Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40e964c-8013-36a3-a98f-f658b45a3b36.roa
File:                     c40e964c-8013-36a3-a98f-f658b45a3b36.roa (raw, json)
Hash identifier:          hLckw24UhfT9BgGfN8vgik/PNME4IoiXJQ+j85NxRVc=
Subject key identifier:   E0:FB:EB:37:3B:33:8F:01:A9:AB:33:4F:A2:D5:AE:B8:12:DF:A7:95
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F03A76FF90AB82AF2B8B222C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40e964c-8013-36a3-a98f-f658b45a3b36.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     19157
IP address blocks:        23.85.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:6f:f9:0a:b8:2a:f2:b8:b2:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=bdf640a0-6837-409b-9d96-81fcf0ef1f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:2b:2f:78:18:f7:95:c0:5b:f8:8e:cc:ff:
                    ea:7d:db:49:24:85:1b:d2:76:bc:a8:6e:d0:b4:44:
                    50:7d:9b:f9:b7:9f:c3:e8:6b:ba:09:2f:af:eb:1a:
                    34:09:54:67:3e:e0:5e:15:5c:2e:e0:07:42:de:5f:
                    b3:a4:7d:e2:ee:6a:9f:6d:8b:e1:a2:02:52:bd:ab:
                    7a:1d:ad:e7:3e:78:76:ab:fa:aa:3a:6d:33:b3:5c:
                    13:c1:9f:d9:58:73:57:28:34:d1:5c:77:3e:29:65:
                    51:96:8f:96:ed:54:4a:0b:a4:be:39:e1:20:93:1c:
                    cb:c4:74:20:dd:05:3b:1c:14:44:26:61:eb:8a:8e:
                    63:56:9c:ac:19:96:ea:ad:b8:56:84:57:e7:d6:3f:
                    8b:44:97:0f:bd:6f:b8:40:39:90:dd:19:71:c6:8b:
                    a8:14:a5:fd:d9:63:95:8f:39:77:f9:20:43:a6:f9:
                    93:5e:5f:81:85:18:df:ee:b2:cf:1d:73:a8:96:6f:
                    a8:15:b8:26:e1:26:2f:3f:b9:91:5a:8a:71:8d:69:
                    f3:f3:89:89:cf:9d:08:97:3d:6e:02:6b:d3:0b:8d:
                    7d:34:15:37:5d:af:a3:6e:c7:23:ca:6f:48:c0:2e:
                    ea:53:00:db:db:85:4c:8c:b0:8f:14:6b:3c:ae:77:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FB:EB:37:3B:33:8F:01:A9:AB:33:4F:A2:D5:AE:B8:12:DF:A7:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40e964c-8013-36a3-a98f-f658b45a3b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.85.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7b:89:9c:21:00:d9:8d:69:f0:a4:f3:96:5c:88:ce:8e:13:
         1d:c5:d9:93:5a:90:59:b3:dc:5d:44:97:e3:2b:53:1d:a2:38:
         6c:f9:df:a5:aa:49:43:06:8b:5d:91:3b:24:83:52:04:95:ba:
         00:16:0a:b0:9d:ad:0a:bc:30:a5:7a:e0:c7:a2:2a:b3:02:a3:
         a2:e1:41:47:f9:55:49:b7:e4:ac:e2:f3:cc:dc:55:76:9e:01:
         74:b7:57:a8:b9:28:de:dd:5f:68:3e:16:a9:ea:cd:68:ef:d5:
         44:e0:68:73:a7:c5:8a:09:e0:33:8c:a5:4b:e0:41:1b:b5:f6:
         7f:12:df:8f:1c:0b:69:86:d6:7b:2f:a1:e6:33:98:62:60:c0:
         46:52:d3:54:3d:6f:ed:61:05:bf:bb:5c:a5:6f:31:a4:9d:8a:
         5b:31:84:d3:1e:89:fd:f7:46:2c:e3:c4:c4:81:d4:9a:ae:b8:
         3e:af:0d:52:ba:fc:c7:0a:97:02:b9:2a:0b:11:0b:b2:f3:aa:
         78:1d:c3:e0:57:32:a7:4e:cd:a6:ef:5d:12:8a:e5:30:32:0d:
         c3:8a:07:3f:60:ca:4a:67:08:db:71:2d:c6:29:3e:91:34:66:
         dd:15:4c:2a:9e:b3:1c:a7:ef:26:47:cf:aa:bf:60:08:d9:4f:
         ed:3d:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:18:20 2026 by rpki-client