Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/d4942b41-33b8-3cce-9a23-da1e76b5ef16.roa
File:                     d4942b41-33b8-3cce-9a23-da1e76b5ef16.roa (raw, json)
Hash identifier:          t4yNT7asFcrgBQn3KR3ei+H4yu2BVjlgJzplRM3Jfnc=
Subject key identifier:   31:59:4E:DF:7E:1B:FA:AA:AF:2A:F5:B9:04:2C:47:9F:15:0A:B0:17
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F4328584E9A7FB063FD1BFB312AB534C0
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/d4942b41-33b8-3cce-9a23-da1e76b5ef16.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     400402
IP address blocks:        140.235.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:b0:63:fd:1b:fb:31:2a:b5:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=3c4143d4-93df-4812-9993-1819e544e00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:69:71:f1:06:91:33:cc:44:54:f9:98:31:
                    3e:cc:dd:e1:c0:6b:e7:f6:a9:1d:13:53:85:13:c7:
                    55:27:45:83:00:e4:a6:65:f2:78:ff:c6:0a:92:51:
                    3c:ea:30:52:34:6c:f4:d2:61:c3:ac:ad:cf:fd:be:
                    84:34:dd:af:10:a4:02:66:85:a2:38:72:8e:14:06:
                    b0:b6:c7:d8:0a:8d:71:d6:28:8c:96:f1:54:4d:c7:
                    2c:2f:64:d5:6c:2a:1a:de:18:d8:00:0a:0d:1c:84:
                    1e:ce:51:7c:b9:a3:59:3c:0e:90:7b:48:97:a2:ea:
                    48:8d:6f:4e:d6:98:80:d7:38:23:df:f8:c1:34:41:
                    ca:ce:a6:73:eb:09:23:e6:07:c7:6f:3a:26:95:44:
                    dd:60:66:ff:d5:af:43:4a:90:65:fb:5c:c3:51:d4:
                    6f:3d:16:cd:b6:5d:59:42:20:6a:e4:78:2d:63:88:
                    43:4c:1e:b1:7c:eb:ae:81:bb:3a:31:6b:11:41:a1:
                    1a:a1:eb:4f:74:96:9d:69:98:22:e8:97:87:c0:64:
                    b4:d6:44:5a:0c:d8:b9:6d:64:0e:02:03:c4:9b:d1:
                    f1:fb:6f:56:6c:28:cf:41:1f:0b:e5:b2:69:a2:43:
                    aa:3b:59:3f:0b:4e:3d:c1:20:b6:2a:bb:a6:b9:0b:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:59:4E:DF:7E:1B:FA:AA:AF:2A:F5:B9:04:2C:47:9F:15:0A:B0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/d4942b41-33b8-3cce-9a23-da1e76b5ef16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:72:d7:39:a2:ea:ff:d3:7c:46:7d:2c:b7:24:16:bf:bc:93:
         45:5e:2b:9c:e3:27:51:07:77:3c:ef:b6:5b:20:94:66:07:36:
         ef:de:f4:5c:53:37:a4:18:e8:ee:cf:e9:ea:b1:1c:8a:f0:3f:
         7f:9b:20:64:20:13:90:94:7f:24:f1:cc:3c:ec:a1:59:ba:5a:
         5f:eb:f2:96:a1:4a:cc:29:12:2e:dd:29:74:31:4b:69:f9:59:
         54:81:e3:76:f7:d9:c9:e9:c9:bc:09:da:27:e2:39:06:ca:c5:
         a6:52:21:e2:7c:0b:5a:74:b6:ba:8f:13:57:0b:17:41:f8:7e:
         c6:e9:15:51:88:af:f2:3d:0d:5d:ff:75:ed:fc:cc:ee:68:e3:
         29:f9:73:23:c3:65:71:4f:a5:6d:01:b9:9b:80:dc:c0:3b:5a:
         cb:14:c2:f9:ce:f7:92:fe:67:c3:bd:e2:82:8f:4e:28:2a:86:
         7b:b5:e8:42:d5:04:25:a7:92:d0:1b:b5:0e:ae:3b:f5:a7:c1:
         57:87:d9:8c:3f:92:ad:de:d8:5b:f8:ea:49:82:5d:10:79:0c:
         3a:22:25:68:d9:5f:b6:b4:ff:03:15:7d:20:40:37:e4:6b:5c:
         a9:68:29:75:16:c3:05:4b:f1:29:b2:9a:db:11:8f:2c:d1:7e:
         2e:88:f5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:34:13 2026 by rpki-client