Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/415b7119-6d6c-3d65-a5f3-31b6d26e48eb.roa
File:                     415b7119-6d6c-3d65-a5f3-31b6d26e48eb.roa (raw, json)
Hash identifier:          SS5Xs8/lBsgGBOasASvelzTYdi2p5setRJF5suxZFaA=
Subject key identifier:   81:2B:3D:DB:E1:29:C3:0A:36:8C:6B:A7:79:9D:80:A5:50:3F:F9:DF
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584EFE121BC0695B97AE674DE200
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/415b7119-6d6c-3d65-a5f3-31b6d26e48eb.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     63023
IP address blocks:        141.140.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1b:c0:69:5b:97:ae:67:4d:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=cc65a4a3-143f-4f53-98b9-7fd7696287b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:1e:8b:24:70:51:c9:c6:41:4d:ae:d9:f1:
                    27:72:1e:48:01:d2:fe:b4:46:c5:b8:53:a9:2e:c4:
                    f1:a0:1d:2d:85:fc:89:17:bc:3a:97:6d:64:b3:47:
                    ba:3a:4b:1e:d0:67:5a:ae:f0:ae:39:cd:59:87:3c:
                    d1:46:09:8c:dc:4c:0c:7c:a1:85:a6:52:3e:70:d4:
                    2e:2c:0a:49:e7:69:cb:b9:ae:b5:b2:8a:41:63:5a:
                    f1:b0:37:2c:cf:94:f8:bb:aa:2c:58:c0:ec:1b:d7:
                    68:cf:ea:d5:17:65:1c:ae:2e:06:9f:0b:c8:e1:97:
                    62:a3:d9:aa:30:e1:3a:8e:0c:35:47:f6:dd:f7:15:
                    24:50:21:f5:01:6e:12:8a:4a:ef:90:fe:dd:8a:2a:
                    04:c9:92:39:bf:80:7d:71:23:23:34:07:e3:59:29:
                    cf:b6:64:b1:2f:ec:98:17:b7:ac:d7:9f:86:b2:49:
                    10:78:c2:8c:e8:4c:2f:50:4c:fa:6d:2a:27:7d:37:
                    3e:c8:35:86:4b:ed:52:89:d4:9c:fd:a4:52:f8:29:
                    a1:fa:18:ec:8a:a9:fe:06:bb:85:57:50:58:30:32:
                    2d:c7:7c:d9:73:86:f0:4a:ff:f0:7c:b6:70:5b:bf:
                    17:74:30:f8:cf:34:06:85:74:60:87:c3:61:69:c1:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:3D:DB:E1:29:C3:0A:36:8C:6B:A7:79:9D:80:A5:50:3F:F9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/415b7119-6d6c-3d65-a5f3-31b6d26e48eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:38:94:7d:f1:0f:b6:d5:65:fa:84:4a:83:d2:55:63:ab:
         27:d5:37:17:03:25:2b:00:19:ec:7c:1f:ff:9e:79:01:66:17:
         e7:b9:8b:cb:be:2e:08:19:46:9f:05:88:ff:bf:f8:d9:57:31:
         d3:b1:e5:b3:fc:92:13:c0:94:82:c6:0b:06:24:b1:5f:11:15:
         db:57:5c:98:d4:94:d7:ef:80:eb:0e:cd:2b:a0:30:80:96:c2:
         8c:47:09:41:33:c3:e7:f9:d9:53:b1:44:44:2e:d0:13:8d:51:
         48:f9:3e:73:4d:4c:aa:9e:0d:12:67:fa:5e:bc:9e:e0:a5:33:
         da:0b:4c:cd:5f:64:54:51:ad:00:fc:eb:f1:d2:69:88:e1:d0:
         08:3b:df:3e:cc:97:55:f4:87:03:79:1e:dc:c3:b2:52:39:b6:
         ff:5c:bd:11:e1:47:a6:04:60:99:e0:79:07:22:20:40:4f:25:
         f9:c5:ed:e8:cd:43:9f:ed:84:8f:e0:7b:30:65:d9:ec:67:a5:
         f5:dd:9b:03:0c:c4:c0:4f:d7:5a:16:98:6c:c4:11:d9:71:e1:
         07:fd:a4:8f:ba:b7:7e:62:57:c0:6b:88:5c:db:51:03:ea:ae:
         1a:a2:5a:0b:9e:38:4f:f6:da:52:08:9f:da:b5:59:85:b8:8d:
         27:4f:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:36:42 2026 by rpki-client