Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/404a6290-6e7a-368a-9d18-740bb5df30ba.roa
File:                     404a6290-6e7a-368a-9d18-740bb5df30ba.roa (raw, json)
Hash identifier:          7c54HAq8XxxOYXyh3HuxpR5G7fZSk8npbXEjQ9QRSb8=
Subject key identifier:   C4:14:D2:20:A6:53:02:E5:0B:40:B3:C8:66:57:9C:D7:50:C7:3F:B3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5CFD5130441ECE0822ACB1A0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/404a6290-6e7a-368a-9d18-740bb5df30ba.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     7203
IP address blocks:        23.105.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:51:30:44:1e:ce:08:22:ac:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=d061f9ec-d85a-440f-993f-29d6f816362f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:63:5e:4f:a0:15:75:a4:c7:03:8a:af:39:
                    ae:b9:1b:03:8b:b0:dc:78:ef:40:a9:a0:01:5a:07:
                    3b:6b:da:13:1c:06:b8:66:3d:f5:af:5c:ee:98:06:
                    4a:14:e1:88:8e:52:6f:75:dc:4f:c6:d4:d0:68:04:
                    7f:05:9a:89:71:5b:f1:04:b1:fd:8a:7f:77:0f:bc:
                    64:09:e1:0f:3d:81:da:94:0e:f3:2a:91:dd:5b:20:
                    f3:87:ad:c9:11:00:69:c5:8a:a6:7b:d6:2d:15:0d:
                    d4:ef:d3:26:51:89:05:c1:98:0b:ea:00:7d:37:1c:
                    34:b4:a3:56:76:16:24:88:10:de:f4:71:60:d6:c7:
                    c0:38:7d:ba:55:64:e5:17:7f:ed:1e:29:28:4f:49:
                    2c:81:17:6b:2f:e2:33:c3:45:9b:9e:27:cd:b5:e0:
                    f5:e5:c8:e0:44:69:55:ec:58:78:b9:e6:52:aa:ad:
                    50:06:54:ab:fa:64:26:93:b6:0c:f1:8a:08:4f:2b:
                    e0:74:7f:9c:8d:d6:73:3d:09:8c:67:d2:08:65:f1:
                    75:02:bf:66:2a:c9:33:cf:3c:ab:c8:dd:a3:93:93:
                    95:cf:3e:7d:ca:51:f1:13:fb:32:0f:4d:8b:fd:e4:
                    9f:17:f6:1d:87:2b:53:be:4d:32:95:b5:eb:22:0f:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:D2:20:A6:53:02:E5:0B:40:B3:C8:66:57:9C:D7:50:C7:3F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/404a6290-6e7a-368a-9d18-740bb5df30ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b0:bd:e1:0c:13:4e:b1:b7:07:f2:cf:b9:5b:84:64:73:93:
         5a:58:1b:36:b1:a1:81:3f:f8:c0:98:6a:30:66:ea:64:3e:97:
         65:e0:54:45:95:11:77:b1:a8:66:4e:de:90:92:fc:2b:d3:68:
         e5:d5:dc:b8:7f:50:4f:a7:b1:51:f9:ef:5c:21:28:5b:ba:92:
         f1:a5:ea:f6:fe:df:28:31:17:b6:45:41:6f:3d:91:3a:a3:7b:
         e2:cd:e7:c3:f8:ab:42:71:fe:22:f8:7a:b3:52:9b:8f:0b:ce:
         20:09:55:42:e6:21:4c:13:ba:c2:4c:a2:d8:06:b2:0d:94:8a:
         38:30:9e:2b:f0:dd:5a:36:18:eb:3b:d0:ce:b8:e2:92:09:9b:
         39:34:a3:19:74:75:5a:d5:c1:b1:36:b9:7c:57:f9:33:0d:70:
         86:a8:a7:ab:4c:85:b1:1e:cd:c9:b4:bd:01:31:22:d9:ab:39:
         ed:e9:54:24:9c:70:5a:ef:c4:97:af:25:ea:28:f1:92:cc:95:
         78:14:46:4c:66:8d:86:9e:54:f0:c6:d9:20:2c:47:bb:69:8e:
         81:2a:18:94:86:8f:44:32:8c:fa:25:f5:bc:85:6a:e3:d7:1d:
         b5:d4:5f:f0:21:9e:09:d3:9d:85:99:75:09:a2:98:b0:7b:66:
         83:fa:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:12:49 2026 by rpki-client