Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9b49f9b3-0c0b-34ea-ac81-80e02886a097.roa
File:                     9b49f9b3-0c0b-34ea-ac81-80e02886a097.roa (raw, json)
Hash identifier:          hh9+CtyisReDJGqYAzuwk+QsUGjvGkA+nuGhd3zSxVs=
Subject key identifier:   29:C2:32:45:77:26:7E:99:BE:B8:5A:8F:F6:24:2F:F2:25:5F:2A:3F
Certificate issuer:       /CN=1a78e5bb-4a68-4b2f-870c-a943f9a02622
Certificate serial:       010D0C9F4328584F1B623FB76B173C4AD6ADB040
Authority key identifier: 84:C9:F5:69:EE:B4:88:58:5A:E2:B8:AB:BE:00:30:E2:8B:2E:C7:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9b49f9b3-0c0b-34ea-ac81-80e02886a097.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     40169
IP address blocks:        23.153.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:3f:b7:6b:17:3c:4a:d6:ad:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a78e5bb-4a68-4b2f-870c-a943f9a02622
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=6653334a-b80e-461a-acce-7868cfecc57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:0c:ac:1f:32:8b:ee:68:91:26:f1:c4:e1:
                    a1:59:ce:fb:e6:85:33:c6:44:01:71:61:a4:d1:39:
                    99:b8:13:48:21:6c:ee:28:e8:ce:09:25:ca:bd:c1:
                    46:9b:5e:f1:40:9d:90:05:7c:57:37:5c:5b:d3:5a:
                    2f:a9:0b:fd:a9:d3:38:c4:73:b8:b4:d3:05:03:b8:
                    0a:6f:2a:87:c1:11:c4:53:2d:bb:b0:e0:89:b3:d7:
                    ed:e7:63:09:de:a7:55:54:09:2a:51:61:b9:1e:19:
                    72:36:8b:31:fc:da:ab:69:6c:33:16:fe:d3:cb:4e:
                    a9:9c:38:b7:cf:39:85:e8:59:7e:7f:1c:cc:de:e6:
                    96:43:59:28:11:33:0a:02:52:16:ae:c5:f9:58:c6:
                    05:e2:dd:db:cc:d3:6e:0a:42:9d:2d:4d:01:21:21:
                    b8:1d:4c:77:74:57:55:bc:f7:ac:22:fb:d0:99:18:
                    e3:09:05:b8:0e:05:8a:d9:b6:53:0e:a2:72:d3:01:
                    d9:47:a9:69:5a:fd:70:06:ce:3b:84:77:c5:8a:15:
                    ea:fe:3a:e8:27:66:79:0c:59:92:56:d6:15:57:7a:
                    a4:9a:a0:01:bf:c8:64:a2:02:bd:ba:a1:a3:e7:b9:
                    d3:16:dd:26:04:f4:56:4e:bc:28:ba:02:37:c5:00:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C2:32:45:77:26:7E:99:BE:B8:5A:8F:F6:24:2F:F2:25:5F:2A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9b49f9b3-0c0b-34ea-ac81-80e02886a097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.crl

            X509v3 Authority Key Identifier:
                keyid:84:C9:F5:69:EE:B4:88:58:5A:E2:B8:AB:BE:00:30:E2:8B:2E:C7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2e:a2:e9:3c:92:a5:44:77:be:b3:4c:0f:19:aa:b3:18:8a:
         fa:c4:8a:1d:e6:01:3a:cc:6d:4f:16:3d:3d:8a:62:28:75:3f:
         06:2e:39:64:a4:ab:02:f7:f4:6c:76:c2:3e:16:3d:43:d2:00:
         68:b4:35:37:7a:9e:46:40:cf:dc:97:77:69:59:fd:0c:ac:e9:
         92:66:47:72:6a:10:00:13:ac:54:02:af:6d:f2:aa:08:0c:05:
         51:72:0b:64:a1:4c:da:ac:db:9b:a9:5d:c2:8e:da:51:66:8c:
         c4:9c:e5:13:c5:dc:cc:5d:e9:1c:92:bf:15:17:d2:81:6f:24:
         81:fe:dd:2e:42:8d:d5:25:19:27:50:44:1f:20:29:46:16:76:
         d5:3e:7f:42:fe:8f:63:62:e3:f3:b8:6d:9a:cc:e2:15:60:b2:
         7d:1d:2b:55:65:fb:70:a2:96:27:6a:50:95:1b:6a:d1:50:0b:
         f0:e2:d8:fa:d6:6e:f0:e3:04:a7:ce:cc:3b:30:5e:52:03:23:
         ee:03:5a:d7:d7:f6:20:a0:10:08:61:c3:d2:5b:b0:28:a4:65:
         ff:6c:c6:55:27:52:90:4c:be:de:84:09:75:e3:ab:5e:3c:56:
         f4:96:9d:cf:40:e3:c1:72:b3:51:9f:29:61:9f:63:00:6b:f1:
         53:97:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:55:51 2026 by rpki-client