Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa
File:                     d86e1d6a-231b-39dc-8464-adea1810b9b4.roa (raw, json)
Hash identifier:          hXvd0eCivbZm41z1KXudNJ5yAOdLdukvxS/U/kK+NrU=
Subject key identifier:   D7:77:3F:99:3B:79:87:0F:03:A1:F7:00:1B:69:B9:81:6B:01:00:E7
Certificate issuer:       /CN=40898705-dca0-471d-ab1b-b12e6e8e7c83
Certificate serial:       010D0C9F4328584EC63C70A845882F79A486D180
Authority key identifier: D4:50:5F:18:28:00:9D:4A:97:41:09:C9:41:47:31:78:ED:C9:48:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     402261
IP address blocks:        23.154.132.0/24 maxlen: 24
                          2620:7f:1450::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:70:a8:45:88:2f:79:a4:86:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40898705-dca0-471d-ab1b-b12e6e8e7c83
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=f9014a74-d7df-4b04-8295-2f066e1b1646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:ad:ba:13:75:b2:0f:55:6e:cc:2f:7a:92:
                    82:25:b5:0a:f5:36:b3:5f:ae:61:29:b3:55:5e:f4:
                    a1:05:88:3a:a4:e8:2f:c7:32:1f:be:31:86:68:be:
                    3b:e0:ca:3c:b9:42:bd:7c:de:5b:6e:51:1e:7e:81:
                    b5:89:8c:aa:cd:a7:ab:14:e9:74:04:7a:ba:20:38:
                    84:02:a8:ce:d8:f3:2d:73:07:a5:31:52:47:1f:dd:
                    b4:7f:e8:82:ff:bc:c7:c3:42:b7:10:5b:48:51:3b:
                    bf:24:75:56:d4:ff:b6:f0:98:18:ff:4d:3c:e2:35:
                    ce:59:ca:5c:e4:8c:bc:2e:2a:a8:73:e5:03:bc:90:
                    78:30:db:ac:ec:d6:f1:df:bb:c1:9e:58:05:b5:7b:
                    fe:5c:b9:c1:64:08:d5:2f:6b:5f:a2:1c:e8:43:02:
                    aa:ef:e8:12:77:e3:41:b8:d8:40:c8:8d:46:cd:c0:
                    4f:23:6f:5d:9c:47:dd:a1:09:8b:d3:f3:9f:e5:8d:
                    4e:20:55:34:d9:c4:6a:e3:cb:85:9f:97:38:ef:04:
                    eb:9e:e1:cc:50:7d:4c:e0:7d:c4:5f:85:14:6e:be:
                    d8:d7:94:19:1b:1b:08:c3:62:49:f8:a8:97:9f:16:
                    f4:97:d3:50:f5:07:3c:6e:45:83:16:8f:fe:d3:b6:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:3F:99:3B:79:87:0F:03:A1:F7:00:1B:69:B9:81:6B:01:00:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.crl

            X509v3 Authority Key Identifier:
                keyid:D4:50:5F:18:28:00:9D:4A:97:41:09:C9:41:47:31:78:ED:C9:48:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.132.0/24
                IPv6:
                  2620:7f:1450::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:0f:c1:a8:27:97:91:a2:7e:92:a7:a6:ee:a5:8b:0b:20:
         71:a5:dc:c7:32:f5:6a:24:e2:ee:de:fd:1e:45:b9:e9:8c:1a:
         91:b3:55:63:df:fb:29:36:32:50:4b:db:13:4a:6b:88:88:c9:
         bd:ec:d7:90:f9:f4:93:9a:f5:b0:26:fb:44:17:39:84:db:38:
         36:0d:15:86:1a:14:6f:c6:bc:f8:18:c7:72:e1:a0:03:e6:83:
         dd:50:8e:3b:5f:dd:5f:c2:3e:c8:80:3a:dc:8d:53:da:14:2d:
         6c:05:63:6c:eb:76:3d:54:db:5c:43:89:3f:3e:64:a2:f4:20:
         f1:ac:5d:d6:fd:3e:78:a2:44:e8:19:4c:1b:79:58:ac:27:43:
         34:81:9b:58:d2:f9:9a:3e:b0:14:1b:39:65:d7:6b:5e:e8:0f:
         75:f7:68:0f:33:0b:1d:f7:31:85:55:42:06:60:06:e7:df:bf:
         a9:bf:25:5a:b8:bd:97:0b:af:9e:8b:0e:af:7b:51:f9:65:1e:
         87:43:dd:46:b0:21:a2:79:1e:29:89:21:a5:8c:15:fe:3f:2c:
         dd:04:e5:09:be:25:c1:b5:b2:b7:1e:ab:27:86:6f:69:5b:d9:
         21:08:6a:94:5f:ec:4c:27:45:e6:10:62:b7:05:3a:35:90:9b:
         22:0d:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:20:46 2026 by rpki-client