Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/0139d04c-266f-31da-a534-5785d1d12eff.roa
File:                     0139d04c-266f-31da-a534-5785d1d12eff.roa (raw, json)
Hash identifier:          26zXWmr+S5A8N+C4HNnwJSfMUmyCpZltfG2BMLP5qpQ=
Subject key identifier:   90:28:88:EE:28:87:CE:DA:2F:CF:0C:EB:09:E7:4B:86:B8:E6:E3:0B
Certificate issuer:       /CN=c26bd691-4ee7-472e-b41f-ac02b34ddb1e
Certificate serial:       010D0C9F4328584E00063839C1DE80D129B68C00
Authority key identifier: 60:D0:E1:1D:71:00:37:A1:D6:C4:8D:70:B1:FE:5D:A0:12:A2:26:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/0139d04c-266f-31da-a534-5785d1d12eff.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     6079
IP address blocks:        140.235.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:38:39:c1:de:80:d1:29:b6:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26bd691-4ee7-472e-b41f-ac02b34ddb1e
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=a9d01a5b-ecba-4204-9cce-7272620e977f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:32:0a:2e:c0:9a:51:1b:3a:8b:90:03:ed:96:
                    bf:5d:03:8a:1a:f1:67:a1:7b:47:02:71:7f:a1:36:
                    3e:d4:9b:04:89:f0:4f:cd:76:5c:b0:74:0e:2c:27:
                    6e:cd:58:ac:f8:d7:7c:26:4c:43:bf:d4:e4:a6:ec:
                    22:37:ea:0d:f3:49:13:8a:98:fd:64:9a:aa:2e:96:
                    27:ee:33:07:a4:e5:a8:cc:24:45:c5:5b:c3:d0:22:
                    4c:fd:71:1e:24:97:23:f1:a8:4e:a4:29:d0:12:6e:
                    2a:87:a3:77:3e:75:58:b0:12:ee:8f:28:ab:05:2c:
                    31:a1:83:bc:ae:91:c2:a0:f4:92:bd:6f:89:4d:ac:
                    92:2d:d4:b2:33:c2:62:f2:ad:46:f2:04:2a:8c:39:
                    8f:8c:bb:72:41:a3:47:b3:22:97:e8:80:83:51:dc:
                    d3:6b:7e:65:e3:a3:dc:1c:f3:06:e5:be:e3:fe:1c:
                    c6:df:f8:3f:e4:62:08:37:a6:03:8d:ee:17:55:d2:
                    9f:6d:bf:24:2a:42:bd:e3:76:2e:73:a6:7c:6c:7c:
                    4d:68:bf:cf:27:9b:6b:b5:04:ff:2c:40:20:43:f5:
                    dc:a3:c8:bd:d5:a1:92:22:7b:8f:bb:28:6b:cb:54:
                    b7:f0:61:58:5d:07:f8:9a:be:62:37:38:7f:ad:9e:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:28:88:EE:28:87:CE:DA:2F:CF:0C:EB:09:E7:4B:86:B8:E6:E3:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/0139d04c-266f-31da-a534-5785d1d12eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.crl

            X509v3 Authority Key Identifier:
                keyid:60:D0:E1:1D:71:00:37:A1:D6:C4:8D:70:B1:FE:5D:A0:12:A2:26:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c26bd691-4ee7-472e-b41f-ac02b34ddb1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:40:d2:4b:bc:97:1b:d0:12:c8:a2:6b:8d:3c:29:da:5d:a7:
         4b:92:b8:c6:ff:fc:bd:17:cf:2b:98:2c:a8:05:fd:4d:ef:b5:
         36:3f:db:11:8c:29:db:aa:9d:33:a8:ba:37:45:a4:80:31:e4:
         51:50:08:ff:51:e0:9f:cd:8a:8a:87:f8:b8:08:d0:c3:9e:02:
         bf:e4:03:7f:0a:00:3b:5b:77:1d:f3:35:aa:1c:ea:54:87:f6:
         ce:ea:f1:23:2b:f2:a1:f4:9c:d2:02:96:68:44:0c:47:0d:63:
         62:88:f0:e2:c0:db:ad:7f:90:56:01:f5:d0:0f:b1:07:c0:c7:
         69:69:f6:a9:50:91:a9:c7:93:69:ab:b2:24:79:ad:da:28:b7:
         76:2f:f9:f4:4c:58:2f:0a:26:a0:e4:f3:97:69:f9:07:06:cd:
         df:3b:10:e6:51:1d:3a:9d:7c:5f:cf:43:94:fd:67:79:5f:ee:
         05:7b:78:65:3d:8a:d2:35:1b:16:76:a7:c2:12:48:ac:54:43:
         da:0f:2b:98:28:92:0d:6d:2f:86:a8:e4:8a:7a:dc:4b:e7:fa:
         26:da:0a:bf:5c:89:ae:c6:ae:3d:e5:18:b7:22:b8:44:45:e2:
         c2:92:e4:64:ab:fa:9a:d9:a1:5b:bc:b9:43:9d:01:b1:eb:6f:
         1f:05:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:44 2026 by rpki-client