Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa
File:                     5296663f-6f5c-3a1e-a5be-a48a076b287d.roa (raw, json)
Hash identifier:          x4TU5s83HbbS2ldwXgumPua5kp/R6Ex4qgfPuBA5KRE=
Subject key identifier:   E2:5C:C0:DF:D4:16:FF:4E:1B:60:84:B2:0E:2A:6A:26:64:EE:44:D0
Certificate issuer:       /CN=57f6f431-f55e-4ae4-9576-b5b27773bfed
Certificate serial:       010D0C9F4328584EA787EB08251645046AD85100
Authority key identifier: 4B:9A:DB:F2:1B:A6:83:19:9D:A7:D8:7C:CE:19:6B:28:58:1D:A7:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8095
IP address blocks:        23.180.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:eb:08:25:16:45:04:6a:d8:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f6f431-f55e-4ae4-9576-b5b27773bfed
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=74f90fde-4ba0-4f02-a371-1b7ab9d4c6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:2f:ba:b8:e0:94:90:fc:7e:d8:19:b6:85:
                    94:bc:41:30:61:2a:5d:42:92:55:e8:a2:af:1f:60:
                    1e:fb:74:79:80:a6:11:9b:c0:3b:b7:13:d3:45:49:
                    0f:a4:14:2c:dd:a3:e7:1a:ba:18:18:5a:02:4c:1c:
                    02:4f:6c:d4:48:32:99:a8:ee:9d:6a:b6:47:3c:c2:
                    31:b2:34:34:26:69:82:9c:2e:4b:36:42:c4:74:cb:
                    bb:0f:d8:c7:55:5d:04:b5:a8:13:72:fb:1c:bf:73:
                    53:f9:a3:cf:80:c6:47:98:73:5b:af:51:34:21:99:
                    34:0b:d8:89:c2:c3:37:06:a8:00:de:1c:57:12:48:
                    6e:4a:90:c3:1e:52:44:cb:bd:a6:3d:33:91:02:bf:
                    70:29:42:d5:92:71:0c:cb:6e:61:4d:d0:43:6e:c8:
                    27:2f:d9:7e:fb:95:fd:1d:6d:e5:b6:f2:14:cf:cb:
                    db:83:59:c5:11:1b:e2:a8:a3:a6:5e:8f:82:87:b2:
                    03:e3:51:b6:d6:9a:f6:99:56:76:82:82:17:27:fe:
                    ad:24:fc:f4:39:2e:3e:77:a1:27:de:b0:5a:d5:37:
                    37:e7:04:42:95:e3:64:e5:12:7e:57:bd:69:22:9a:
                    fe:e9:4e:46:bd:4f:f2:26:ed:3d:cf:5d:17:7e:f0:
                    0a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5C:C0:DF:D4:16:FF:4E:1B:60:84:B2:0E:2A:6A:26:64:EE:44:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.crl

            X509v3 Authority Key Identifier:
                keyid:4B:9A:DB:F2:1B:A6:83:19:9D:A7:D8:7C:CE:19:6B:28:58:1D:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:45:8f:df:b0:30:36:02:3c:c3:ad:98:70:e9:3b:07:b5:
         52:42:de:92:60:52:67:63:8d:cb:12:2e:dc:10:a2:01:d2:b1:
         20:ac:63:35:66:53:71:51:f3:fd:2a:a9:bb:1f:72:d3:58:dc:
         5d:54:31:d1:2e:61:f2:3b:23:94:6b:1e:c1:36:20:96:97:7e:
         1b:2a:84:ca:f5:ea:7b:1e:16:eb:07:c7:ef:02:db:74:fe:33:
         58:fe:08:7e:7f:2e:08:36:f4:50:e2:02:5d:b4:a7:47:25:ea:
         cf:17:41:0f:e6:ad:57:86:7c:b9:f9:37:b2:7b:34:22:ad:03:
         ed:26:c5:1d:fb:5d:ee:ea:51:85:4e:e2:3b:15:4e:d1:63:8a:
         ba:d4:91:e2:a7:e8:37:a0:03:87:0e:d7:26:cb:44:fc:86:5b:
         8d:82:ee:83:77:c0:24:93:5a:b3:56:50:06:04:35:8b:36:4c:
         8b:1a:50:de:d8:6f:36:c4:7f:ca:f8:cd:37:4b:d1:84:e8:ce:
         cf:60:2f:f0:e8:84:c3:29:40:4d:42:d3:b3:6e:2b:f4:22:3e:
         83:55:61:4b:46:bc:fc:11:7b:95:87:47:8c:4d:67:43:7c:c9:
         44:27:94:40:31:62:24:01:7e:3e:1a:e2:d0:e7:a1:c1:e7:62:
         81:80:dd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 09:34:51 2026 by rpki-client