Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa
File:                     6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa (raw, json)
Hash identifier:          R+0F7y7oI1A5KiCbU3qRANa6FhxYwcxL+gyF2wolZ94=
Subject key identifier:   C9:64:3D:AE:22:B4:40:6F:05:FF:BD:A9:CD:4B:16:02:A8:54:A6:38
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584DA3E5590C94FC6C368E7483D8
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     3477
IP address blocks:        140.90.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:59:0c:94:fc:6c:36:8e:74:83:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=ea7862b1-c469-4883-9d70-7c6d6614eb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:0e:87:20:0a:f4:d0:2d:e8:4d:fb:ea:61:
                    0d:7f:61:e8:5f:10:e7:43:65:98:c8:ba:f5:ee:fa:
                    ae:fd:4a:3b:7c:cc:7b:18:1c:49:ae:bd:3d:85:81:
                    b4:c6:85:33:5f:0c:bd:9c:6b:cd:fe:2b:2e:ff:08:
                    85:41:fa:42:58:1d:d3:9e:88:48:47:24:79:bd:13:
                    72:af:61:ae:b2:75:f0:f0:80:81:76:4c:ba:43:00:
                    ff:87:5b:c7:5f:5b:fd:e4:e5:65:78:25:b5:0c:f4:
                    49:f2:f1:68:e6:3b:11:41:89:14:47:85:a3:72:ec:
                    96:0b:fc:f5:cb:e2:a8:f4:0f:be:83:41:7f:30:98:
                    e4:55:75:50:de:3e:b4:7f:82:d9:42:7f:65:9b:ff:
                    ff:b1:2e:ef:6e:c0:3c:55:28:fb:48:1f:ea:2f:6e:
                    83:e6:a9:f5:7b:90:be:af:42:21:59:0e:a3:14:7b:
                    bd:e2:f8:36:ba:8a:17:ef:5f:51:92:ab:71:19:71:
                    bc:a1:a8:45:fd:92:f6:3f:09:16:9e:11:89:4b:57:
                    d8:6f:fe:32:0d:6f:04:a5:0a:7d:4f:9b:fb:32:39:
                    6c:bf:ba:0e:84:54:ba:c6:91:97:8c:a1:fa:b6:6d:
                    1d:7b:04:fa:b3:af:4c:b1:32:9f:ba:18:67:f0:04:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:3D:AE:22:B4:40:6F:05:FF:BD:A9:CD:4B:16:02:A8:54:A6:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6a8f6d40-6581-3b3b-a10d-c1d75a524f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ed:41:7b:51:16:16:55:88:f2:b3:83:22:6e:7a:45:95:ef:
         66:0c:df:17:7a:dd:59:a0:ce:29:86:41:9d:29:5a:a3:c1:99:
         a3:b0:9b:61:0b:fe:e5:42:24:61:3f:dd:6a:d5:67:1c:c8:a4:
         d3:23:32:47:72:85:69:24:d5:63:18:d5:ed:c6:80:85:69:6c:
         df:00:70:f6:ae:9c:52:14:e3:59:ab:e1:7c:ea:d5:b8:6f:82:
         66:a9:fa:99:c0:96:ea:98:19:e1:56:09:d4:00:44:04:e2:29:
         73:b8:8c:28:90:26:d8:f3:fc:0a:2e:ea:00:4e:37:77:87:6a:
         ed:bb:d6:95:7e:b3:ea:04:61:d4:6f:12:5a:20:ae:0c:39:1d:
         0d:7f:49:43:53:d3:d5:2c:e6:6f:c4:e4:7b:09:6b:04:58:48:
         88:4b:f2:d5:1a:f1:ab:c1:0f:98:72:d3:1c:4a:41:5c:f3:56:
         05:e1:b1:3b:35:cd:46:0b:5a:32:58:e1:68:f6:b4:fa:c8:bb:
         2b:cf:8a:72:d0:7a:f6:a8:7b:99:4b:4b:56:f5:75:8d:de:75:
         76:ba:e9:f6:91:b8:6c:04:02:39:0d:8a:d8:98:cf:5f:2d:ae:
         f0:c4:3e:0c:87:70:e3:dc:c5:7a:d9:91:53:75:e1:6b:f5:73:
         16:4e:ae:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5VkMlPxsNo50g9gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZWE3ODYyYjEtYzQ2OS00ODgzLTlkNzAtN2M2ZDY2MTRlYjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4YOhyAK9NAt6E376mENf2HoXxDnQ2WYyLr1
7vqu/Uo7fMx7GBxJrr09hYG0xoUzXwy9nGvN/isu/wiFQfpCWB3TnohIRyR5vRNy
r2GusnXw8ICBdky6QwD/h1vHX1v95OVleCW1DPRJ8vFo5jsRQYkUR4WjcuyWC/z1
y+Ko9A++g0F/MJjkVXVQ3j60f4LZQn9lm///sS7vbsA8VSj7SB/qL26D5qn1e5C+
r0IhWQ6jFHu94vg2uooX719RkqtxGXG8oahF/ZL2PwkWnhGJS1fYb/4yDW8EpQp9
T5v7Mjlsv7oOhFS6xpGXjKH6tm0dewT6s69MsTKfuhhn8AR3WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlkPa4itEBvBf+9qc1LFgKoVKY4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNmE4ZjZkNDAtNjU4MS0z
YjNiLWExMGQtYzFkNzVhNTI0ZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjFoWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3tQXtRFhZViPKzgyJuekWV72YM3xd63VmgzimGQZ0pWqPBmaOwm2EL
/uVCJGE/3WrVZxzIpNMjMkdyhWkk1WMY1e3GgIVpbN8AcPaunFIU41mr4Xzq1bhv
gmap+pnAluqYGeFWCdQARATiKXO4jCiQJtjz/Aou6gBON3eHau271pV+s+oEYdRv
Elogrgw5HQ1/SUNT09Us5m/E5HsJawRYSIhL8tUa8avBD5hy0xxKQVzzVgXhsTs1
zUYLWjJY4Wj2tPrIuyvPinLQevaoe5lLS1b1dY3edXa66faRuGwEAjkNitiYz18t
rvDEPgyHcOPcxXrZkVN14Wv1cxZOrgw=
-----END CERTIFICATE-----
Generated at Wed May 13 12:07:21 2026 by rpki-client