Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa
File:                     422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa (raw, json)
Hash identifier:          JAzUgwplnGoJALdLsNysdV7VMi0nk0v/jkXfWU7NHs0=
Subject key identifier:   C8:D5:12:4B:BF:F8:87:53:73:8A:C1:81:6D:D8:09:5C:40:7A:FB:A7
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584EA787143ED9DCCCA72AF0FC40
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400598
IP address blocks:        192.40.40.0/23 maxlen: 24
                          2602:faf9::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:14:3e:d9:dc:cc:a7:2a:f0:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=115ade50-8e75-4df9-bb31-10c2aebe6f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:ea:f5:97:13:11:c3:b6:43:5f:a0:62:a4:
                    1d:8f:d1:03:9a:ef:66:c7:36:a9:92:37:24:ff:74:
                    6e:a4:83:7e:56:b2:18:4a:f6:5f:0c:46:b8:db:d3:
                    21:68:2e:cc:2a:86:70:ed:fd:8d:61:a3:35:95:50:
                    26:6d:97:2e:c2:43:92:a3:80:1f:98:e2:98:6a:d5:
                    7b:71:39:61:8f:51:05:74:00:d8:45:6d:0d:7f:95:
                    e3:d5:d8:d5:bf:cb:f9:c3:fc:cd:28:0b:cc:1a:54:
                    42:3c:80:43:62:85:f6:b6:a5:9c:05:f1:6a:da:02:
                    ba:3a:a2:00:9c:1b:fd:4f:09:64:6d:db:7c:b3:6e:
                    1e:a0:ca:4f:1a:4a:8a:26:b1:73:98:3a:06:cb:02:
                    62:fe:61:56:d6:99:53:50:f9:d3:8c:0d:a9:d7:4d:
                    41:c8:e9:4c:cd:3f:55:88:4a:ab:69:57:6c:f4:7b:
                    c4:e2:67:4f:fb:0e:1b:eb:d7:a8:62:46:82:80:11:
                    04:cc:fb:cf:05:98:12:74:88:09:4f:82:8d:86:e4:
                    5d:ec:cb:97:b6:f9:9c:f0:02:0b:d8:9d:53:54:5c:
                    80:a7:42:a2:ea:a7:08:eb:bd:c1:0d:00:80:6c:f0:
                    ba:91:a1:12:6e:c7:c7:8b:6f:12:c2:2a:36:e9:9a:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D5:12:4B:BF:F8:87:53:73:8A:C1:81:6D:D8:09:5C:40:7A:FB:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.40.0/23
                IPv6:
                  2602:faf9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:6a:26:0f:ff:38:db:3d:41:1e:89:f8:ee:ea:ae:c5:17:
         ab:68:bd:b6:c9:75:f6:a1:cf:f4:b8:75:0d:cc:ef:e5:f5:d0:
         d6:da:57:ed:b1:3a:fd:b6:38:c9:5c:f5:4d:91:cb:89:7d:9e:
         29:83:83:0c:b3:e5:6f:9f:0a:06:7a:6b:25:2a:1c:20:e2:2e:
         f7:0e:b8:a8:1b:a3:d9:ad:6b:94:80:b9:28:1f:2d:80:7f:fb:
         54:08:4c:55:9a:2a:0b:4b:c6:65:f4:8d:e5:8a:10:90:99:37:
         81:c8:bf:fe:7a:7b:e8:d3:e4:c5:2c:ad:90:3a:a8:62:3e:a9:
         b6:dc:1d:af:1b:75:8e:ec:64:08:60:83:7d:d4:46:20:78:f3:
         d7:73:0a:10:97:1c:65:09:71:6d:ce:ff:03:c5:12:d5:77:cd:
         2a:6e:c2:c2:6b:dd:06:22:d8:c8:81:05:08:18:48:3c:55:20:
         39:e6:bb:17:2e:5b:93:d4:d9:fa:13:e4:ca:41:18:c7:f0:5b:
         9a:63:5f:e9:8c:3f:2d:23:f8:49:14:fe:b4:e5:41:7e:88:69:
         ec:a1:c5:f8:c0:6e:be:db:13:ef:8c:b7:c3:99:b5:bd:2d:8f:
         fa:eb:95:47:98:39:bc:aa:99:cc:b0:66:85:77:b6:5a:f7:d0:
         a9:2f:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:06 2026 by rpki-client