Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/b3cf6b14-4fbc-3a21-9654-b513a2eff63f.roa
File:                     b3cf6b14-4fbc-3a21-9654-b513a2eff63f.roa (raw, json)
Hash identifier:          ytx1Cunonl1xWy1wYi8T4XDwwx2EVpVZsOV8V6D4z7s=
Subject key identifier:   3A:53:4F:ED:2E:D3:3C:AC:41:3E:D0:D9:56:85:E7:A0:E0:92:30:F7
Certificate issuer:       /CN=c40ee22e-af38-43b0-a20f-e09c8ba7884e
Certificate serial:       010D0C9F4328584F6E685588ADD7476EEA1F72C0
Authority key identifier: 3A:02:96:7F:58:1F:49:5D:41:DB:6C:D1:E7:0D:0D:67:19:EC:FA:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/b3cf6b14-4fbc-3a21-9654-b513a2eff63f.roa
Signing time:             Thu 08 Oct 2026 06:44:35 +0000
ROA not before:           Thu 08 Oct 2026 06:44:35 +0000
ROA not after:            Wed 06 Jan 2027 07:44:35 +0000
asID:                     174
IP address blocks:        23.157.228.0/24 maxlen: 24
                          2602:f3d3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/c40ee22e-af38-43b0-a20f-e09c8ba7884e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/c40ee22e-af38-43b0-a20f-e09c8ba7884e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6e:68:55:88:ad:d7:47:6e:ea:1f:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40ee22e-af38-43b0-a20f-e09c8ba7884e
        Validity
            Not Before: Oct  8 06:44:35 2026 GMT
            Not After : Jan  6 07:44:35 2027 GMT
        Subject: CN=58100e4b-b4fc-47cb-9d43-c8f72650ce97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:60:89:5b:0b:b9:4e:b7:7d:12:49:e0:e9:
                    57:60:14:30:82:e8:e5:e1:e0:77:9c:50:c7:2c:da:
                    bf:35:9c:ff:52:b9:7a:31:47:53:24:4d:7a:43:a6:
                    41:c4:cb:1a:13:1b:ba:43:c9:76:01:66:d0:b3:70:
                    79:28:0e:5f:7c:5b:e8:0c:a7:a5:3a:aa:9f:38:b3:
                    3d:71:06:45:3b:6e:2b:4c:e2:b5:fb:72:4a:27:44:
                    7b:47:f7:98:24:df:e5:98:38:72:b1:15:f9:94:64:
                    e4:12:04:d9:b0:8b:21:da:ff:a3:a7:76:ff:17:4d:
                    af:0f:89:a9:4a:b3:b9:06:62:dd:3c:6b:ce:57:f7:
                    e5:18:d3:e5:42:22:bc:e1:f9:5b:a3:3b:f2:d9:c7:
                    83:34:29:5c:cb:66:5f:e1:93:f4:6d:dd:9d:e1:a5:
                    0d:fa:9c:af:ff:0b:09:fc:d3:2e:fc:a1:14:28:0e:
                    59:0b:1f:6e:ae:7a:e7:4d:8b:88:03:6c:d7:4c:ab:
                    de:04:c5:10:90:59:4e:19:a8:72:18:c0:a2:cb:e0:
                    8c:90:76:7d:62:11:29:fe:b9:6f:09:3f:da:1b:62:
                    ac:e8:cc:96:32:41:d0:2c:73:72:b9:bb:39:07:7f:
                    0f:a9:fd:2f:2e:c1:1f:33:78:da:2d:de:7e:37:4c:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:53:4F:ED:2E:D3:3C:AC:41:3E:D0:D9:56:85:E7:A0:E0:92:30:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/b3cf6b14-4fbc-3a21-9654-b513a2eff63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/c40ee22e-af38-43b0-a20f-e09c8ba7884e.crl

            X509v3 Authority Key Identifier:
                keyid:3A:02:96:7F:58:1F:49:5D:41:DB:6C:D1:E7:0D:0D:67:19:EC:FA:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.228.0/24
                IPv6:
                  2602:f3d3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:68:6c:ed:06:12:7c:1b:87:c9:4e:c8:11:17:9f:db:7b:d3:
         60:3c:dc:15:07:08:14:82:75:a9:c4:0a:05:de:5b:b7:96:fb:
         83:91:bb:36:86:e4:de:90:b0:69:5f:ec:5c:70:ee:92:77:3a:
         54:90:31:55:ab:8c:80:3b:8a:4c:fe:a0:e5:7e:2b:d7:a6:14:
         ba:d6:87:7f:be:29:4a:a5:ca:7e:a8:f8:45:56:8e:e9:51:6a:
         e9:ab:67:17:0b:c6:fb:1b:ac:aa:45:86:bc:83:bf:2b:b7:d2:
         fd:dd:88:f8:e2:07:68:34:e6:6b:77:94:26:79:cd:00:e1:e8:
         77:d6:d0:6d:e7:19:e1:9d:11:6d:b8:23:39:68:95:b4:44:5a:
         7c:18:8b:d0:9a:ee:4c:78:25:77:83:f4:cb:3b:e8:fe:5e:65:
         4c:59:9c:08:51:50:98:e6:8b:de:09:8b:c3:43:12:c5:4b:57:
         89:77:f5:93:3d:6b:c8:35:a1:b4:73:46:bb:2a:23:98:bd:f0:
         d7:30:6f:c3:61:d0:2f:e2:27:cb:88:49:23:01:3a:ee:2b:da:
         2a:05:ec:ed:8e:92:81:a7:0d:8b:0d:ab:41:6e:52:8e:19:b2:
         6c:94:59:37:35:d1:68:77:ca:f3:18:16:42:14:9c:2f:ac:80:
         e2:50:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:07:52 2026 by rpki-client