Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/8d85be77-01e6-3c74-ac4c-136266925642.roa
File:                     8d85be77-01e6-3c74-ac4c-136266925642.roa (raw, json)
Hash identifier:          mbygY6+H5nAioThAp8Xd5X5zkhbYAKQmfUACqPTSXBk=
Subject key identifier:   A9:88:DF:D8:9C:53:EC:F8:85:2D:04:39:48:8D:DF:D5:B4:D8:93:4E
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584D5234FA830AB68C72E6BFE300
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/8d85be77-01e6-3c74-ac4c-136266925642.roa
Signing time:             Sat 28 Mar 2026 18:44:36 +0000
ROA not before:           Sat 28 Mar 2026 18:44:36 +0000
ROA not after:            Mon 15 Jun 2026 17:12:56 +0000
asID:                     396982
IP address blocks:        57.140.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fa:83:0a:b6:8c:72:e6:bf:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Mar 28 18:44:36 2026 GMT
            Not After : Jun 15 17:12:56 2026 GMT
        Subject: CN=cee64e69-7af9-4fc0-945b-b0a3b91c0aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:f2:5c:0a:9c:3d:fb:96:98:bc:ed:fa:0c:
                    f4:26:95:31:4b:1f:a9:1d:3f:84:d9:0a:96:9a:bc:
                    51:16:8c:0c:74:cf:38:31:3d:a5:f8:66:9c:08:d0:
                    ee:16:d3:57:b8:74:f9:89:3a:cb:dd:fe:e1:c1:4c:
                    40:fd:ca:f9:99:0e:5a:cd:ba:93:d3:23:2f:6d:59:
                    dc:18:0d:e2:bc:db:25:e2:1b:f3:a1:76:36:de:b2:
                    eb:84:64:4d:82:22:97:2d:06:3e:74:8c:67:fe:79:
                    70:9f:48:35:6c:51:80:e8:a0:04:c3:45:5e:e6:e6:
                    dd:0a:26:50:57:2b:36:47:09:17:00:6a:de:0a:a2:
                    a0:28:45:11:bf:e7:de:7b:72:a5:41:3e:76:5d:6c:
                    98:ca:c0:f9:8f:53:dc:75:a3:b2:b0:41:92:b0:a7:
                    12:4d:74:b7:62:42:c2:09:15:75:c8:fc:61:1d:81:
                    b0:ae:86:da:25:dd:5d:55:5a:9b:5e:16:8a:c5:b0:
                    53:f5:f0:1d:70:e1:85:9a:c7:4f:c2:77:b6:0d:b8:
                    71:e7:f3:d3:22:83:9c:40:c6:71:51:67:c9:3b:c1:
                    f2:0a:18:38:50:0f:47:03:a4:a9:b0:ea:9e:6c:84:
                    81:9c:f6:27:d3:ce:03:93:52:4f:1f:a1:e7:47:45:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:DF:D8:9C:53:EC:F8:85:2D:04:39:48:8D:DF:D5:B4:D8:93:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/8d85be77-01e6-3c74-ac4c-136266925642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:aa:3d:1e:e0:1b:5d:11:62:aa:c6:c2:46:c1:38:81:08:1b:
         65:24:a5:00:0f:19:a3:2d:a6:32:59:2a:b1:00:18:8d:f5:d8:
         19:00:03:4f:7a:d4:38:0e:4f:58:d2:d0:7c:f7:05:a1:03:49:
         af:f3:ef:b5:98:53:95:9e:11:e1:a4:26:39:b5:de:d7:56:e7:
         82:38:12:08:05:af:c0:cb:45:b6:c0:d4:f1:cd:a0:9f:e9:d3:
         89:8d:79:70:fa:d5:f5:cc:b4:5c:83:1b:db:8e:2f:15:c0:cc:
         3c:b7:a0:14:a8:de:c5:cf:ce:f8:99:80:48:f6:17:10:2f:b9:
         72:ed:31:de:b1:84:9e:d4:52:29:83:b9:e0:12:ae:f4:86:7f:
         92:2c:c1:1c:73:08:15:88:cb:dc:31:a4:b1:6e:fd:ac:8f:5c:
         40:4d:ef:92:77:d0:c6:cc:4b:96:43:be:6b:46:d7:22:6e:69:
         3b:b5:3d:8f:3d:ac:96:ea:5e:55:93:69:77:d8:b8:13:3b:e6:
         27:ca:fe:76:ab:c0:da:f7:8f:42:a2:04:f3:1c:a6:a4:48:42:
         69:bc:bd:83:70:eb:09:15:fa:c0:02:a2:33:a1:50:85:18:49:
         cd:bb:79:2a:45:18:5a:66:67:b2:a7:96:ef:e2:18:63:19:ca:
         8c:60:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:57:14 2026 by rpki-client