Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
File:                     f30842c9-2946-3389-a971-2942db75d63c.roa (raw, json)
Hash identifier:          ptm91wEholLfh1a4WWC5sIlWxIdjHQNxDOrk4oBpeoA=
Subject key identifier:   5F:42:2C:E5:9D:84:00:29:5A:B1:8A:B1:85:B6:A2:D9:46:0A:F0:26
Certificate issuer:       /CN=7bb7623d-5096-425c-aeab-03e71deea5ce
Certificate serial:       010D0C9F4328584CAE572D0BE3F76426C9222A40
Authority key identifier: 40:0E:60:E1:4F:A2:B4:E1:27:1A:80:DE:C7:EC:3E:8B:DA:C1:77:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     46705
IP address blocks:        23.171.40.0/24 maxlen: 24
                          2607:88c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/7bb7623d-5096-425c-aeab-03e71deea5ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/7bb7623d-5096-425c-aeab-03e71deea5ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:2d:0b:e3:f7:64:26:c9:22:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb7623d-5096-425c-aeab-03e71deea5ce
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=1be591cc-0187-4a34-a5ab-b04950a99f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:63:29:ec:9f:bf:87:ff:d6:f8:8d:e0:a8:
                    f0:ca:7b:61:99:6d:cb:61:a2:66:0a:27:be:3f:da:
                    9b:32:61:4e:72:f7:52:2d:c6:e9:52:d9:c9:cc:23:
                    ec:53:e2:d7:40:c7:80:52:b3:0d:3a:d1:dd:e1:75:
                    b1:19:56:2e:64:9c:0a:79:15:9d:f5:4a:6d:52:ce:
                    78:6f:d8:4a:ff:08:44:8d:81:f7:1c:64:c9:0b:1c:
                    71:62:69:4e:11:de:fb:c6:46:bb:18:d9:cf:e3:35:
                    43:8f:ab:dc:f2:99:9e:f5:eb:bb:02:8d:90:b4:be:
                    07:71:c3:c0:b0:bd:37:01:d3:fe:8d:4d:b5:58:ba:
                    ff:4f:5a:cf:eb:8e:d6:cb:cf:21:e1:78:91:a4:bb:
                    f6:cc:e1:2a:01:78:95:5b:64:4e:d0:f5:c1:7a:05:
                    a4:55:a1:4a:b8:8a:89:fa:c9:c8:6f:c7:c9:7d:95:
                    3c:09:89:c1:d1:82:37:7a:06:a3:a0:78:93:fa:98:
                    1b:c5:b4:36:ec:5f:8d:7d:00:17:1e:61:b9:9b:c0:
                    39:87:82:22:8c:5e:b7:79:87:d1:cc:fb:16:e9:26:
                    33:f9:a2:7b:ae:d2:0c:2b:b1:ff:a4:8a:f3:99:9c:
                    59:d9:89:33:c5:3d:e3:15:ca:07:43:09:62:5b:ea:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:42:2C:E5:9D:84:00:29:5A:B1:8A:B1:85:B6:A2:D9:46:0A:F0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/7bb7623d-5096-425c-aeab-03e71deea5ce.crl

            X509v3 Authority Key Identifier:
                keyid:40:0E:60:E1:4F:A2:B4:E1:27:1A:80:DE:C7:EC:3E:8B:DA:C1:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.40.0/24
                IPv6:
                  2607:88c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ca:28:b9:c9:0b:af:94:2e:20:71:25:15:65:57:16:c4:51:
         e2:47:17:b7:20:55:76:9a:b7:4b:a6:6f:4b:53:37:ba:36:a5:
         62:15:97:6e:8b:ac:6a:a4:b8:58:39:d2:02:10:29:26:63:08:
         ce:3a:9d:b9:d4:19:c5:f9:9f:48:53:cf:62:f4:3f:2e:ef:49:
         5c:d4:2f:2d:ef:ba:6a:95:15:56:c5:28:85:e9:e9:c5:c2:b2:
         d3:59:df:ec:2e:d8:a5:d8:78:51:72:6c:6d:8c:cf:ed:bf:64:
         2d:46:2a:2a:7f:8e:36:f5:3f:33:ad:3a:00:c0:24:d4:70:ef:
         27:d5:7d:af:19:0a:fd:6c:e6:28:70:ee:af:64:f0:a1:d7:a5:
         cb:a1:6d:d3:5f:e4:45:7b:4c:73:87:a0:05:cd:0a:92:ef:69:
         89:06:a3:34:76:0f:9d:06:57:db:56:39:14:37:8b:77:d3:46:
         6c:a4:44:2a:0a:2d:de:46:77:f0:5d:2f:58:39:98:15:78:f0:
         a4:93:2e:ab:da:69:05:c5:88:c6:8d:3d:2a:f4:9c:a2:89:f1:
         1a:63:5b:b9:a8:ad:6f:20:1e:fc:7f:7a:a6:45:70:ce:7d:b3:
         a2:52:e3:9b:ab:be:93:d5:b1:41:ed:5a:1c:38:9a:b7:80:3c:
         da:ec:0a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:07 2026 by rpki-client