Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa
File:                     5296663f-6f5c-3a1e-a5be-a48a076b287d.roa (raw, json)
Hash identifier:          mbe2GhiFfJO9kpVW/5l2N7l16UqtE1X61U+KEZ3ui9k=
Subject key identifier:   31:7E:F6:35:C9:6D:53:66:9A:BD:57:B4:C3:C9:BC:A2:C9:39:9C:BF
Certificate issuer:       /CN=57f6f431-f55e-4ae4-9576-b5b27773bfed
Certificate serial:       010D0C9F4328584F498A95345498DC6E214B8C80
Authority key identifier: 4B:9A:DB:F2:1B:A6:83:19:9D:A7:D8:7C:CE:19:6B:28:58:1D:A7:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8095
IP address blocks:        23.180.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:95:34:54:98:dc:6e:21:4b:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f6f431-f55e-4ae4-9576-b5b27773bfed
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1582eb0f-4b4b-4d00-95ae-b2611c558f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ef:eb:37:de:1f:20:ae:61:7a:4e:a7:ea:d9:
                    88:b1:4a:c6:61:1f:9e:b2:ce:8a:ae:08:28:02:bf:
                    50:88:44:62:b3:4d:08:05:80:ae:22:3b:6d:ad:27:
                    db:a4:cc:a7:7b:2b:c8:70:fe:0b:bf:af:b4:8b:0e:
                    99:7a:65:90:30:57:be:54:2a:c4:56:97:9b:32:36:
                    b4:ef:d6:54:00:6a:93:65:5d:ea:af:df:3b:28:cd:
                    6b:a9:15:d6:33:57:07:24:da:17:d9:10:2f:ce:69:
                    23:dd:fd:a7:ce:49:ec:12:8e:5a:2a:d7:25:89:f1:
                    18:ba:c8:18:b2:ab:42:9c:09:f7:f9:f9:45:8f:3c:
                    f0:dc:51:0a:2b:4d:8a:06:98:8c:89:9d:a2:03:a9:
                    3a:b9:48:88:61:ed:3d:a1:32:2e:43:e6:4d:02:89:
                    6a:c7:b7:04:26:e2:27:7a:00:07:02:75:1c:72:4f:
                    79:af:c8:71:99:fd:46:27:8d:c9:c3:81:4e:5c:23:
                    08:51:e4:b4:61:7a:55:16:a7:6c:53:73:ea:df:03:
                    88:6b:61:56:08:61:f2:b8:aa:08:da:93:f6:a5:fe:
                    f9:0d:08:22:a1:9a:20:6f:3d:65:a4:90:4f:85:f2:
                    89:64:53:a8:3d:d2:8b:eb:19:84:98:84:ea:90:12:
                    42:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:F6:35:C9:6D:53:66:9A:BD:57:B4:C3:C9:BC:A2:C9:39:9C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/5296663f-6f5c-3a1e-a5be-a48a076b287d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed/57f6f431-f55e-4ae4-9576-b5b27773bfed.crl

            X509v3 Authority Key Identifier:
                keyid:4B:9A:DB:F2:1B:A6:83:19:9D:A7:D8:7C:CE:19:6B:28:58:1D:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/57f6f431-f55e-4ae4-9576-b5b27773bfed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:12:df:dc:d4:fc:0f:64:54:60:ba:a1:40:3d:29:6f:6d:24:
         71:89:a0:da:a3:c3:c2:27:7b:8e:91:6d:bf:77:4c:68:3f:95:
         93:32:cb:7f:00:69:1c:3d:f7:55:ff:f7:08:b5:0e:82:71:40:
         2e:60:70:aa:2d:94:fd:8f:02:a6:f0:4d:77:60:57:39:75:0e:
         05:18:a1:6b:b5:88:41:a7:2c:5d:62:36:5b:d3:25:20:7f:e9:
         df:f9:19:8d:18:1a:f7:ab:53:2b:e6:24:62:e4:b9:30:7a:2c:
         4c:d0:64:87:40:46:41:a3:2e:39:e0:81:01:dc:e8:57:4e:66:
         a8:6f:72:0e:d8:7e:c1:83:89:99:25:ef:b7:64:f5:36:3b:99:
         60:5e:04:90:05:97:96:a1:57:75:be:a2:44:be:c4:54:2d:62:
         6b:ec:55:1a:f4:22:45:8e:c9:ba:4f:be:55:99:ff:5b:e6:b8:
         2e:7d:c3:42:53:6c:e3:b0:8d:e9:1e:e0:01:34:7a:fe:78:d4:
         a0:48:71:fc:a2:1f:b1:78:14:a7:cf:30:09:70:24:01:de:56:
         28:cd:82:bf:97:85:1f:40:d6:24:04:cb:f8:a0:e3:6e:f3:3a:
         ad:0a:9a:ce:e9:4a:a0:16:98:77:dd:03:8a:30:54:8d:5e:a8:
         a3:6d:2e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:50:16 2026 by rpki-client