:f7:00:62:c9:df:5c:
                    39:d6:30:57:b4:ed:5d:0c:f7:18:f2:5d:e2:b0:4b:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:52:89:9B:28:50:2E:26:17:B2:54:BC:57:F6:3F:BE:09:CE:F6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2c6cdb0a-57a8-324b-aa01-dd9461a74ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:a4:ac:d7:0a:4a:54:0d:6d:cb:71:be:d7:4a:c3:99:8a:
         56:f8:b3:7b:70:51:0f:45:72:f3:74:da:94:84:46:5e:5a:fe:
         5e:bf:d3:b2:2f:a5:71:b0:54:fd:59:86:d2:3f:6c:45:fc:d4:
         b8:ae:fb:d5:e2:77:65:f5:7f:ad:c7:cc:7e:94:20:fd:9e:5f:
         d0:09:dd:19:0d:16:6f:ce:76:25:b9:3a:e3:a4:f4:fc:f2:98:
         e1:d1:7a:ba:ab:3f:3e:f1:48:7f:b3:01:37:87:f9:21:0d:e5:
         d9:67:bb:42:c8:58:6b:80:d1:b4:71:9f:c2:82:67:1f:86:98:
         83:3e:6a:81:31:2f:eb:f2:99:35:19:9a:5a:a9:41:59:f0:d2:
         45:8c:f2:3d:ef:48:6b:90:2b:2f:f7:6e:71:e8:ec:38:50:8a:
         c8:b0:ad:8d:68:ca:ec:b7:5b:35:03:76:97:66:70:04:5e:12:
         e0:a7:57:69:3d:2a:e8:f5:6b:10:bd:26:79:5d:5c:38:75:9e:
         8a:23:e9:26:f4:47:c1:d5:23:10:3d:46:82:f6:bb:46:d7:89:
         51:a9:6a:74:e9:a4:1f:94:50:bf:e3:55:fe:ab:4a:ef:9b:7d:
         a4:3b:91:0a:a2:7a:4e:d7:09:e2:78:50:db:61:78:5e:db:26:
         50:64:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:13 2026 by rpki-client