Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/4055fcdc-049d-3eae-a8dd-377e3e72980b.roa
File:                     4055fcdc-049d-3eae-a8dd-377e3e72980b.roa (raw, json)
Hash identifier:          i5pJWHA8oWqaIm+xaIaRH4r7joGJuN7EsI8dc9kKDKo=
Subject key identifier:   D6:36:87:83:76:A8:A9:29:5D:05:11:7A:6C:19:61:4D:3E:BC:52:D1
Certificate issuer:       /CN=5f0271af-0900-4d68-9a01-e446c3910a39
Certificate serial:       010D0C9F4328584ACB411CD96F222CC09976B520
Authority key identifier: 92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/4055fcdc-049d-3eae-a8dd-377e3e72980b.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     9541
IP address blocks:        140.235.80.0/24 maxlen: 24
                          140.235.81.0/24 maxlen: 24
                          140.235.82.0/24 maxlen: 24
                          140.235.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:1c:d9:6f:22:2c:c0:99:76:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0271af-0900-4d68-9a01-e446c3910a39
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=72659926-e477-4cd1-b776-9b0b686e1065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b6:f4:ce:46:e7:3c:6b:74:24:97:59:9e:2f:
                    25:30:b5:6b:96:eb:58:3f:b7:f6:c9:3d:73:3f:59:
                    2c:76:e6:97:ca:9b:16:a5:88:b6:27:3d:84:85:40:
                    3c:3f:9a:91:e4:37:e4:9f:17:26:7c:f5:63:08:26:
                    fa:d1:72:68:ab:f0:eb:16:6c:63:46:8a:04:53:cc:
                    1b:80:e4:67:7f:6b:86:62:1d:44:09:6e:90:50:0e:
                    8a:b5:4b:fd:80:bf:3d:ce:a3:99:6d:41:67:d2:77:
                    1e:78:88:bc:ff:61:23:15:60:ad:e6:0e:00:ce:b9:
                    cb:3a:00:ad:45:9a:d1:73:21:f4:5f:54:fd:20:46:
                    87:d1:e4:08:9b:c3:ca:25:6b:44:44:ce:a5:96:4a:
                    7c:20:d3:71:56:c5:31:b3:74:d0:27:07:bd:a9:c9:
                    37:f4:f8:e7:5b:92:84:55:99:de:9d:29:e6:5d:73:
                    9a:90:38:d4:39:4e:e4:e7:6c:a8:d0:c7:60:c9:03:
                    7d:77:04:eb:ce:86:bf:7b:1d:70:48:78:b9:9c:06:
                    d3:09:51:f5:f3:7f:1c:8d:15:7a:85:fe:c7:ba:77:
                    fa:3c:59:b4:c4:4d:9a:23:1b:b4:2a:4d:7d:36:be:
                    84:d3:95:12:ce:f7:8a:cf:8a:b9:60:35:42:e1:03:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:36:87:83:76:A8:A9:29:5D:05:11:7A:6C:19:61:4D:3E:BC:52:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/4055fcdc-049d-3eae-a8dd-377e3e72980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl

            X509v3 Authority Key Identifier:
                keyid:92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:3a:41:8a:ad:0e:99:c0:58:c9:2f:35:f3:d1:4c:e9:bf:
         fb:fe:ea:de:e1:b6:42:59:2b:5e:4f:55:d4:17:5a:87:b7:32:
         c3:ec:97:94:c2:30:7a:77:c2:e9:83:9a:d1:b6:f4:95:12:39:
         e9:25:45:7c:24:5a:b3:98:4f:87:18:c5:3e:9c:06:1a:16:d5:
         2a:97:98:bc:1a:c9:35:78:81:99:00:8a:61:a3:8b:c9:4a:aa:
         35:a9:31:25:56:5a:95:85:8f:e2:0f:19:9f:ea:ab:8f:57:b6:
         7c:61:88:56:72:48:8e:d3:90:79:76:a9:2c:0b:27:f6:4a:44:
         0d:c6:ce:83:e3:ba:85:92:9f:de:4e:2c:12:29:8f:67:d1:09:
         8b:f4:18:04:60:0c:f1:b4:1d:6a:0f:f8:06:2f:ac:5c:df:7e:
         04:c9:10:cd:e6:0d:9c:b3:ba:79:3a:61:7e:3d:d0:1d:e9:dd:
         21:37:85:aa:58:76:db:8f:30:3f:fe:df:77:a3:f4:eb:e1:d5:
         1c:9b:ed:75:bb:2c:78:f3:ff:51:ac:cc:38:20:99:9f:da:11:
         d3:a0:4c:0b:cd:be:55:63:62:18:13:45:6f:db:33:3a:63:6f:
         01:04:cb:0b:87:a0:bf:18:fa:1d:e4:6f:81:fe:19:b0:88:9b:
         16:45:ec:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRzZbyIswJl2tSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWYwMjcxYWYtMDkwMC00ZDY4LTlhMDEtZTQ0NmMzOTEw
YTM5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
NzI2NTk5MjYtZTQ3Ny00Y2QxLWI3NzYtOWIwYjY4NmUxMDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLb0zkbnPGt0JJdZni8lMLVrlutYP7f2yT1z
P1ksduaXypsWpYi2Jz2EhUA8P5qR5DfknxcmfPVjCCb60XJoq/DrFmxjRooEU8wb
gORnf2uGYh1ECW6QUA6KtUv9gL89zqOZbUFn0nceeIi8/2EjFWCt5g4AzrnLOgCt
RZrRcyH0X1T9IEaH0eQIm8PKJWtERM6llkp8INNxVsUxs3TQJwe9qck39PjnW5KE
VZnenSnmXXOakDjUOU7k52yo0MdgyQN9dwTrzoa/ex1wSHi5nAbTCVH1838cjRV6
hf7Hunf6PFm0xE2aIxu0Kk19Nr6E05USzveKz4q5YDVC4QNWxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNY2h4N2qKkpXQURemwZYU0+vFLRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZjAy
NzFhZi0wOTAwLTRkNjgtOWEwMS1lNDQ2YzM5MTBhMzkvNDA1NWZjZGMtMDQ5ZC0z
ZWFlLWE4ZGQtMzc3ZTNlNzI5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWYwMjcxYWYtMDkwMC00ZDY4LTlh
MDEtZTQ0NmMzOTEwYTM5LzVmMDI3MWFmLTA5MDAtNGQ2OC05YTAxLWU0NDZjMzkx
MGEzOS5jcmwwHwYDVR0jBBgwFoAUkj+a+jUi7Gpbv+14kKHDisZ8wqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZjAyNzFhZi0wOTAwLTRkNjgtOWEwMS1lNDQ2
YzM5MTBhMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExaOkGKrQ6ZwFjJLzXz0Uzpv/v+6t7htkJZK15PVdQXWoe3MsPsl5TC
MHp3wumDmtG29JUSOeklRXwkWrOYT4cYxT6cBhoW1SqXmLwayTV4gZkAimGji8lK
qjWpMSVWWpWFj+IPGZ/qq49XtnxhiFZySI7TkHl2qSwLJ/ZKRA3GzoPjuoWSn95O
LBIpj2fRCYv0GARgDPG0HWoP+AYvrFzffgTJEM3mDZyzunk6YX490B3p3SE3hapY
dtuPMD/+33ej9Ovh1Ryb7XW7LHjz/1GszDggmZ/aEdOgTAvNvlVjYhgTRW/bMzpj
bwEEywuHoL8Y+h3kb4H+GbCImxZF7Mo=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:45 2025 by rpki-client