Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa
File:                     6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa (raw, json)
Hash identifier:          pnGLNWLkMXBMc1vcrfd+u1BvwQvot7wSDsD1Oov+OQI=
Subject key identifier:   91:09:9C:E0:EF:5C:49:E1:DB:5C:B5:6E:F3:D7:0E:80:F1:7F:2E:DA
Certificate issuer:       /CN=5e6cd83f-36e6-4be6-ab7c-53801cda4fef
Certificate serial:       010D0C9F4328584D9E5018A7A8B71EE2A26CAB80
Authority key identifier: 81:71:EA:33:12:1B:1C:A1:EC:E9:79:1D:B1:21:86:92:37:E2:CE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     197867
IP address blocks:        140.235.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:18:a7:a8:b7:1e:e2:a2:6c:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6cd83f-36e6-4be6-ab7c-53801cda4fef
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=9c935d0e-ffc2-48c8-8aac-1cdf7da68484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:79:e8:30:51:9b:3e:ee:10:54:9b:1b:bc:
                    28:73:d6:1d:59:26:32:1c:31:f2:0f:ac:7f:e7:f4:
                    a7:dd:c4:2e:68:3f:5d:54:04:46:7b:cf:68:e5:f9:
                    ed:20:29:26:f4:db:57:22:53:c0:ff:6d:7b:f8:b1:
                    c3:d4:09:57:37:d1:d2:ae:60:30:ae:f5:86:0b:6c:
                    00:65:47:5d:aa:e4:7f:11:63:f4:64:57:67:18:74:
                    85:48:e6:7b:e4:ce:b5:65:7e:18:ac:79:32:3c:7c:
                    c7:89:7e:a7:89:06:a4:91:b1:a2:40:ae:d5:59:8b:
                    5c:bd:d9:ba:5b:20:62:15:f0:36:9e:ce:a7:2c:5a:
                    b1:a1:43:9c:1a:cb:9b:47:17:0d:6a:e6:05:ca:be:
                    b1:28:63:85:43:25:75:a9:63:63:7c:79:a8:38:aa:
                    95:02:67:2a:ab:60:e5:79:40:df:28:00:95:9b:16:
                    fd:d3:77:53:cc:1f:78:d4:c4:0a:38:81:80:58:11:
                    8f:c5:e5:91:b4:e7:55:8f:1a:8c:4b:90:96:65:a2:
                    76:32:d8:e0:0b:aa:50:cf:d4:47:7c:ad:e5:f0:bb:
                    fb:03:84:1c:f2:9c:e5:6a:df:84:f0:07:1d:af:ff:
                    66:7b:08:cf:6b:b0:b2:18:f3:ab:bf:a8:f2:b6:0c:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:09:9C:E0:EF:5C:49:E1:DB:5C:B5:6E:F3:D7:0E:80:F1:7F:2E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.crl

            X509v3 Authority Key Identifier:
                keyid:81:71:EA:33:12:1B:1C:A1:EC:E9:79:1D:B1:21:86:92:37:E2:CE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:41:1e:04:a2:d1:c8:1d:ff:8a:99:b5:33:ef:2b:c0:cd:f7:
         e8:9e:b7:35:01:54:d8:57:74:9c:33:74:a7:c2:99:d3:db:af:
         90:a5:19:50:b1:88:b3:9d:07:04:9f:e0:c7:c7:99:a0:ba:23:
         06:f1:99:18:a4:2f:35:d1:e3:3f:72:91:71:6c:00:33:81:10:
         01:bd:1f:8c:12:ef:78:0e:31:ed:fb:a1:8c:7e:2a:f2:44:d4:
         1c:ed:5c:e7:66:85:d6:9f:9f:85:fc:11:33:c8:a1:52:91:04:
         de:32:ed:c8:06:05:a3:1c:8c:b1:b0:49:e3:81:af:d5:27:3b:
         a8:f5:a1:77:b1:48:e3:c3:ae:9e:de:a9:dd:15:ea:6f:b4:85:
         57:bc:68:4f:23:34:8d:6b:6e:30:df:36:9a:db:ba:f2:45:1d:
         fd:4b:ee:f8:e4:e5:d8:72:c8:ce:53:0b:b6:f5:6a:22:69:7d:
         56:06:19:75:36:99:a3:a2:d6:92:8c:bf:42:35:e6:48:40:dd:
         03:e6:26:b4:a1:f6:59:73:18:05:3f:bb:1d:e5:bb:e7:d8:4e:
         a0:b0:55:15:83:25:c4:ee:45:9c:08:8e:de:23:8d:66:58:29:
         97:f5:90:2b:44:c6:06:45:e0:ec:01:c6:fd:a2:c9:34:93:01:
         50:11:35:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:23 2026 by rpki-client