Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa
File:                     77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa (raw, json)
Hash identifier:          J8PROOYo9KYFMD0J7x8y7p32XkUolE5tmdKwJhv4ky4=
Subject key identifier:   D6:D8:95:0F:C7:9C:A4:3B:39:F2:69:B9:FD:84:94:97:38:FA:4A:B4
Certificate issuer:       /CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Certificate serial:       010D0C9F4328584F4973A5F035F11497E7697D10
Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395231
IP address blocks:        23.143.8.0/24 maxlen: 24
                          2602:27c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a5:f0:35:f1:14:97:e7:69:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a51e50ee-6882-4d64-bd11-fd20b505046b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:87:6d:7c:cc:64:54:fb:b9:0e:a3:67:14:
                    20:84:c7:af:51:34:ef:fc:42:66:7d:fc:fa:ef:9b:
                    14:7e:dc:1f:6e:3b:62:40:ea:53:70:71:71:ea:c1:
                    ec:cb:ee:e4:e2:a1:8c:8a:55:d7:f5:79:34:64:f0:
                    0c:2d:45:c2:d2:55:7f:ec:18:2b:0f:11:be:27:6c:
                    12:f5:39:77:ee:52:d1:e3:6f:18:16:df:2b:d6:1f:
                    d3:97:29:a3:bb:4b:55:69:bb:3f:61:b3:c0:33:15:
                    63:42:92:c6:df:bc:af:c8:39:5c:c2:08:da:da:29:
                    11:a1:4e:5b:d1:f6:93:db:e1:10:78:5e:cc:d2:69:
                    08:ca:12:05:f3:ec:ab:ce:d3:6b:a8:6d:b5:0e:0d:
                    81:c1:de:67:57:22:53:e3:1c:9a:2f:8d:5d:48:51:
                    f8:3b:77:5f:98:0f:fc:79:8a:68:b7:d7:86:21:69:
                    e4:99:83:85:63:43:5c:ce:f6:23:84:c1:c1:84:df:
                    ad:70:ca:80:4d:fd:ac:24:cf:50:35:b8:22:47:1d:
                    33:4d:a3:f1:20:1b:4d:7b:35:db:e0:6e:17:a6:72:
                    78:99:66:08:94:07:61:aa:53:20:6e:e4:1b:4c:6f:
                    f4:42:ae:60:8e:19:0a:5f:7b:15:b6:56:6d:16:8b:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:95:0F:C7:9C:A4:3B:39:F2:69:B9:FD:84:94:97:38:FA:4A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl

            X509v3 Authority Key Identifier:
                keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.8.0/24
                IPv6:
                  2602:27c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:11:9f:0d:7f:1b:30:5e:a7:8d:49:47:69:79:98:46:f8:ac:
         e5:7a:1b:a4:1e:9d:14:bb:82:cd:96:12:4a:49:3b:f9:7f:fe:
         72:ff:c8:59:de:b6:c1:59:f5:ed:b9:81:6b:26:9d:d7:7e:3e:
         75:f8:f5:df:82:3c:3c:10:9f:72:27:73:05:06:69:16:1e:5c:
         e1:9e:ff:4b:b9:cf:f1:ab:a3:4f:9d:37:ba:4f:bb:db:65:0a:
         5a:bb:ca:37:98:1e:4e:74:5b:9b:c2:c1:7b:29:f8:b8:a1:34:
         a8:81:34:6b:00:50:3c:ef:26:0f:d9:ab:3e:f7:e6:20:5b:0c:
         b2:bf:f7:84:5e:00:fa:ef:02:06:fb:61:cc:11:aa:9f:f9:10:
         54:5d:1f:b0:95:22:28:28:7e:b3:de:5d:9a:94:f9:6d:8d:b2:
         22:8b:14:2b:09:8d:b5:9e:bf:5a:2c:bf:8b:63:c1:f4:fe:2e:
         02:b0:ce:f0:64:b9:d0:39:76:2d:ec:11:f1:4a:75:15:83:50:
         74:7c:8f:96:57:72:a3:9b:68:ee:9c:83:15:5f:3a:e6:d1:80:
         56:8b:9a:cf:b0:37:b0:93:93:94:7e:3f:8c:8b:cf:3b:6a:97:
         c4:6e:58:d9:02:3b:40:f4:51:59:95:c9:4a:d8:d7:57:93:83:
         48:af:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:52:28 2026 by rpki-client