Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f49a9276-63cd-37a2-abff-2f9417ba96ce.roa
File:                     f49a9276-63cd-37a2-abff-2f9417ba96ce.roa (raw, json)
Hash identifier:          GBthoBxINvJBOHF92cpUY78IAY7qgnQdOXGrN4/1PnU=
Subject key identifier:   A7:93:89:E3:EA:74:33:FD:0E:BC:2F:8C:12:86:DC:FB:CF:D1:CB:DC
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584DC4004EDD038811012D7AA2C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f49a9276-63cd-37a2-abff-2f9417ba96ce.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     395222
IP address blocks:        140.228.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:4e:dd:03:88:11:01:2d:7a:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=e6edd5c1-4cf4-46d4-9fa8-352ed461c650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:de:72:1c:27:f6:d1:ec:c9:ba:75:95:80:
                    f0:f4:64:b9:87:84:8f:f4:82:8d:7f:f2:57:d6:5b:
                    1d:46:8f:47:49:39:82:f0:a0:e6:38:d0:60:bb:3d:
                    43:a0:ef:62:4b:8b:d3:4f:d2:30:d4:e7:78:a2:89:
                    f1:c6:08:88:81:fe:6a:da:2a:69:b7:0e:5d:28:8e:
                    75:6a:7e:10:fb:91:de:45:8e:dc:15:31:06:e2:b9:
                    a7:c5:8d:b3:3b:bf:08:a4:28:44:1d:b3:43:a7:59:
                    8f:61:f3:93:a2:cd:70:28:23:53:39:78:fd:54:42:
                    b7:ce:7a:bc:0c:3e:60:27:eb:6d:c9:1b:9a:83:a2:
                    ab:ae:8a:3a:04:80:11:e0:2f:45:79:4e:db:7d:1c:
                    07:b7:92:4f:34:86:9c:c0:eb:d6:ae:2f:5d:b0:2f:
                    20:ab:e0:7b:47:c5:92:29:8f:92:10:ab:c0:ae:47:
                    0d:37:f4:06:a4:fb:a1:aa:7a:88:8c:7f:41:83:41:
                    74:af:44:6f:31:a4:3e:fc:4c:a4:02:55:ec:11:7b:
                    19:85:92:75:0f:8e:0a:f9:d3:90:c9:29:32:34:8b:
                    58:98:66:91:57:2a:3a:9c:60:df:b7:b9:89:7b:a3:
                    7e:87:40:4f:2c:4f:1b:bf:e5:b4:35:1e:7a:c7:61:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:93:89:E3:EA:74:33:FD:0E:BC:2F:8C:12:86:DC:FB:CF:D1:CB:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f49a9276-63cd-37a2-abff-2f9417ba96ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:ad:ce:1c:cc:46:52:db:3f:c3:42:37:87:c4:d8:f3:60:
         50:7e:5a:97:45:b3:44:27:95:52:13:81:31:f0:54:49:5d:29:
         4e:a3:e0:8a:ce:85:1b:e0:e9:a8:25:85:34:6e:83:70:66:d2:
         63:6a:fc:89:25:a8:be:fb:1b:5f:b1:a8:5d:36:3a:a0:39:4d:
         78:97:4b:6f:53:8c:84:0e:62:19:51:83:a0:27:7b:fa:67:39:
         ba:4d:c0:b8:34:73:29:6e:80:40:98:ff:e6:96:68:9c:79:fe:
         86:f4:21:45:e6:e5:d1:91:5a:3e:26:aa:03:fa:87:6a:27:b8:
         72:45:7f:de:e4:97:06:25:88:fc:ba:ea:cf:df:e9:6f:cb:80:
         f8:7a:55:83:05:1a:7f:ba:14:17:3c:ff:f7:29:78:41:fa:f9:
         39:85:20:64:36:a3:cd:75:c8:40:f5:d6:97:6f:46:cf:aa:74:
         30:13:23:88:b8:2e:68:4b:0a:95:f8:da:8a:15:54:45:50:9e:
         5d:47:5a:95:55:8f:63:a8:65:f4:77:24:1e:da:3b:4e:c6:37:
         6b:40:85:50:45:6c:7e:ca:4a:43:e8:ae:8b:31:b2:a3:98:91:
         1d:37:43:88:0f:31:73:cc:91:c7:48:78:26:86:a3:78:18:70:
         2b:bf:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:04 2026 by rpki-client