Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/875704ba-a086-3a08-b5ff-c59836512cde.roa
File:                     875704ba-a086-3a08-b5ff-c59836512cde.roa (raw, json)
Hash identifier:          LHHSZ+Nc1T4oQt1YCxsd1LUP91sABXdaP3quruwf1C8=
Subject key identifier:   22:8A:DE:A6:D9:8D:74:1A:BF:7B:39:47:41:A7:61:CD:BA:6A:35:D7
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584DB340392C87A741D2ADC1E1C0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/875704ba-a086-3a08-b5ff-c59836512cde.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     834
IP address blocks:        141.140.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:39:2c:87:a7:41:d2:ad:c1:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=fa6bbdaf-2fe7-4fca-96ad-6e8f0ebeb93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:06:60:46:77:6b:95:00:06:f5:e6:74:e9:
                    8c:f5:be:d2:d1:0a:42:da:58:c0:77:a4:c2:fe:a3:
                    bd:95:a8:a3:e0:c7:4c:8d:2f:98:55:9e:c5:24:0f:
                    37:9f:96:cd:40:fb:de:0e:ee:c0:c1:2f:09:80:c8:
                    7c:43:50:5e:59:2a:07:c2:5e:7b:03:1c:04:c5:94:
                    55:92:b2:24:a9:c7:48:ee:df:01:73:88:32:cf:73:
                    c4:3a:a0:ae:95:d0:d6:72:d5:ab:84:60:a1:db:8e:
                    a0:79:34:50:ea:71:8a:51:f7:b3:7f:11:ef:ca:0e:
                    ee:82:75:a6:c2:fd:2b:b8:b5:c6:3a:d5:f5:02:e9:
                    71:3c:36:28:70:e4:ca:61:36:58:68:d7:ba:05:79:
                    94:f2:cd:4b:8c:9b:cc:f7:00:33:9b:58:a8:e5:f9:
                    0b:7a:45:b8:c3:f2:de:9a:70:e4:8c:a3:8b:23:b5:
                    cc:6a:a0:24:b1:63:69:09:11:64:13:81:b4:0d:0e:
                    f8:e8:33:8e:c5:49:ae:ea:60:f9:d0:84:f6:63:95:
                    ba:f2:f7:30:e3:c0:30:e0:17:96:92:fe:7f:14:5d:
                    d5:f7:4d:bc:86:2b:c0:3c:c8:e1:5c:95:39:d5:77:
                    fc:43:49:27:a6:d6:1e:d5:63:0a:b5:66:80:0e:81:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:DE:A6:D9:8D:74:1A:BF:7B:39:47:41:A7:61:CD:BA:6A:35:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/875704ba-a086-3a08-b5ff-c59836512cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:38:e5:a0:62:b1:2b:5c:b0:d4:63:13:c3:05:90:c6:22:
         09:bd:d9:b2:4e:58:65:34:7d:98:ca:33:ef:8a:f7:79:cc:e7:
         4f:b9:96:87:f3:d9:a0:6b:39:81:e2:0c:ce:45:3e:b4:c3:51:
         43:c1:3e:f6:aa:8f:07:31:c8:35:17:86:5e:58:24:e9:b1:92:
         83:e8:2c:ce:0a:a8:9d:ba:c5:a9:40:fd:32:f5:de:79:40:5f:
         cd:23:1f:4c:45:47:e2:1b:ab:03:fd:ed:f0:52:42:25:73:12:
         18:27:2c:fb:a9:58:04:ab:75:5b:6d:d8:39:82:d9:42:c5:c9:
         a5:77:b6:04:1c:00:09:aa:43:37:3e:27:d6:ba:36:78:5a:49:
         16:a2:df:3b:88:13:52:bf:34:47:6b:84:e2:67:26:c3:79:55:
         20:e7:b1:25:89:a4:14:7d:44:bc:d8:5d:02:60:e0:83:c9:6d:
         d2:9d:13:3b:94:d5:72:a1:3f:f1:70:26:2e:c8:76:2f:c8:2c:
         9d:44:73:b6:3f:be:ef:ac:d1:8f:c9:79:87:3e:be:88:13:58:
         1f:ff:2d:d2:b2:13:b1:e1:35:a7:7b:a2:2d:4c:42:34:01:ef:
         41:cb:b1:dc:43:0c:41:65:d9:fc:3b:79:57:45:b4:9f:ee:ca:
         fe:eb:1d:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2zQDksh6dB0q3B4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI2MDUwMjEzMDAzMVoXDTI2MDczMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZmE2YmJkYWYtMmZlNy00ZmNhLTk2YWQtNmU4ZjBlYmViOTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreEGYEZ3a5UABvXmdOmM9b7S0QpC2ljAd6TC
/qO9laij4MdMjS+YVZ7FJA83n5bNQPveDu7AwS8JgMh8Q1BeWSoHwl57AxwExZRV
krIkqcdI7t8Bc4gyz3PEOqCuldDWctWrhGCh246geTRQ6nGKUfezfxHvyg7ugnWm
wv0ruLXGOtX1AulxPDYocOTKYTZYaNe6BXmU8s1LjJvM9wAzm1io5fkLekW4w/Le
mnDkjKOLI7XMaqAksWNpCRFkE4G0DQ746DOOxUmu6mD50IT2Y5W68vcw48Aw4BeW
kv5/FF3V9028hivAPMjhXJU51Xf8Q0knptYe1WMKtWaADoHz1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKK3qbZjXQav3s5R0GnYc26ajXXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvODc1NzA0YmEtYTA4Ni0z
YTA4LWI1ZmYtYzU5ODM2NTEyY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjYweMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqSOOWgYrErXLDUYxPDBZDGIgm92bJOWGU0fZjKM++K93nM50+5lofz
2aBrOYHiDM5FPrTDUUPBPvaqjwcxyDUXhl5YJOmxkoPoLM4KqJ26xalA/TL13nlA
X80jH0xFR+IbqwP97fBSQiVzEhgnLPupWASrdVtt2DmC2ULFyaV3tgQcAAmqQzc+
J9a6NnhaSRai3zuIE1K/NEdrhOJnJsN5VSDnsSWJpBR9RLzYXQJg4IPJbdKdEzuU
1XKhP/FwJi7Idi/ILJ1Ec7Y/vu+s0Y/JeYc+vogTWB//LdKyE7HhNad7oi1MQjQB
70HLsdxDDEFl2fw7eVdFtJ/uyv7rHeI=
-----END CERTIFICATE-----
Generated at Wed May 13 10:25:15 2026 by rpki-client