Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa
File:                     83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa (raw, json)
Hash identifier:          SfvAuLgORWlimVuVYz+5sFfkxCOIuM0pjjBxuJGVeSE=
Subject key identifier:   0D:E2:13:1F:85:F1:2D:4A:63:82:BD:50:D4:38:20:0D:8D:CF:F1:D7
Certificate issuer:       /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Certificate serial:       010D0C9F4328584EED5216CFEC0DBA9ACCC36000
Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     63456
IP address blocks:        192.122.149.0/24 maxlen: 24
                          209.209.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:16:cf:ec:0d:ba:9a:cc:c3:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f10d90fa-6a5a-4ab5-94f4-88d9dda1ad46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:61:7d:7f:f0:94:1a:52:bf:9c:c3:0c:af:0a:
                    5c:e0:d6:b7:7d:c1:c2:70:59:d8:a6:e9:80:0b:b2:
                    6c:0d:53:ce:1c:1c:8b:b7:8a:4a:5e:30:f4:de:5c:
                    49:b3:4d:48:e8:10:20:37:d8:0b:53:43:38:cd:ea:
                    82:56:6b:0e:7f:a3:50:87:89:f6:3b:58:55:00:a6:
                    50:7e:80:aa:af:d6:ef:e1:8a:31:ce:e2:89:8a:7d:
                    a5:ea:3a:ff:17:32:39:cd:c0:cc:b2:cf:7a:6f:0b:
                    e6:f5:5f:3d:cd:ee:0b:9c:f3:75:53:57:57:92:03:
                    7f:01:43:f1:14:51:2b:6c:72:53:26:98:3c:c6:ba:
                    6f:52:da:b9:18:7b:b7:0c:85:13:a4:b3:4a:4b:9e:
                    33:83:1f:e0:e6:2a:0a:b1:04:99:67:8a:0c:3a:75:
                    fe:94:24:92:c8:bc:74:6a:ed:47:70:f7:c7:c0:f8:
                    64:d0:fc:4a:5d:36:4a:76:d3:3c:76:fb:bb:c7:96:
                    bd:9d:1c:bc:29:4d:b9:02:6b:e3:dd:d5:22:71:fa:
                    8b:c7:87:80:09:0d:b1:95:aa:e8:50:9b:69:e5:47:
                    89:a9:98:8c:06:a5:f2:49:8a:cc:43:80:49:14:b7:
                    32:71:79:c8:84:13:56:a7:4e:41:7d:d6:f5:eb:d0:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E2:13:1F:85:F1:2D:4A:63:82:BD:50:D4:38:20:0D:8D:CF:F1:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl

            X509v3 Authority Key Identifier:
                keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.149.0/24
                  209.209.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:37:7d:55:75:c2:42:a8:ba:26:b0:42:63:29:68:be:b9:1d:
         5e:0c:42:fa:13:ab:70:d6:b5:59:5d:98:37:90:b3:63:ad:3b:
         0a:af:d3:09:56:e0:89:1e:04:c0:27:94:81:a4:56:f5:85:19:
         43:79:aa:95:26:91:a8:01:97:bc:b6:b2:59:8d:36:5e:b5:30:
         61:c3:02:4c:f6:dc:59:d6:18:c4:31:da:93:ec:97:7c:25:3d:
         60:49:d5:fc:88:a1:a9:c8:fa:8a:03:4d:0a:b0:fb:9c:74:1f:
         94:05:6c:73:9c:03:6e:0d:01:67:c6:cc:19:43:8c:00:5b:99:
         00:95:6c:3c:1d:07:fc:79:9f:4e:91:e6:44:f9:2e:0c:c6:55:
         0f:3c:32:e9:e6:ec:5b:b3:8c:86:0c:d2:b7:9f:b0:11:54:f3:
         28:72:50:8a:04:d2:8d:2c:4e:10:bb:13:dc:d1:0d:4b:27:aa:
         a3:f1:02:65:f1:26:65:6b:38:c7:c5:9b:c2:6f:6b:c6:de:d1:
         5c:92:2e:df:36:f4:97:2b:c5:c7:d7:a2:73:f9:36:8d:e0:b4:
         59:05:55:01:3d:54:1f:bc:34:bf:4f:92:73:03:10:27:6c:65:
         5f:0b:07:22:b8:43:b3:53:aa:79:2c:a5:9f:23:0f:25:25:5b:
         ce:40:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:48:48 2026 by rpki-client