Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa
File:                     a8c305b3-f0d4-3040-a02d-ba315034a174.roa (raw, json)
Hash identifier:          cBBG4FtHlP+aj2CsniTeB/3VuADY51OOUJmBXxVZBU4=
Subject key identifier:   27:9C:32:EB:33:71:9A:4A:DA:31:B9:52:2D:03:F8:6B:C8:55:CE:77
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F4328584F549D68661BB486A2BE75B580
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     27370
IP address blocks:        140.241.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:68:66:1b:b4:86:a2:be:75:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=1f15ce3d-331a-42b6-b325-cb995786d178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:2c:1d:e5:67:37:40:a6:18:53:d5:9c:c2:
                    f6:e9:c7:64:be:07:3e:34:e4:f1:34:84:f7:84:f3:
                    94:82:2d:3d:fa:e4:9a:6c:ab:70:81:38:9b:e1:0d:
                    14:b0:65:9e:61:ff:5e:7e:08:33:ea:a7:eb:67:58:
                    99:45:14:49:a1:8c:b4:a9:76:6a:37:56:60:c0:d2:
                    16:ef:44:fb:c2:5c:35:eb:ff:f3:d4:f9:d3:67:d3:
                    58:d9:60:e2:fd:d3:06:79:d6:80:37:d5:15:9f:57:
                    51:ab:1f:de:40:dc:b2:56:70:76:b6:0f:08:6a:4e:
                    fa:cb:d6:67:de:8a:ff:e4:9d:c9:a8:b9:74:78:e1:
                    96:3f:82:bf:36:39:3e:41:e5:4a:de:5f:42:86:65:
                    d8:5a:12:0d:a2:1f:74:39:c7:68:f9:ba:4a:f0:1c:
                    80:e1:fa:99:b5:33:e3:1d:3d:da:f2:14:e2:d5:53:
                    51:38:0f:d2:b1:6d:29:bf:f8:68:2d:fb:f2:0f:de:
                    c8:ac:72:4f:bc:df:96:bf:a8:75:dc:97:e7:14:bf:
                    02:5d:73:ae:e5:bf:80:c3:70:d1:5a:19:01:f9:89:
                    7f:86:33:4d:16:de:70:62:3c:4d:75:83:fc:7d:97:
                    a0:11:a9:72:3b:95:35:b5:fb:72:69:ea:0d:ea:0c:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9C:32:EB:33:71:9A:4A:DA:31:B9:52:2D:03:F8:6B:C8:55:CE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:b0:50:f9:92:14:62:22:5b:d5:7f:2f:29:b8:13:c5:12:
         d3:af:b9:b1:66:c2:f9:1a:da:8e:40:24:12:3e:ff:4d:bf:9d:
         30:88:a6:60:07:8d:18:a6:be:c7:fe:63:b8:31:b1:7d:8a:57:
         29:6c:c7:dc:54:47:5c:5d:0e:68:3f:74:8b:6a:ac:15:7b:a1:
         05:3a:cb:4a:30:6a:0d:f1:f2:ef:d7:a8:4e:2d:fb:b5:31:02:
         79:d6:1c:78:0b:4f:e5:9c:38:9b:29:33:0e:06:1b:2a:03:21:
         a9:7e:87:01:77:e7:5e:67:fc:c2:d2:47:d6:c8:92:69:86:f2:
         9c:6b:61:00:41:86:56:87:41:e0:55:f8:bd:6d:3d:0b:14:f2:
         2a:ba:22:be:41:28:0d:8f:1c:d6:32:ce:f1:9d:35:6c:c8:1a:
         db:03:0d:77:b1:92:71:8c:f7:c8:c1:e9:b4:e9:f7:5e:0d:00:
         f4:90:3e:51:11:dd:47:1a:86:1f:4a:4c:1d:e0:24:d1:e9:e7:
         fe:2c:39:da:a2:15:de:c3:c4:66:26:b7:79:c7:72:67:b2:46:
         fe:cc:75:5a:10:f3:33:5b:30:5c:31:69:c0:0b:e2:d8:de:a4:
         56:f2:e9:6c:84:c4:b9:12:3a:17:4d:de:c6:7f:53:4e:df:fc:
         74:90:62:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWhmG7SGor51tYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk
Njc1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MWYxNWNlM2QtMzMxYS00MmI2LWIzMjUtY2I5OTU3ODZkMTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEAsHeVnN0CmGFPVnML26cdkvgc+NOTxNIT3
hPOUgi09+uSabKtwgTib4Q0UsGWeYf9efggz6qfrZ1iZRRRJoYy0qXZqN1ZgwNIW
70T7wlw16//z1PnTZ9NY2WDi/dMGedaAN9UVn1dRqx/eQNyyVnB2tg8Iak76y9Zn
3or/5J3JqLl0eOGWP4K/Njk+QeVK3l9ChmXYWhINoh90Ocdo+bpK8ByA4fqZtTPj
HT3a8hTi1VNROA/SsW0pv/hoLfvyD97IrHJPvN+Wv6h13JfnFL8CXXOu5b+Aw3DR
WhkB+Yl/hjNNFt5wYjxNdYP8fZegEalyO5U1tftyaeoN6gxy/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCecMuszcZpK2jG5Ui0D+GvIVc53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4
NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvYThjMzA1YjMtZjBkNC0z
MDQwLWEwMmQtYmEzMTUwMzRhMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk
ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5
ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi
YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPEZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwmsFD5khRiIlvVfy8puBPFEtOvubFmwvka2o5AJBI+/02/nTCIpmAH
jRimvsf+Y7gxsX2KVylsx9xUR1xdDmg/dItqrBV7oQU6y0owag3x8u/XqE4t+7Ux
AnnWHHgLT+WcOJspMw4GGyoDIal+hwF3515n/MLSR9bIkmmG8pxrYQBBhlaHQeBV
+L1tPQsU8iq6Ir5BKA2PHNYyzvGdNWzIGtsDDXexknGM98jB6bTp914NAPSQPlER
3Ucahh9KTB3gJNHp5/4sOdqiFd7DxGYmt3nHcmeyRv7MdVoQ8zNbMFwxacAL4tje
pFby6WyExLkSOhdN3sZ/U07f/HSQYmQ=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:41:30 2026 by rpki-client