Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa
File:                     f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa (raw, json)
Hash identifier:          YWKF68Gqdwpqj/KyHbf4+Eu7Mv1QITJFRJJs7D17ZkY=
Subject key identifier:   65:FA:DA:9A:42:73:DF:C0:00:46:D3:17:D2:A6:22:8A:3F:7F:70:FF
Certificate issuer:       /CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b
Certificate serial:       010D0C9F4328584F6F8DB918E9ED14D407E5DB40
Authority key identifier: 67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa
Signing time:             Thu 08 Oct 2026 16:35:44 +0000
ROA not before:           Thu 08 Oct 2026 16:35:44 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     40007
IP address blocks:        141.109.0.0/18 maxlen: 24
                          141.109.96.0/19 maxlen: 24
                          141.109.176.0/21 maxlen: 24
                          141.109.184.0/23 maxlen: 24
                          141.109.186.0/23 maxlen: 24
                          141.109.188.0/22 maxlen: 24
                          141.109.192.0/19 maxlen: 24
                          141.109.224.0/21 maxlen: 24
                          141.109.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:8d:b9:18:e9:ed:14:d4:07:e5:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b
        Validity
            Not Before: Oct  8 16:35:44 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=269e9154-d803-47b0-8d3e-aa20d8255ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:46:4b:de:4d:26:d5:89:6a:0e:10:6b:6e:
                    d3:4e:da:fb:a6:f0:2d:b0:02:b8:bd:0a:11:68:b2:
                    eb:4f:2d:ec:52:7a:46:da:be:75:83:a7:0c:84:42:
                    f5:e1:b1:14:c1:2f:e9:f5:7a:15:33:6f:82:bd:f9:
                    dc:d3:c0:2f:3a:07:b3:93:30:dd:77:84:61:50:94:
                    dc:92:be:07:8d:fb:86:46:e8:bf:bf:12:0d:c3:7f:
                    fe:7a:0f:5b:bf:f6:eb:22:f9:8a:ff:b8:9c:52:af:
                    4c:bb:47:98:c3:94:8e:f2:66:40:6d:9a:2f:0d:50:
                    26:40:75:54:f7:0b:ef:7a:cc:38:c4:0c:dc:9b:9c:
                    26:a9:07:cb:88:bf:0d:68:dc:31:1c:ff:51:33:b7:
                    43:ad:c2:86:92:43:db:5c:b2:91:15:3f:1f:7d:c1:
                    f2:f7:53:36:4d:39:ae:3d:ec:41:ad:ba:38:28:d0:
                    19:84:dc:1c:a1:e1:34:d8:85:f6:d0:33:30:52:3d:
                    08:87:fc:e9:c2:f7:db:5d:95:c9:37:c3:b2:90:c6:
                    b9:71:f2:3c:3e:ed:12:19:96:d9:fc:85:be:ef:1b:
                    01:06:ef:ec:0a:b4:52:19:0e:c9:94:6a:ce:ad:9a:
                    9b:d8:d0:df:24:d7:df:4f:0b:4a:17:5b:05:23:c4:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FA:DA:9A:42:73:DF:C0:00:46:D3:17:D2:A6:22:8A:3F:7F:70:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.crl

            X509v3 Authority Key Identifier:
                keyid:67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.109.0.0/18
                  141.109.96.0/19
                  141.109.176.0-141.109.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:51:68:08:4e:d7:51:5b:29:80:7c:96:49:19:89:0e:da:92:
         7d:2c:47:5f:40:cc:73:94:42:fb:35:3d:36:9b:da:7e:4f:70:
         c2:6b:13:6e:b9:ba:eb:3d:47:0f:3c:48:03:72:03:31:19:2c:
         1a:f2:3c:b9:26:28:2e:bd:12:cd:3d:5a:f4:45:9c:bb:db:3a:
         64:54:94:7a:c5:c9:3a:52:bc:95:71:b2:27:5e:47:95:59:8f:
         bd:ec:5b:35:d1:dc:49:d9:1f:2f:57:e0:33:b1:fb:fa:e2:23:
         52:c3:44:72:dd:e9:74:ae:d7:31:ae:73:d0:6c:ab:78:92:16:
         7e:73:fb:0b:a2:f5:ec:ed:b4:81:80:81:74:08:f0:cb:f0:3c:
         cb:10:92:3d:85:dd:4d:5c:c0:0a:84:cc:88:05:f5:cf:26:c4:
         ef:ae:8e:02:03:d3:93:f8:d8:46:91:62:34:5f:77:cf:11:d7:
         ff:2d:7a:80:3b:4c:8c:61:a6:84:6f:5d:c5:2c:e8:41:03:80:
         28:92:1e:21:ae:03:24:53:c5:57:8c:12:eb:21:1c:e1:7a:77:
         37:32:76:96:c3:74:0c:af:55:53:56:4f:ac:ea:d5:10:bd:46:
         71:0b:ff:b6:f4:84:ec:43:92:50:4d:19:ac:ba:fd:b7:83:85:
         31:03:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:25:51 2026 by rpki-client