Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/71223051-2e1f-3e94-8e9a-ada7364f6b82.roa
File:                     71223051-2e1f-3e94-8e9a-ada7364f6b82.roa (raw, json)
Hash identifier:          S1C9/qAic4HsKAI5CHpzIYg/40RHPsWOfLtMqy4hch8=
Subject key identifier:   1D:44:D1:98:3D:4D:C1:AE:1B:81:C1:5F:8B:8A:12:08:07:89:7D:F9
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584F225D20BFC27AEBB2F029D400
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/71223051-2e1f-3e94-8e9a-ada7364f6b82.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     400529
IP address blocks:        141.140.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:20:bf:c2:7a:eb:b2:f0:29:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=02d66aba-90b3-4cfd-a87c-ceeeec4e7eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:93:af:68:f4:51:d2:0a:bf:73:6e:ca:b9:f4:
                    d8:00:e9:5d:63:85:72:98:1b:5b:f3:6d:6e:95:a0:
                    91:91:50:9f:cc:55:a7:c4:36:9f:bc:19:9c:da:a2:
                    72:67:d9:ed:b4:14:15:23:7f:83:97:1d:6a:d2:45:
                    57:dd:dc:a3:f1:1a:bd:fa:33:1f:d8:c9:32:2a:8d:
                    df:ab:d8:01:af:44:24:0a:f2:89:37:79:8e:87:0e:
                    b7:0e:1c:a8:05:87:18:23:6e:a2:3b:81:5c:0d:8d:
                    35:48:b7:16:b3:71:77:23:59:67:59:ba:4b:03:22:
                    1a:6d:70:6a:a4:a9:18:93:ec:45:55:d4:19:13:3f:
                    aa:f6:1b:cc:40:da:0d:a0:b2:f6:e0:b8:ec:65:95:
                    6a:fb:ee:02:d2:18:20:cd:87:be:1c:1a:22:c3:67:
                    d2:bd:08:e7:c8:8a:45:2a:39:e1:e1:21:ec:0c:90:
                    c7:fc:c8:f3:d6:bd:e9:bb:3f:83:7a:bd:ed:8b:e2:
                    01:99:1b:a9:c9:8f:0e:ba:19:95:89:ab:4a:41:da:
                    3e:20:de:c4:0c:7b:8c:6a:27:24:66:9a:21:d9:53:
                    b8:78:75:b8:7c:69:68:fc:01:96:92:66:35:e3:96:
                    a0:28:78:9c:30:94:3c:f6:57:db:15:f6:75:1b:05:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:44:D1:98:3D:4D:C1:AE:1B:81:C1:5F:8B:8A:12:08:07:89:7D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/71223051-2e1f-3e94-8e9a-ada7364f6b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:26:0c:44:b7:d8:15:e3:09:df:34:3a:43:0b:62:49:99:
         77:3c:3e:22:b9:2b:57:a0:e8:af:88:79:f7:42:15:bb:53:14:
         e2:12:ad:2a:c1:fc:34:10:cc:84:d0:a5:00:6a:32:5b:75:66:
         cb:bf:82:33:d7:76:0a:2c:f1:47:49:b9:58:6b:b8:43:12:51:
         ab:b2:41:59:cb:77:0a:b1:99:f9:0d:93:d5:4b:d8:d0:a8:e1:
         04:c0:d7:af:21:d9:48:52:52:6b:89:7a:92:bf:a2:71:f4:aa:
         a1:d9:1d:9f:0a:ab:fc:cb:4b:75:ec:55:62:d8:40:45:1e:bc:
         e0:3e:c3:e0:bf:fe:36:f4:59:6f:ec:d9:38:89:aa:d0:75:57:
         75:de:f4:09:78:89:2a:c5:be:3c:a9:6a:7f:98:34:65:60:7d:
         0b:ad:17:b7:c8:27:ff:e7:a5:e2:84:db:c1:9a:0b:fb:78:cc:
         1f:6e:2a:17:9e:ce:35:1d:36:1c:c3:9b:ee:6b:4e:59:e1:f4:
         24:34:3f:50:9c:3d:1b:ff:54:bc:a2:a4:13:0d:96:bc:15:84:
         d7:b3:b2:b7:e3:a2:0c:93:9e:d3:c1:19:58:24:48:52:0b:68:
         06:3e:04:7f:22:71:98:25:20:5d:ef:4a:4f:81:d7:66:38:d8:
         ad:5b:91:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSC/wnrrsvAp1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
MDJkNjZhYmEtOTBiMy00Y2ZkLWE4N2MtY2VlZWVjNGU3ZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpOvaPRR0gq/c27KufTYAOldY4VymBtb821u
laCRkVCfzFWnxDafvBmc2qJyZ9nttBQVI3+Dlx1q0kVX3dyj8Rq9+jMf2MkyKo3f
q9gBr0QkCvKJN3mOhw63DhyoBYcYI26iO4FcDY01SLcWs3F3I1lnWbpLAyIabXBq
pKkYk+xFVdQZEz+q9hvMQNoNoLL24LjsZZVq++4C0hggzYe+HBoiw2fSvQjnyIpF
Kjnh4SHsDJDH/Mjz1r3puz+Der3ti+IBmRupyY8OuhmViatKQdo+IN7EDHuMaick
Zpoh2VO4eHW4fGlo/AGWkmY145agKHicMJQ89lfbFfZ1GwWNSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1E0Zg9TcGuG4HBX4uKEggHiX35MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNzEyMjMwNTEtMmUxZi0z
ZTk0LThlOWEtYWRhNzM2NGY2YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATuJgxEt9gV4wnfNDpDC2JJmXc8PiK5K1eg6K+IefdCFbtTFOISrSrB
/DQQzITQpQBqMlt1Zsu/gjPXdgos8UdJuVhruEMSUauyQVnLdwqxmfkNk9VL2NCo
4QTA168h2UhSUmuJepK/onH0qqHZHZ8Kq/zLS3XsVWLYQEUevOA+w+C//jb0WW/s
2TiJqtB1V3Xe9Al4iSrFvjypan+YNGVgfQutF7fIJ//npeKE28GaC/t4zB9uKhee
zjUdNhzDm+5rTlnh9CQ0P1CcPRv/VLyipBMNlrwVhNezsrfjogyTntPBGVgkSFIL
aAY+BH8icZglIF3vSk+B12Y42K1bkXY=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:29:44 2026 by rpki-client