Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
File:                     52166749-1228-3cb2-be42-612a2e17d6bc.roa (raw, json)
Hash identifier:          TH6uXU5EUpV1G1YcglSvbHkjJlxKC0SB8Ghlb4PxzUY=
Subject key identifier:   96:AA:5E:CA:A7:01:32:E0:B9:8D:ED:A0:54:D0:65:02:9F:F8:14:FA
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584CC07C98AAFB3A39A588077340
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     401009
IP address blocks:        23.177.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:98:aa:fb:3a:39:a5:88:07:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=01030bd6-78fd-458c-9e7f-86e0b3def4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:64:f4:91:68:f1:12:d6:a7:8b:bf:b8:c0:
                    12:93:82:37:e8:f7:3e:b1:22:e7:82:5a:25:52:4f:
                    0a:9f:ee:88:65:28:d4:48:3d:e2:a9:97:5b:f6:d9:
                    0f:4d:37:27:be:91:32:de:ec:ff:45:c4:c9:9f:39:
                    be:07:2c:44:71:1c:9b:b1:c6:45:c9:fb:7f:e6:e9:
                    76:bd:66:e9:c9:5a:11:ab:c4:16:00:56:1b:3e:e9:
                    47:c2:36:4f:50:c8:68:09:1e:ed:38:ab:8e:72:17:
                    a9:5b:65:76:27:54:a1:0c:00:8e:a5:2f:3c:87:ec:
                    d1:0d:01:f9:ad:7b:e5:04:0c:fb:ba:2a:c5:ab:64:
                    1e:5f:16:e4:16:33:7e:a1:5d:cb:67:b7:f2:53:cb:
                    9a:63:57:38:c2:09:3a:05:6c:21:cc:72:6c:32:b0:
                    cc:2b:04:85:54:ae:00:82:21:f8:5f:48:42:d7:2a:
                    51:9c:c0:33:89:2f:39:11:3d:49:7c:3f:c1:36:45:
                    24:d3:8e:4d:dc:e9:b6:52:23:85:9f:63:d6:22:62:
                    d6:79:20:d5:60:b4:b7:c7:2e:da:da:b8:86:db:69:
                    69:0e:7e:3a:e8:6c:9a:1d:fe:5d:39:87:94:42:2f:
                    d4:b6:1b:cf:81:6d:36:bd:4d:8d:06:f4:84:57:df:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AA:5E:CA:A7:01:32:E0:B9:8D:ED:A0:54:D0:65:02:9F:F8:14:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0a:0e:92:c7:97:c8:e3:6c:1e:e8:33:bd:8a:29:be:6e:09:
         bc:b2:22:52:4e:41:c7:00:1b:b2:e2:06:61:cc:77:58:10:1d:
         35:27:0a:35:23:91:b5:9e:27:0b:d9:fc:cf:08:e8:da:b4:80:
         2d:e3:c4:6a:7c:7f:dd:81:e5:8a:de:ba:ff:70:61:79:59:5c:
         1b:54:9c:03:8a:e1:55:49:7f:dc:95:0b:e2:d2:58:1c:91:eb:
         0c:95:29:1c:55:3a:ba:54:b4:0e:13:7b:2e:03:fc:15:ea:3d:
         7c:b1:82:f6:6e:a0:ff:db:e0:48:5e:b3:48:77:c5:7c:f3:9e:
         78:5e:00:f5:1a:d8:d8:bf:c2:3c:32:0a:74:61:77:dd:43:eb:
         22:b4:1a:7a:4f:08:ba:44:81:3b:6c:47:19:4a:09:e4:46:4e:
         42:9e:38:b1:05:0a:75:8d:53:0e:ff:15:24:4e:03:14:2d:b0:
         48:fc:e1:81:97:3c:9a:e0:2c:ee:f0:9c:d2:58:b3:07:b9:c3:
         cc:23:37:e3:00:7a:65:04:ab:79:39:ff:21:cc:38:54:c6:d0:
         bb:9a:ce:78:e4:33:3c:e2:2e:c3:03:f8:37:44:4c:07:90:fc:
         21:54:49:c9:8b:41:1b:74:c8:1c:34:c5:cf:10:62:d3:1c:ec:
         73:a0:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:07 2026 by rpki-client