Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a98a2b8b-e37c-3c18-b6a4-fdede96237e7.roa
File:                     a98a2b8b-e37c-3c18-b6a4-fdede96237e7.roa (raw, json)
Hash identifier:          OrvmTqphgKo6q8h3rvKTSSo0xa8Pz5wcVYkfd1gnlfU=
Subject key identifier:   C9:D6:CB:70:F4:DD:AE:31:7A:74:60:34:84:0F:38:A9:16:77:06:B8
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584F4972896FDBA30F93E492B340
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a98a2b8b-e37c-3c18-b6a4-fdede96237e7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11290
IP address blocks:        24.226.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:89:6f:db:a3:0f:93:e4:92:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1f9557fb-3214-4313-8f2c-d57663f351c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:b9:5e:e7:9a:8e:a2:34:40:3e:0e:cf:e6:
                    51:c0:7d:a5:17:ee:81:8a:9a:2f:88:e5:3e:bc:77:
                    eb:20:3f:7f:24:46:27:56:39:af:75:60:5e:99:02:
                    cc:15:b6:c8:7c:df:77:d6:c0:fc:db:8d:78:23:df:
                    15:83:68:68:ee:2e:62:fb:9a:fa:44:ab:8b:07:1a:
                    c5:37:95:73:51:e1:35:6a:70:18:d4:d3:27:ae:c3:
                    7b:58:17:48:1b:7b:55:16:a7:b8:e0:e5:6f:bc:dd:
                    9b:84:26:c2:38:f9:7f:9c:13:97:45:c2:00:b1:9d:
                    a0:03:31:6e:64:88:59:01:34:55:4c:2b:ae:d0:0c:
                    5d:d0:83:fc:5b:e9:cb:3a:ff:da:54:7e:fe:88:92:
                    bb:7f:3e:03:77:0a:29:fb:dc:df:e8:e8:da:32:2b:
                    39:fc:75:6a:8d:07:91:2f:87:39:77:ee:83:74:69:
                    87:69:38:b1:1e:af:e4:24:82:a0:de:25:e7:3d:7c:
                    69:97:43:06:bf:26:93:77:b1:89:11:42:77:35:c6:
                    57:4e:b8:9c:bd:e9:1d:ca:99:c8:b6:37:9a:bc:a5:
                    ab:b1:97:aa:16:1f:00:a8:4a:50:f9:02:a1:32:14:
                    f1:45:d2:77:da:46:34:3a:f8:9f:b6:42:4f:8f:6c:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D6:CB:70:F4:DD:AE:31:7A:74:60:34:84:0F:38:A9:16:77:06:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a98a2b8b-e37c-3c18-b6a4-fdede96237e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.226.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:82:47:0f:a5:4b:ab:5f:92:d7:2b:49:70:b4:3f:6c:fa:73:
         a3:bd:3f:3d:2b:c0:8c:18:a5:e5:35:d8:9a:3f:99:eb:ab:5a:
         1d:ee:c1:f3:4d:97:cf:55:82:1b:50:e3:fd:66:e6:7b:22:a5:
         42:b0:02:fe:f3:ce:f1:04:9d:2b:9f:6d:b6:33:5b:17:71:93:
         42:4e:d3:26:24:e7:f5:39:2d:9b:16:98:10:9d:e3:33:e7:f2:
         8d:a7:52:d0:ac:fe:37:da:fb:97:fc:e0:3e:da:ce:5e:8d:5e:
         86:40:d4:3e:14:0b:bf:8b:cf:cf:fe:8d:fe:22:6c:82:37:13:
         fe:65:29:fd:ae:5a:14:fe:d8:bb:18:7b:3c:6a:f4:21:f8:c0:
         f8:70:fa:eb:6c:5f:e0:5a:62:e1:bc:d8:ec:df:e5:56:0e:9d:
         99:15:27:bc:25:ca:31:ee:4a:46:9b:f6:ea:d4:0f:cf:7e:23:
         cb:88:64:df:6f:71:75:65:b2:e5:90:73:35:ff:ae:87:f5:07:
         cb:8c:04:90:e8:ae:c4:05:c5:ad:d3:ba:65:e1:05:82:cb:22:
         2b:be:54:c2:ce:85:32:4b:f9:4f:aa:8f:cf:36:4a:78:51:fe:
         21:fe:bb:cb:87:cb:e3:87:21:c8:da:9f:7b:b2:fd:05:cc:3c:
         2f:2a:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:36:15 2026 by rpki-client