Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/5dfa5b86-96c3-3602-adff-1fcef7e1809c.roa
File:                     5dfa5b86-96c3-3602-adff-1fcef7e1809c.roa (raw, json)
Hash identifier:          mYVuVm9RVe1QBNDPK142FQMvC6lS+Z/yXi0kzcLKAHg=
Subject key identifier:   51:8D:EF:02:D9:FC:69:37:E6:9C:0A:7C:7F:86:D8:4D:68:DF:83:8F
Certificate issuer:       /CN=c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f
Certificate serial:       010D0C9F4328584EA7948BE8AA469148046AF7C0
Authority key identifier: 59:98:4A:15:E7:0D:23:4A:53:F0:D1:F1:A2:CE:0A:08:58:A5:2B:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/5dfa5b86-96c3-3602-adff-1fcef7e1809c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395417
IP address blocks:        23.179.40.0/24 maxlen: 24
                          2607:b5c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:8b:e8:aa:46:91:48:04:6a:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8f9077fa-6565-4af1-9e09-e5542e06438a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:77:fc:1b:c2:24:70:88:7c:29:bd:ae:27:cb:
                    9c:32:a6:9f:ba:11:07:bb:dd:ee:65:fe:ea:fc:16:
                    f7:d3:9d:01:9c:b2:d0:3c:94:df:e8:97:b8:c4:24:
                    7b:0a:81:92:a0:7a:13:3e:78:b5:06:89:25:2e:d8:
                    e9:97:d5:ff:0b:b3:be:40:b4:ea:7c:0d:71:87:bd:
                    1f:a2:9e:a8:39:b4:2e:0a:13:4d:94:69:71:61:8d:
                    08:bb:51:8e:96:b6:86:50:be:8c:71:fb:31:62:47:
                    80:da:c5:b9:57:bc:a9:50:ce:ff:6e:d8:e9:61:78:
                    ee:e8:29:12:af:df:b8:0c:e7:58:2b:20:a9:b5:a0:
                    36:35:f9:14:20:bc:8d:45:9f:8d:69:37:0c:08:ba:
                    81:05:a5:fa:8c:95:49:b5:c1:d8:a0:33:32:28:a9:
                    3a:1b:f7:14:d5:4a:72:ff:5c:5c:5d:d6:8b:d7:d8:
                    21:4b:ec:bc:37:94:57:6c:f8:46:a6:30:c5:a7:7f:
                    52:56:45:f9:e8:2d:d3:03:1e:83:cf:d7:54:1a:e3:
                    e9:c8:fe:1a:49:bd:8f:b5:2f:f1:d4:86:d5:a8:a6:
                    79:c6:a3:df:e7:49:41:04:02:98:c6:fb:6c:e2:72:
                    3f:ae:e1:49:3c:8e:73:28:73:ab:08:70:83:ce:16:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8D:EF:02:D9:FC:69:37:E6:9C:0A:7C:7F:86:D8:4D:68:DF:83:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/5dfa5b86-96c3-3602-adff-1fcef7e1809c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.crl

            X509v3 Authority Key Identifier:
                keyid:59:98:4A:15:E7:0D:23:4A:53:F0:D1:F1:A2:CE:0A:08:58:A5:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.40.0/24
                IPv6:
                  2607:b5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ab:42:2d:7c:d2:5a:8e:6e:7b:6c:2f:97:98:1f:38:61:67:
         36:53:bb:3c:34:18:72:04:81:5e:4a:89:04:15:98:92:1d:5b:
         ec:2a:e9:51:6c:86:7f:45:50:31:cd:25:ff:16:34:2e:a6:e1:
         ef:de:16:15:a7:ef:ff:37:64:3a:59:75:bd:ea:fa:7f:ab:cf:
         5d:b0:39:4a:79:52:d9:63:7c:57:96:1f:ca:c6:96:86:20:a8:
         a7:30:13:8e:6f:3f:f0:de:b2:aa:6a:aa:78:9f:06:19:dd:d7:
         00:c3:20:86:9e:b4:ad:6d:19:5b:b2:8b:72:f1:4b:8b:59:06:
         91:2a:8b:28:d6:a3:60:ff:06:7e:3a:eb:7b:80:11:c1:73:28:
         6e:98:fe:67:1d:db:29:ae:47:7e:99:7e:8b:6e:68:d7:35:f1:
         ce:c9:d4:63:0b:cc:da:1d:87:7f:5d:8a:de:80:55:01:99:2f:
         0a:6c:74:3d:0e:8a:28:08:23:05:b8:2f:9f:24:bc:10:8b:68:
         fc:15:59:cb:1a:95:82:5c:20:b3:fd:f7:b0:5d:0e:2a:28:95:
         55:89:b6:9e:0c:bc:b1:66:d9:87:58:ae:51:3e:15:25:fc:52:
         2d:89:9d:25:2d:e8:c1:03:52:3d:34:35:96:f5:1f:9d:4f:71:
         fb:d4:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:20 2026 by rpki-client