Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0/2330ccb6-c474-33b0-95bb-c39730af7083.roa
File:                     2330ccb6-c474-33b0-95bb-c39730af7083.roa (raw, json)
Hash identifier:          4DzQ4n4kVE2+IzvNsBGHCjARKzBPc7xs8q/qVlmgO7Q=
Subject key identifier:   47:90:B8:FF:A3:6D:63:6B:9E:96:42:9E:51:D6:88:62:E1:79:47:69
Certificate issuer:       /CN=5108acb5-3f57-45f0-aec3-11d9c2c2fef0
Certificate serial:       010D0C9F4328584F3E47CDFC2799B49739F38700
Authority key identifier: 52:2D:72:AF:FE:56:1A:F4:D3:8F:C3:29:D3:1B:64:71:B5:52:58:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0/2330ccb6-c474-33b0-95bb-c39730af7083.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     40925
IP address blocks:        140.184.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0/5108acb5-3f57-45f0-aec3-11d9c2c2fef0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0/5108acb5-3f57-45f0-aec3-11d9c2c2fef0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:cd:fc:27:99:b4:97:39:f3:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5108acb5-3f57-45f0-aec3-11d9c2c2fef0
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=148dc88c-9035-4bd5-abb3-048eb1a976c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:9f:c6:91:f2:b7:84:d7:26:23:47:46:f6:
                    20:44:ba:70:23:5e:4a:15:ec:f8:ee:57:ec:c4:4a:
                    2f:f9:cf:1d:f2:13:96:3c:d7:8d:b0:8f:ee:01:d5:
                    ab:d1:f0:d5:3e:77:c3:e3:e6:22:50:f8:da:b4:f4:
                    48:04:fc:51:fd:5f:f0:ce:71:c0:ce:16:f5:d8:9b:
                    58:44:7f:7d:75:a1:11:5e:ae:00:44:16:54:b9:2f:
                    f6:07:81:99:9c:bb:9e:43:4c:05:34:dd:c0:ca:9b:
                    c0:60:92:77:5b:52:ce:44:97:be:3a:d4:7f:92:99:
                    f0:f2:38:6e:16:76:c6:ba:a0:2b:1c:e9:a7:c4:d1:
                    4a:99:33:14:bb:de:49:e0:17:39:f4:8e:c7:18:50:
                    cc:6c:ea:1c:bc:c4:90:c8:c7:09:05:9e:ea:f2:75:
                    6b:4d:a6:e0:87:e4:23:12:60:5d:ec:5f:c0:f2:84:
                    d1:30:81:eb:77:d2:62:89:2c:f8:af:40:02:91:d7:
                    1a:10:fb:17:5b:bc:9c:47:86:8a:21:e1:e4:74:7e:
                    bc:27:20:85:14:d7:44:6d:3e:5a:3e:57:69:b3:c6:
                    62:ba:ca:c7:68:b2:8d:b1:0c:22:c6:41:fb:ca:e2:
                    29:86:08:fa:79:8e:f1:93:52:13:62:10:80:de:f1:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:B8:FF:A3:6D:63:6B:9E:96:42:9E:51:D6:88:62:E1:79:47:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0/2330ccb6-c474-33b0-95bb-c39730af7083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0/5108acb5-3f57-45f0-aec3-11d9c2c2fef0.crl

            X509v3 Authority Key Identifier:
                keyid:52:2D:72:AF:FE:56:1A:F4:D3:8F:C3:29:D3:1B:64:71:B5:52:58:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5108acb5-3f57-45f0-aec3-11d9c2c2fef0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.184.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:45:36:cb:1d:76:35:6f:26:09:96:2b:3c:12:2d:10:ca:5c:
         90:49:af:be:47:02:44:58:da:ff:6f:c5:1a:c9:c1:be:59:6d:
         ab:75:d4:db:17:80:99:f2:f9:e1:5a:dd:f5:29:7e:05:40:1f:
         6e:c1:e6:a8:89:e4:71:99:8e:62:b7:72:8a:7a:4b:a0:1c:4d:
         83:53:9e:e4:a3:9e:c2:94:82:dc:43:eb:71:1d:8c:95:82:1a:
         a8:37:bc:cb:79:39:55:f4:4d:58:07:f7:1f:c2:28:d2:7a:fb:
         16:cb:d0:06:7b:04:0c:2d:cb:bb:d7:38:93:0a:bb:7f:0a:0d:
         7f:ee:7e:7b:5b:2f:f2:09:be:ce:cc:02:c9:2b:d5:4c:c2:92:
         44:82:74:2d:c6:f5:cd:cd:cd:dd:5c:03:9c:79:a5:44:c1:ca:
         97:ea:88:61:7b:4f:cf:ab:84:5e:fc:db:bb:7d:d7:04:90:06:
         a6:f3:bd:b4:f2:64:96:03:ba:a8:c2:27:be:66:a5:68:7e:a3:
         26:11:13:81:97:e7:30:3f:38:56:9b:d2:b2:0d:12:bb:32:1a:
         ea:6f:53:bc:7c:e8:47:81:3e:6d:88:34:fb:0b:1d:84:ca:07:
         21:a0:70:f8:99:0e:7e:01:07:fb:e3:c1:a6:e4:24:7d:77:13:
         25:95:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:31:32 2026 by rpki-client