Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
File:                     f8553b5d-807d-3297-a922-562a8bd98bc4.roa (raw, json)
Hash identifier:          Xyv9BxyYuAvw/X0hwDAMtpMDhaQkq8saFerHwGqbEVk=
Subject key identifier:   4E:BA:89:09:82:B1:32:15:03:31:BD:DA:5E:32:3F:E2:B6:55:91:E6
Certificate issuer:       /CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
Certificate serial:       010D0C9F4328584D60E4FBFD4EA8EC04CEEBD2A0
Authority key identifier: 0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     54364
IP address blocks:        23.173.240.0/24 maxlen: 24
                          2602:809:c000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fb:fd:4e:a8:ec:04:ce:eb:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=42bfe8df-3064-4ebb-a916-2c1054697148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:36:86:9f:ad:f3:01:2b:a1:50:08:87:87:
                    6e:72:d9:ec:15:87:04:42:96:35:b1:d5:6c:93:55:
                    ba:6f:42:87:61:27:82:b9:6a:59:60:ac:a7:a6:2a:
                    c7:cd:20:d5:2d:9c:7b:f1:ec:76:29:61:24:7b:7b:
                    30:7e:83:b5:bb:4c:1e:65:7d:99:7e:e0:d3:93:21:
                    20:2d:92:9e:05:14:14:10:27:26:1c:83:da:3a:62:
                    34:ab:3f:87:17:b4:c5:81:ad:80:26:fe:02:1b:ae:
                    61:7b:82:0e:69:da:dc:ab:e4:8f:8d:63:e7:1a:86:
                    e6:f6:f1:71:37:6d:b1:97:dc:30:17:b7:9f:78:80:
                    db:bb:b4:d6:c4:80:f5:7b:3d:ce:70:67:a7:a5:e5:
                    b0:81:b9:44:a0:ed:ff:26:0f:50:cc:70:98:71:03:
                    d2:48:49:ff:b5:e3:46:b2:e0:a3:98:d1:d9:76:b0:
                    33:3b:b2:50:ca:97:2d:58:0f:20:d3:ac:ab:b3:dd:
                    18:ba:a5:b5:ae:5b:7a:de:3f:35:fa:7e:a4:8a:7a:
                    44:86:46:21:bf:cf:7e:a7:c3:aa:cf:26:9e:e4:2a:
                    db:62:08:f5:e1:41:d7:6e:00:a6:e6:97:19:79:ca:
                    a4:3b:37:ec:4c:7a:dd:43:e4:6c:c9:58:82:d6:35:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BA:89:09:82:B1:32:15:03:31:BD:DA:5E:32:3F:E2:B6:55:91:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl

            X509v3 Authority Key Identifier:
                keyid:0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.240.0/24
                IPv6:
                  2602:809:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:1d:9a:7c:71:0a:58:ce:fe:e5:a7:e5:e9:67:99:15:f7:
         c5:e9:7c:6a:77:c4:99:25:9b:b8:84:6a:6d:03:00:b1:63:69:
         dc:61:ed:e5:f5:eb:c9:e3:63:f5:45:a9:d1:24:b6:80:52:73:
         73:39:4e:fa:1b:2f:c5:34:5f:3b:c8:ff:ed:5d:40:e6:a5:79:
         0a:cd:03:69:d2:ae:3f:4a:51:d8:5f:c2:40:d4:ed:6f:7b:ec:
         83:92:c5:0a:e9:c1:1a:8a:28:cb:70:a3:1d:07:ce:dc:1e:e5:
         06:10:eb:27:c3:2f:b3:23:e3:6d:99:7d:7e:ad:dd:f3:eb:41:
         2b:7e:d1:4c:41:a0:e4:11:85:59:ef:fe:b6:d9:63:eb:63:3c:
         67:13:32:d9:9b:b5:91:00:69:59:73:11:79:d7:67:af:e6:f5:
         20:5c:72:77:a6:30:5e:12:2c:ac:20:c1:18:b8:a4:d5:90:1f:
         37:7f:52:35:f6:e7:0d:37:05:b2:54:20:3c:05:b8:40:a2:6f:
         3d:d6:9a:5e:b1:5d:e9:9e:c3:ab:dc:96:7a:7e:b7:68:4c:5d:
         59:4a:d1:a2:a8:3c:1c:6f:4f:37:21:cd:9c:a9:7a:76:ce:82:
         ef:9d:3a:69:a8:b3:91:ff:d4:42:e3:d9:8c:2f:86:27:ed:d0:
         5e:cb:55:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:27:43 2026 by rpki-client