Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa
File:                     480969e7-5db5-391b-a687-2a4105fe0786.roa (raw, json)
Hash identifier:          LDrU3A6nttbdecGTkEhSinwlv/h4aWhnx+WH1fz2wwM=
Subject key identifier:   0B:1E:A2:AD:88:B2:B5:D2:54:AA:C3:0C:2C:17:95:79:88:32:79:CB
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584F49764E78E1563251C5766E80
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        168.203.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:4e:78:e1:56:32:51:c5:76:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=06b89c1b-5c63-4bb5-83cb-6bf606c5e95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:e5:5a:d0:ed:f1:7a:38:85:f9:ef:e5:10:
                    23:15:45:56:2c:10:75:96:09:45:f3:e0:6d:bf:96:
                    53:d0:27:ab:98:17:5c:7a:91:99:92:18:3d:c8:95:
                    86:98:48:9a:4d:26:86:2a:2e:a0:15:d8:b0:a7:d1:
                    55:41:a8:4b:96:44:1f:3c:6d:49:c3:54:59:0f:70:
                    9d:4f:99:f5:9f:84:03:0d:d7:7f:c0:65:7e:68:4b:
                    32:51:58:ed:c3:f6:c0:e8:d3:62:78:ad:12:e6:56:
                    5e:4f:12:fb:0a:1c:89:19:ba:79:a5:d6:1b:53:88:
                    50:cf:9b:ff:1f:65:b4:19:df:80:18:f6:b5:96:05:
                    fb:71:79:28:c3:5f:d3:aa:ed:f7:b6:0e:7f:6b:a3:
                    f0:3c:25:72:3b:7a:46:cf:92:65:dd:8d:8f:2d:e2:
                    64:3c:e3:b8:00:16:be:93:6c:23:03:72:ea:57:15:
                    b1:93:88:3a:92:dd:4f:6b:79:22:17:5d:7c:c1:ae:
                    80:dc:7d:f8:ea:56:5a:b2:69:37:5e:cb:96:d7:26:
                    45:87:47:3d:08:c0:24:f1:f1:6d:4e:b7:ca:7e:e0:
                    9a:4c:f6:60:43:fb:e2:43:6e:fa:66:4c:26:28:fa:
                    95:55:5d:4a:9c:92:c1:26:f1:c0:83:40:24:b0:a9:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1E:A2:AD:88:B2:B5:D2:54:AA:C3:0C:2C:17:95:79:88:32:79:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0b:a7:09:0d:e5:23:97:07:c9:94:17:f9:b8:3a:73:e4:9c:
         a6:33:3e:b3:e9:84:cc:bd:fd:11:36:e5:c9:96:1c:cd:05:05:
         e2:d2:0d:42:a0:a0:d0:13:e8:6d:64:c6:34:72:1b:16:d5:b2:
         ce:2f:05:18:b1:f2:e5:b8:cd:89:8f:af:23:a7:01:6a:55:d7:
         9b:93:c5:e4:61:a4:09:8d:49:f3:7c:23:a6:1f:84:10:a2:f5:
         ad:5c:25:11:c7:35:39:c5:04:fd:90:0f:34:0c:a7:c4:44:2a:
         ef:9c:22:24:c3:96:e6:c3:87:c4:17:7f:f6:bc:51:62:e2:6f:
         3f:ad:06:ee:15:aa:a3:90:b1:13:d8:43:05:97:e0:3b:77:84:
         45:68:ee:1d:f3:35:6c:60:19:c2:44:16:1c:ad:25:63:36:7d:
         6d:8f:83:76:58:53:77:8b:f7:a5:dc:70:3c:9f:d1:94:97:5c:
         e5:08:72:cc:35:8f:4f:7e:ab:b6:48:5a:d0:5f:a6:5f:35:31:
         92:82:0e:cb:fc:ca:34:1c:d1:e1:27:08:fa:6d:25:09:c3:47:
         bc:48:cf:70:f8:c9:0a:a2:bf:3c:9e:b0:fb:4c:1b:64:3d:50:
         d0:ca:3d:87:a3:dc:f7:6b:cd:c9:bc:ab:af:5e:e1:81:9d:3b:
         38:2a:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:38:02 2026 by rpki-client