Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa
File:                     7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa (raw, json)
Hash identifier:          h9+92Qvhr64rHN28P4q099SmiBrRCDm8SnVLkUsdntE=
Subject key identifier:   1B:A3:6C:6E:F0:4D:33:5A:68:D3:23:8B:9D:31:C5:CA:67:67:43:A6
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584F4973A503E6B3E22F87CFF700
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33442
IP address blocks:        149.23.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a5:03:e6:b3:e2:2f:87:cf:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6a57387a-2d30-4943-9f65-96ad61adef94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:4d:bb:a1:d3:33:cb:1e:02:aa:65:17:a8:
                    59:9a:15:83:eb:2b:1c:9f:0c:65:8a:9d:4e:ea:b6:
                    b4:f9:92:07:2e:5c:c1:04:8d:05:6b:d4:f8:92:10:
                    5c:37:b4:26:22:f8:a4:1a:91:ca:8d:fb:3a:7c:90:
                    c2:ed:33:4a:38:c5:48:72:81:3f:ce:fa:4c:a3:93:
                    ec:35:53:a4:7f:b4:a3:60:8c:ad:93:0d:6e:65:d7:
                    b8:35:80:cc:7f:45:f6:cb:55:0c:cd:59:fb:57:bd:
                    90:9f:cc:9a:59:33:af:e6:fe:1a:cf:59:36:ac:60:
                    92:62:fb:04:39:d9:f8:4d:4b:59:b7:16:49:20:d6:
                    c2:70:b4:3c:81:6a:68:19:a7:de:eb:59:44:13:bb:
                    b6:a9:82:99:68:62:d0:a3:2a:d0:7b:66:df:39:e9:
                    1d:61:c4:82:e0:14:cb:9d:ad:2e:4d:ba:0e:a4:2c:
                    29:4a:da:d9:8e:68:0e:b8:82:d3:1c:56:9e:ae:22:
                    d9:e8:7c:7c:71:bf:44:f3:e5:33:fe:b9:72:a3:71:
                    a2:b3:f3:4e:d6:e2:47:02:07:d4:97:f3:c4:0d:bc:
                    e2:39:ed:18:dd:7b:ce:2a:b9:51:4f:06:9b:8c:bf:
                    f8:ed:dc:09:5e:a9:55:56:4d:b8:4a:de:98:35:6d:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:6C:6E:F0:4D:33:5A:68:D3:23:8B:9D:31:C5:CA:67:67:43:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:30:d9:30:5d:17:3e:24:21:e6:9c:46:47:ed:31:9b:69:f2:
         ec:df:c0:ba:53:37:92:13:a0:da:04:d6:27:b9:48:28:fa:2b:
         c4:f0:35:4b:8b:a5:15:34:d7:9d:5d:e2:1d:45:5d:cd:54:84:
         ef:f1:49:83:94:50:83:14:34:fb:5f:8d:af:41:e6:ec:dd:4e:
         2e:e5:04:36:06:55:2c:db:8e:26:c7:ba:05:03:5b:d8:fd:34:
         d4:0d:37:9d:26:ec:b7:80:7c:98:f7:18:be:a0:3d:f4:4c:c6:
         04:60:de:50:b4:ce:bb:61:31:ae:71:1d:c8:a3:4a:0f:e5:46:
         ea:d2:19:14:76:0f:cf:b4:d9:21:db:0a:7e:4b:00:d3:00:fd:
         7f:9e:18:43:6f:29:0a:65:01:ff:55:21:78:33:26:c4:7c:db:
         07:b9:c1:87:c6:f8:a1:1f:29:8a:af:35:74:0d:82:ac:cf:71:
         f1:b0:2a:93:20:d2:9a:f6:38:35:50:bd:94:ea:3d:c2:52:ee:
         b6:9a:6c:48:e6:8a:cd:c2:48:2f:b7:ef:63:71:0b:0b:0b:4b:
         a4:3d:8d:cb:bc:ac:f4:2a:f4:64:2a:83:29:8c:59:2a:f7:d2:
         d9:a1:f9:d9:90:de:71:28:86:c2:40:cc:f2:31:60:94:a1:c5:
         88:eb:e3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:22:11 2026 by rpki-client