Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa
File:                     c4fb4054-eaa4-39fc-b010-d008d5751881.roa (raw, json)
Hash identifier:          ZojgrgPsvcwDq/rGh6+S3GBxwFyjtvYRSvv5nEUTZgc=
Subject key identifier:   D2:B0:DB:6C:B4:54:F0:E1:8F:E6:7B:4F:69:CE:DB:D2:C6:3C:41:16
Certificate issuer:       /CN=fc672add-9928-494f-862b-73d618c8d940
Certificate serial:       010D0C9F4328584DAC45815EE819B9D4CA309F00
Authority key identifier: B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     53356
IP address blocks:        140.235.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:81:5e:e8:19:b9:d4:ca:30:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc672add-9928-494f-862b-73d618c8d940
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=7e4eae7d-fe2b-41d2-80e3-cee9e342204c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:5b:7a:34:b6:eb:a5:35:7f:f1:17:20:07:
                    5a:aa:d5:66:b0:85:90:f1:20:75:74:59:6c:ab:4c:
                    8c:57:7c:06:da:4c:be:bf:17:f9:cb:a8:6a:66:f3:
                    57:e0:01:9f:40:1c:02:db:90:9a:22:cc:2d:e5:41:
                    2d:eb:ff:12:8f:91:2e:78:be:04:46:9d:af:e1:21:
                    29:81:1f:64:bb:d8:f2:99:09:f4:92:3b:95:55:45:
                    fa:49:27:fd:74:45:16:1c:94:ad:f6:7d:dc:11:b9:
                    c9:85:bc:2b:0e:44:3b:31:0c:0e:50:61:30:ae:62:
                    69:3b:0c:99:9b:19:fc:8b:98:ce:56:42:fb:05:c0:
                    5a:ea:d0:87:6f:a5:2b:22:5f:af:dc:0f:04:66:0d:
                    c9:8f:5b:99:fa:15:ab:9f:b0:37:89:7c:bf:b0:17:
                    dc:a4:61:48:bd:1c:a1:25:2b:f1:cf:6a:45:7a:ea:
                    fd:f6:03:68:3b:f4:b7:c2:11:f8:1a:44:3d:32:a8:
                    37:6f:ac:f0:b0:4d:8b:12:55:4b:a5:24:25:74:57:
                    97:d2:da:4a:4e:11:3a:88:0a:85:e9:6d:43:71:df:
                    d3:aa:91:cc:b5:7b:c9:ae:4d:ec:80:24:b4:d9:bf:
                    ee:1a:92:4a:44:ff:1c:cf:b8:7f:34:4a:76:83:b4:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B0:DB:6C:B4:54:F0:E1:8F:E6:7B:4F:69:CE:DB:D2:C6:3C:41:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl

            X509v3 Authority Key Identifier:
                keyid:B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:ab:2f:39:dc:ad:f7:95:6d:78:d3:4e:4a:64:1f:48:7b:
         6f:0f:f5:e2:84:15:71:4a:16:b2:92:e8:99:10:39:ff:e0:c5:
         d0:24:f0:89:36:74:2d:b5:e7:8c:64:f1:38:49:52:ee:82:ca:
         9a:d5:d3:30:8f:59:2d:c6:e4:4c:35:eb:47:1c:81:a3:f9:7d:
         f4:31:16:64:71:a6:73:9f:ea:e6:fa:db:68:c7:ff:0b:c0:d7:
         d4:64:17:86:30:af:c4:70:30:dc:9d:a5:a4:23:69:9d:e4:3e:
         34:b2:fc:14:f9:ab:3b:2c:81:6c:90:6a:2a:85:1e:7a:f2:b3:
         4a:a2:f8:fe:9b:47:df:d7:5f:18:df:9a:36:56:37:e8:c1:12:
         b0:08:c9:9f:bd:8a:e3:68:83:36:dc:ba:11:6f:3a:6f:d3:10:
         4d:f1:e5:3c:7a:cc:0c:09:74:b0:90:2c:70:e6:c0:f1:a3:7f:
         01:95:25:fb:85:ab:71:fe:d7:e9:6b:f2:99:31:7c:5f:2d:70:
         5e:92:50:f4:ee:f2:04:32:c3:a5:1f:08:76:28:ed:95:5f:73:
         37:96:c9:56:05:3f:a4:80:9e:7d:ab:55:c3:61:41:44:45:28:
         2c:53:62:fd:78:90:d1:92:49:55:26:b1:5d:3f:87:cc:91:90:
         64:8d:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:40 2026 by rpki-client