Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/11b76402-6d7d-305c-bf3f-d84cb694a37d.roa
File:                     11b76402-6d7d-305c-bf3f-d84cb694a37d.roa (raw, json)
Hash identifier:          ngmj6zwC1UuQeJ3Jbhf8m5OxUX1BzW9PWy7hH5u+Apo=
Subject key identifier:   F0:F8:24:72:50:04:26:97:79:ED:25:9D:F5:64:A8:AC:B8:94:AF:22
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584E35FF16719D29DE2620643480
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/11b76402-6d7d-305c-bf3f-d84cb694a37d.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     12198
IP address blocks:        23.177.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:16:71:9d:29:de:26:20:64:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=2a8b147b-c410-43a5-b206-3f98226a413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:86:22:1e:f6:b1:f8:93:c4:a3:34:8e:ab:
                    1f:07:7c:1e:91:ba:5a:e1:33:b9:b4:4b:86:65:61:
                    35:1d:f5:fe:e1:3f:e6:25:96:ba:8e:df:b0:d4:b6:
                    64:9c:71:a8:26:de:d9:b2:06:5a:1f:2f:15:6c:94:
                    c1:63:83:e9:f7:8b:df:2d:c4:ba:2a:1f:8a:48:67:
                    be:ac:85:1f:21:89:e5:0e:fb:90:e5:29:57:75:4c:
                    14:3a:9c:7f:7e:d2:46:90:13:aa:d9:08:18:05:48:
                    ed:f0:d9:61:e9:33:b4:d4:44:5c:13:b9:6d:ce:49:
                    62:87:14:11:eb:6b:42:4e:d2:c5:f5:00:49:48:2e:
                    4d:ee:16:72:54:2c:21:3e:36:77:e1:58:67:6e:59:
                    67:5c:ca:81:f0:a9:e2:a1:74:d4:89:e2:ff:46:94:
                    42:5e:99:0b:c5:0a:dd:af:4a:85:70:ff:4c:4c:f2:
                    d0:99:3c:01:56:73:c2:a8:a3:b2:5e:95:08:37:ee:
                    e8:06:0e:96:9d:cb:75:53:78:b9:e9:2c:f8:8f:37:
                    72:ca:c4:fc:29:81:4d:d9:0b:57:2c:2a:87:d1:7e:
                    da:2b:00:69:c9:de:67:d3:dc:cb:f2:3b:b9:63:01:
                    81:af:2a:83:49:ee:15:34:20:4b:ec:05:a4:37:bc:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:24:72:50:04:26:97:79:ED:25:9D:F5:64:A8:AC:B8:94:AF:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/11b76402-6d7d-305c-bf3f-d84cb694a37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:6c:7a:81:b5:c1:cb:11:e2:26:b5:12:7d:89:02:88:20:
         d2:1d:ad:3b:f0:c8:0f:26:34:4f:7f:f3:1c:d8:aa:71:c4:01:
         ab:1f:bd:4b:fb:93:b0:29:5a:21:ed:e2:9e:d4:d7:5f:09:86:
         52:43:5d:2e:18:d0:28:df:94:cb:2e:9a:2e:f5:57:08:df:92:
         e3:9e:4d:ac:17:6d:ef:89:a7:49:50:5b:09:89:eb:0b:ec:8b:
         56:47:e2:96:7b:17:99:83:ca:1f:29:58:4c:a6:b2:48:f7:5b:
         da:a5:5c:bc:5f:e8:b1:10:02:cd:90:1e:98:37:7d:61:85:e6:
         07:de:b7:f7:be:04:24:84:ad:d8:ee:5e:5e:4f:b9:89:05:c8:
         05:73:eb:49:ff:e1:38:09:93:ed:22:f9:46:10:00:85:2c:18:
         f2:bd:56:fa:5c:2d:06:48:3e:03:ab:d5:7d:5f:bb:53:f5:59:
         62:cd:6c:1b:c3:3c:e9:9b:05:f3:74:5b:cb:d3:9f:4a:93:7c:
         21:b6:7e:c4:b1:a1:57:25:8b:47:51:65:ad:5c:ee:94:30:cf:
         bd:8f:6b:68:d1:a0:54:6f:57:24:35:9f:e8:74:06:ee:a7:78:
         91:c0:ef:80:46:38:57:47:23:73:b3:0e:0a:0e:80:f6:83:fd:
         27:39:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:13:22 2026 by rpki-client