Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa
File:                     4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa (raw, json)
Hash identifier:          /KUj0Ua6y54azIMu4oaHNFiqgN5K+l8xnv6WtVnjezI=
Subject key identifier:   43:C2:FE:96:38:EA:B5:9C:A2:EC:67:E6:1B:02:FD:C6:94:FC:E8:86
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F4328584F549D6830FED7B74BC1286580
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     27370
IP address blocks:        140.241.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:68:30:fe:d7:b7:4b:c1:28:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=27faf290-5b91-4ddb-b090-537c4345ebab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:83:27:7c:6f:ea:1c:27:6b:47:1e:79:95:
                    25:fd:bf:19:55:9f:62:c6:be:ce:90:03:9e:33:c7:
                    b8:55:04:38:e4:b1:8f:f6:ea:92:7e:ce:b4:75:8e:
                    51:f4:a5:74:99:c0:eb:8a:e3:f2:db:19:b4:ca:18:
                    f1:aa:80:9e:67:32:f2:fb:ff:2c:26:42:bf:99:58:
                    1d:f5:ef:e1:20:c3:d1:7b:8c:c7:e1:12:a0:01:aa:
                    02:37:9e:05:f0:f4:ff:8c:d7:85:c5:b5:f7:d2:61:
                    83:47:ab:df:f2:c1:29:d3:d6:a9:9f:8a:05:39:2a:
                    79:ab:6f:58:fc:c1:26:31:19:3f:6c:40:53:d3:fd:
                    15:11:1e:fd:b0:ba:9f:92:15:a3:dc:ef:5f:75:9b:
                    e8:9d:92:ed:a3:70:c0:44:6e:dd:8a:8e:cc:49:d1:
                    f2:26:7d:07:4d:4d:13:36:9e:73:12:a9:71:f9:6e:
                    43:cf:4d:44:f7:c5:38:78:7c:e8:47:ce:56:d7:2c:
                    63:46:81:41:9a:10:29:03:d0:4c:9a:b2:08:ed:f5:
                    6d:83:55:dc:66:16:67:9b:5a:5c:c5:ef:d0:82:85:
                    d3:b9:23:4f:a1:12:5d:68:73:2e:0a:01:32:99:78:
                    db:b7:75:3d:7a:85:46:03:95:53:4b:57:d5:fe:f2:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C2:FE:96:38:EA:B5:9C:A2:EC:67:E6:1B:02:FD:C6:94:FC:E8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:47:60:9b:1f:ab:27:8c:7e:3a:1d:a8:03:2f:b3:71:91:2e:
         79:46:35:fe:d8:dd:ca:04:32:02:d1:1a:e6:35:de:71:9f:08:
         ad:56:f4:d2:1b:16:74:29:ac:17:69:35:46:ec:fc:2f:0b:9a:
         15:77:c3:15:6e:96:43:2a:c5:56:8c:ba:19:ab:25:1a:f3:b2:
         ed:27:28:bf:49:2d:08:20:70:22:66:96:12:1b:07:46:db:6c:
         cf:ad:0e:ed:77:44:46:1e:ab:60:23:16:1e:4f:87:5e:64:7b:
         7d:73:af:29:0f:b2:38:e2:af:72:4d:8b:96:ca:6a:38:0a:9d:
         ee:89:9d:96:50:c3:db:38:cf:69:3b:09:8a:2e:29:17:bf:38:
         74:ad:64:4b:98:98:7b:b9:9b:03:cd:a6:19:6a:99:ff:68:49:
         24:d0:96:11:f7:88:14:06:90:2e:5c:c5:66:9f:25:fe:fc:a1:
         ef:cc:8c:9a:86:60:31:bc:d9:82:b5:6e:e3:f0:5f:13:56:37:
         e3:ac:09:9e:a5:63:5e:8b:da:91:a3:8a:82:00:f3:f4:c2:fa:
         0b:7e:7d:76:8d:3f:67:89:2b:41:50:84:d0:0f:e1:22:5c:48:
         e3:d0:fb:63:41:99:d6:d2:48:83:44:4e:0f:0e:84:a1:82:67:
         59:1f:77:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWgw/te3S8EoZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk
Njc1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MjdmYWYyOTAtNWI5MS00ZGRiLWIwOTAtNTM3YzQzNDVlYmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn2DJ3xv6hwna0ceeZUl/b8ZVZ9ixr7OkAOe
M8e4VQQ45LGP9uqSfs60dY5R9KV0mcDriuPy2xm0yhjxqoCeZzLy+/8sJkK/mVgd
9e/hIMPRe4zH4RKgAaoCN54F8PT/jNeFxbX30mGDR6vf8sEp09apn4oFOSp5q29Y
/MEmMRk/bEBT0/0VER79sLqfkhWj3O9fdZvonZLto3DARG7dio7MSdHyJn0HTU0T
Np5zEqlx+W5Dz01E98U4eHzoR85W1yxjRoFBmhApA9BMmrII7fVtg1XcZhZnm1pc
xe/QgoXTuSNPoRJdaHMuCgEymXjbt3U9eoVGA5VTS1fV/vI5VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPC/pY46rWcouxn5hsC/caU/OiGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4
NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvNGQ2MTFiMzUtMDdlZi0z
M2Q3LTlhZTktN2Y1MWYwNTdhZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk
ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5
ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi
YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPEOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRHYJsfqyeMfjodqAMvs3GRLnlGNf7Y3coEMgLRGuY13nGfCK1W9NIb
FnQprBdpNUbs/C8LmhV3wxVulkMqxVaMuhmrJRrzsu0nKL9JLQggcCJmlhIbB0bb
bM+tDu13REYeq2AjFh5Ph15ke31zrykPsjjir3JNi5bKajgKne6JnZZQw9s4z2k7
CYouKRe/OHStZEuYmHu5mwPNphlqmf9oSSTQlhH3iBQGkC5cxWafJf78oe/MjJqG
YDG82YK1buPwXxNWN+OsCZ6lY16L2pGjioIA8/TC+gt+fXaNP2eJK0FQhNAP4SJc
SOPQ+2NBmdbSSINETg8OhKGCZ1kfd78=
-----END CERTIFICATE-----
Generated at Tue Sep 29 20:02:49 2026 by rpki-client