Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa
File:                     2e1742ff-4d69-38f8-846e-d7b85e429836.roa (raw, json)
Hash identifier:          +gPKdQl8fkngUZCn7XFWU0PvtxxrFPSWDAfbIEXb/cc=
Subject key identifier:   A6:1D:1F:E2:96:B0:C6:12:52:DB:04:AB:55:51:67:3B:50:1B:DC:0B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E66DA13C1EB5EF5D9EA387680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     399145
IP address blocks:        140.174.19.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:13:c1:eb:5e:f5:d9:ea:38:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=cad0dd2d-44fe-433a-bd9e-47d0d0209621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:d5:fe:a2:a6:6e:a7:58:2f:8e:47:75:19:
                    53:a9:c1:08:15:7f:7c:d6:11:af:cf:2f:ba:d5:9a:
                    5c:0d:7f:a7:cf:8e:5b:89:69:a5:94:99:dd:b6:a4:
                    91:99:96:7f:34:ea:3f:34:d3:1b:43:2a:28:25:c7:
                    c5:1b:df:20:fb:2a:fe:04:26:31:f5:3a:e0:82:45:
                    15:81:7d:7f:d5:ae:4d:fa:7c:db:6c:5a:e0:51:13:
                    eb:e1:06:b2:a0:6d:c9:6c:6f:17:b3:c3:49:0e:d5:
                    00:9e:85:95:15:1a:e0:71:6d:1b:99:b9:ce:bc:44:
                    85:33:e4:e4:a9:aa:0c:6c:72:db:14:97:d1:ea:3a:
                    7c:2a:ab:a1:bc:79:73:9a:fb:da:a1:d2:18:4e:e6:
                    5e:bc:13:dc:4e:c8:d5:4c:8f:fd:09:db:23:ed:49:
                    34:8e:b8:1d:3c:4a:16:dc:6e:ef:18:5b:1a:f7:7f:
                    f1:ff:eb:27:1c:bb:20:5d:b4:27:3a:65:50:cf:6e:
                    dd:d6:9b:68:2c:7b:9a:c7:3b:16:8c:ba:e5:7c:fb:
                    d7:16:b4:4e:de:f9:83:a0:8f:23:2d:d1:e0:71:cc:
                    eb:7a:4e:15:2b:58:05:83:e3:30:c1:fe:c4:18:5d:
                    5b:3a:7d:fe:d6:94:70:2c:8c:ac:3c:a4:3e:94:d5:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1D:1F:E2:96:B0:C6:12:52:DB:04:AB:55:51:67:3B:50:1B:DC:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.19.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b2:42:d3:04:ee:49:bf:d5:1c:24:52:f9:3f:6f:60:de:81:
         e2:05:c1:6e:c6:ff:f2:c1:5c:22:59:0c:9a:42:4a:bc:38:11:
         7b:98:43:a6:fe:b5:72:1a:c1:ab:1f:c0:f0:c9:2f:cf:80:be:
         7a:7c:fb:b1:e8:b8:fb:c6:52:ec:2b:d9:a3:d9:b1:cd:dc:fa:
         20:39:54:cb:b2:11:a9:0b:34:a7:1e:a1:06:7b:d0:38:47:06:
         aa:68:c8:c1:76:49:45:8a:20:33:c5:09:5a:5f:00:1b:9f:c9:
         18:d6:f1:f2:92:f6:f9:97:b3:da:bb:61:98:b5:2d:b4:65:81:
         c9:b3:6d:2d:cb:37:b7:b5:87:1d:02:f6:c2:71:d5:18:21:24:
         7f:7b:4c:a2:97:54:04:66:09:52:5e:41:e6:53:14:0d:0b:40:
         a3:89:d3:69:8c:06:58:8e:12:de:07:3e:25:2f:d1:0a:5f:1d:
         e9:1f:ea:81:96:b0:9b:33:55:7c:e8:c5:52:40:dc:5a:a2:2e:
         7f:4c:25:9f:c2:44:eb:f1:c2:3c:68:5f:15:87:22:de:d7:b1:
         8c:46:ec:0f:c5:8c:01:d5:c0:31:68:3f:5d:c2:a1:c9:ee:04:
         bf:18:41:4b:0a:c9:c3:a2:d0:64:7b:6e:af:31:c8:ee:d0:58:
         35:6c:06:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:28 2026 by rpki-client