Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
File:                     11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa (raw, json)
Hash identifier:          zc0FpylBJdb3H829agEchGn1zf3H/tVx8GlBe0dmyaY=
Subject key identifier:   08:54:C7:09:E2:AE:C8:B7:53:01:72:43:F2:2B:5E:DA:9A:39:B5:13
Certificate issuer:       /CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Certificate serial:       010D0C9F4328584EB416FBA0A04488C8EE247480
Authority key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     394760
IP address blocks:        23.140.8.0/24 maxlen: 24
                          2602:fb30::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:fb:a0:a0:44:88:c8:ee:24:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=54b399f5-21fb-4344-872a-ad348bcf66f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:d1:bd:8c:00:ae:a2:d1:1e:be:12:dc:bf:
                    c2:29:54:4c:b2:1f:2b:a5:32:2d:b5:b4:29:47:43:
                    85:03:d0:81:69:6b:dc:e3:4a:5d:2f:d3:c6:ed:35:
                    84:57:0c:5e:6f:db:ed:43:41:c6:3f:d2:ba:2f:7f:
                    3f:a9:a5:2c:c3:7a:b6:e6:3f:1d:60:bd:3b:59:fc:
                    85:d1:45:09:9e:8f:16:32:b2:15:93:4f:5c:ec:be:
                    22:f3:da:48:a3:67:63:3a:e2:aa:a4:a8:aa:cd:8f:
                    6f:39:ec:5b:21:2c:62:75:34:d3:d7:6c:2b:50:26:
                    99:b7:1d:3a:e4:b0:cf:31:6b:b8:77:34:84:9c:97:
                    0b:0e:ba:3a:ff:15:57:20:0f:cf:8d:37:dc:68:89:
                    f9:76:02:fd:84:08:a4:71:9b:cb:46:bf:d3:b6:71:
                    30:14:9c:9d:99:c5:b3:43:e2:c3:8a:ce:d9:7f:31:
                    7b:8b:88:68:0f:d6:a4:72:db:87:81:bb:01:fe:b0:
                    4e:11:35:58:5a:0c:0d:3e:aa:5f:f7:2f:bb:ae:c5:
                    40:74:eb:98:69:72:05:ed:df:79:82:93:9a:5c:3b:
                    14:8c:e8:fb:0c:09:17:38:7b:ee:ae:d2:40:bb:ff:
                    98:ba:65:f3:d5:81:74:f4:c8:36:c5:14:e0:54:e4:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:54:C7:09:E2:AE:C8:B7:53:01:72:43:F2:2B:5E:DA:9A:39:B5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl

            X509v3 Authority Key Identifier:
                keyid:FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.8.0/24
                IPv6:
                  2602:fb30::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:42:ab:ab:0b:d5:54:11:1d:37:c9:eb:32:2d:a5:94:80:9c:
         1e:3c:98:77:b3:81:37:cd:43:4b:fc:67:35:53:fe:ae:37:09:
         50:5d:0b:33:05:e4:ac:75:8d:6e:a8:e7:1d:a2:13:1e:07:32:
         ca:aa:e0:96:5b:d9:da:41:5b:dd:94:08:7d:5f:52:04:e2:3f:
         4e:55:c4:c1:6d:3e:06:fc:12:e8:77:d8:9c:fb:d3:3a:05:d8:
         17:1c:91:86:de:ba:3b:d5:90:43:95:6c:be:f1:f4:b0:f2:34:
         01:bb:9f:4c:fe:75:7b:84:90:7e:fb:e1:82:af:8e:0d:f9:56:
         4e:f4:52:75:89:ee:29:b6:5f:f7:57:16:c3:6f:42:c8:d2:36:
         3f:44:ef:7c:b2:65:4f:a6:a0:88:f1:62:07:c2:61:a3:8a:ce:
         fd:43:29:9d:c0:58:18:96:b1:84:91:0a:82:c6:82:b5:33:6e:
         0c:3d:aa:d1:48:63:8f:4c:b0:e0:f2:c5:50:ff:57:cc:54:e8:
         23:9e:24:e3:a3:da:f0:8f:ed:3f:6f:87:4d:cf:b6:95:26:be:
         fe:bb:88:77:8a:10:31:b9:a9:bc:9a:c6:55:22:3a:98:f3:c9:
         38:a7:90:dc:ec:35:c9:eb:24:bf:cc:bc:42:8f:4c:be:44:9e:
         56:50:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:03 2026 by rpki-client