Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa
File:                     035ffd39-1a72-349c-a0e6-876140194bdd.roa (raw, json)
Hash identifier:          /ZGeCnpwFcaRtKUtCgdlFF0QCsL2QMQg/U7+UdzjmDE=
Subject key identifier:   37:57:0F:46:5F:C2:D9:85:5D:DD:4A:91:E3:85:A8:1B:03:8B:01:F5
Certificate issuer:       /CN=4acd1d4c-d0c2-4520-9ddb-f466e3339ce3
Certificate serial:       010D0C9F4328584EA7879AAA536040DF478E7140
Authority key identifier: 05:3F:7A:43:24:90:34:BD:18:8A:A2:86:A5:E5:EA:5A:9C:4D:D0:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398915
IP address blocks:        23.172.104.0/24 maxlen: 24
                          2607:7a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9a:aa:53:60:40:df:47:8e:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acd1d4c-d0c2-4520-9ddb-f466e3339ce3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a9a73f38-841e-4218-a188-7bba36a6aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c3:03:16:72:c1:b1:f5:50:27:2b:aa:4c:6b:
                    75:9e:fe:5b:eb:74:93:7f:59:cf:4e:e3:d0:5e:2b:
                    3d:91:30:10:e9:36:59:5e:4c:2e:ac:31:1a:aa:75:
                    4b:f5:06:bb:05:f0:a4:a0:92:a1:e3:30:9c:6d:b9:
                    fa:8f:f6:d9:8e:4e:6f:bf:4b:c8:6d:c1:41:f3:b3:
                    da:87:b1:69:28:ee:ff:bc:80:9e:d2:b9:89:16:dd:
                    60:17:90:fc:64:f2:c7:e0:48:13:3d:54:b9:d7:c9:
                    9d:d3:dd:c9:54:8f:09:ad:53:7c:55:3e:51:7c:a9:
                    31:82:b8:89:0e:bf:93:1d:9f:c0:39:8b:af:b6:7f:
                    35:65:de:03:00:cd:cd:87:db:48:7b:f7:bb:8d:77:
                    71:b8:f9:24:89:c8:e3:aa:88:10:90:9a:8e:ad:38:
                    bc:2f:5e:1c:a1:93:23:6b:c5:f1:21:39:5c:2e:d2:
                    17:28:fc:6e:65:15:68:81:11:22:d4:4e:4f:1e:8b:
                    a6:51:a9:35:86:b8:ee:81:2f:88:ab:15:73:47:88:
                    a9:f7:cd:25:c6:c3:fa:6b:d7:81:8b:b2:c4:30:e2:
                    3a:8b:6d:4a:26:d7:15:21:63:02:70:fb:2c:83:55:
                    9f:11:e1:35:ba:67:8d:4f:ab:9d:33:b6:08:f4:45:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:57:0F:46:5F:C2:D9:85:5D:DD:4A:91:E3:85:A8:1B:03:8B:01:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.crl

            X509v3 Authority Key Identifier:
                keyid:05:3F:7A:43:24:90:34:BD:18:8A:A2:86:A5:E5:EA:5A:9C:4D:D0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.104.0/24
                IPv6:
                  2607:7a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:41:0f:c2:18:01:9e:b1:5d:65:84:6d:37:8a:94:3e:9f:eb:
         a9:d1:67:ef:23:e1:74:5c:4b:c1:08:42:86:4c:a4:46:96:8a:
         a7:82:aa:dc:42:2f:d5:f5:84:1d:78:fc:a6:0b:06:ad:b5:81:
         de:04:0b:9c:44:d7:76:bf:10:5e:aa:ce:7f:df:bd:0f:ad:fd:
         76:5b:2a:f0:e6:e9:ee:7b:d1:3d:bc:a1:3a:6f:cb:ce:96:83:
         33:f5:36:77:6c:c3:af:13:f4:81:8c:42:79:bf:bd:80:5c:01:
         b8:7a:d9:90:c9:0d:5f:3d:ea:cf:74:85:38:4a:91:74:e7:71:
         74:ca:60:92:a4:ff:e1:14:0d:57:2a:25:e9:12:07:4c:22:43:
         fd:b3:79:c9:97:b4:dc:69:a1:57:75:dc:87:57:5a:1a:5f:8d:
         6f:b7:17:e1:51:98:68:11:99:8c:c3:50:68:6a:73:5b:83:18:
         fc:43:80:f7:34:85:72:1d:57:d2:7c:eb:f2:6f:bb:80:9c:a4:
         91:36:ad:40:19:3a:76:0d:2a:29:78:20:85:93:2f:b2:be:4a:
         88:a9:f4:2a:6a:f0:c9:da:44:b8:c4:99:97:78:c9:5d:fb:63:
         33:37:70:6e:ec:aa:c1:01:44:93:c2:f9:17:91:15:c4:f8:39:
         b8:40:5e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:25:23 2026 by rpki-client