Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
File:                     8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa (raw, json)
Hash identifier:          YzAC+TbvikN46IQAm/w2N+FN3X6Cdfcc3BG2dpbvkIo=
Subject key identifier:   FA:35:49:38:ED:7F:72:E1:43:F7:80:CB:9D:CE:BC:91:11:18:2D:25
Certificate issuer:       /CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
Certificate serial:       010D0C9F4328584F067244178FBBD964F3418FE0
Authority key identifier: 2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     20277
IP address blocks:        23.155.40.0/24 maxlen: 24
                          2602:2eb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:44:17:8f:bb:d9:64:f3:41:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=c71c933a-5672-457f-9489-a5c4891752b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:c1:50:8b:f6:c1:63:ba:55:8c:83:c4:f8:
                    dd:4c:19:43:fa:eb:49:bb:89:5d:15:8e:cd:94:3c:
                    85:af:e1:55:36:26:57:97:b0:aa:30:d3:b9:6b:63:
                    7c:18:f7:83:e7:0a:57:da:47:ee:28:2c:20:c7:96:
                    cb:4e:3a:40:00:73:1d:6d:db:ad:b8:cb:0b:2d:f8:
                    9f:5b:cc:cd:5c:3b:11:be:39:96:7f:f0:c7:00:c6:
                    e7:55:00:d3:fd:ba:f8:35:f3:d4:ea:84:5c:48:20:
                    2b:ab:d0:b6:e7:70:3d:6e:76:a6:18:b6:16:eb:ef:
                    47:b0:9b:36:e8:cc:d3:8e:b6:38:3b:9d:cb:b3:8c:
                    83:1b:4f:e7:0e:d8:fe:c0:21:2f:58:68:21:6b:fe:
                    b0:55:a4:a1:75:71:1b:9f:e7:f6:79:fa:2f:2d:20:
                    5c:9e:eb:f1:79:d4:e7:d0:2d:24:51:67:7c:c6:49:
                    74:d1:3d:e8:bc:a6:73:9c:7f:12:f5:82:8c:b8:1d:
                    fe:5f:97:05:fa:7d:70:21:ef:be:32:3a:57:01:f1:
                    be:ce:d7:1e:19:17:91:f9:9e:87:aa:07:68:a5:98:
                    a8:bd:9b:eb:a8:95:f5:95:75:6f:0f:a0:92:45:f2:
                    82:3b:70:e7:74:07:ad:2b:76:17:65:5a:97:29:75:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:49:38:ED:7F:72:E1:43:F7:80:CB:9D:CE:BC:91:11:18:2D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.40.0/24
                IPv6:
                  2602:2eb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:ba:08:07:c3:a1:85:31:19:9d:d3:6d:76:0e:3a:ec:84:
         cf:60:23:79:f4:d9:da:8c:a3:c4:95:d5:f8:5a:4e:46:ac:83:
         0a:59:b4:05:0c:bf:9a:e1:18:a6:de:eb:b0:81:b8:40:fc:bd:
         64:57:ec:15:8f:54:b7:6b:bf:b1:af:bb:35:f9:65:1b:50:5c:
         2b:82:1e:6b:da:14:64:21:ae:fd:aa:cc:5a:75:74:38:1b:94:
         d6:d3:6a:53:fb:15:bb:73:73:ed:a3:51:bc:67:3b:05:61:ab:
         68:43:ca:fe:b3:f5:33:5b:51:18:83:bb:7c:17:d0:11:f4:7c:
         a8:b8:22:62:df:a9:67:bb:ab:9f:28:31:50:26:38:de:ab:7d:
         37:e2:62:1b:a3:39:e8:9f:b9:0f:03:bb:02:40:cb:4c:15:d6:
         24:42:9d:db:1a:0c:18:96:89:f0:d0:3d:b2:cb:fe:44:52:d7:
         13:78:f2:14:34:86:dd:f1:a3:58:33:ae:75:d8:fd:2e:00:38:
         42:0f:19:14:cc:b4:e2:34:8f:15:8a:a2:b6:44:5d:52:5c:23:
         33:76:3c:73:d3:34:cc:e8:5c:e8:1c:22:46:0d:02:30:7a:83:
         6f:c1:d0:65:8f:6f:5d:ac:4b:91:fe:a8:2e:60:0c:36:0c:98:
         34:59:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:57:00 2026 by rpki-client