Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/465e999e-2b29-35f3-8f0a-47717743a5d2.roa
File:                     465e999e-2b29-35f3-8f0a-47717743a5d2.roa (raw, json)
Hash identifier:          GcJoP/rUN/N+9Q8K7OFEQQQdGGTZfpslZ5yoGrR1aNU=
Subject key identifier:   53:0C:24:A3:92:98:A3:DE:46:4B:94:F5:20:84:B4:AE:00:94:89:47
Certificate issuer:       /CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
Certificate serial:       010D0C9F4328584F1B624D008BAC9F690D247D00
Authority key identifier: 0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/465e999e-2b29-35f3-8f0a-47717743a5d2.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     16870
IP address blocks:        23.173.240.0/24 maxlen: 24
                          2602:809:c000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:4d:00:8b:ac:9f:69:0d:24:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=885f5f11-b9e6-4a1b-8e29-8fc1c679b704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:73:de:14:81:c2:19:8d:14:9b:ed:0c:c4:
                    65:23:6c:b6:b6:9b:32:6b:21:85:7f:15:52:6e:9e:
                    6a:7f:69:b6:71:9f:1a:8d:77:43:f5:d9:a7:36:42:
                    66:68:78:4d:db:27:83:a1:9f:0d:87:c3:88:6b:1d:
                    59:4d:6e:9d:64:44:df:41:ed:3f:b5:6a:6c:8d:2e:
                    a7:7e:d0:ff:e4:80:35:62:9a:9b:de:eb:29:c9:60:
                    f4:73:94:46:96:ce:e9:73:49:2f:fb:05:45:12:c0:
                    44:14:4a:39:1c:01:94:3b:ff:7e:35:bc:cb:13:56:
                    eb:f5:0c:ca:87:63:31:a2:a8:cc:f8:ae:c6:43:a1:
                    6a:09:86:38:24:3b:96:f3:0b:34:83:a4:a0:f9:f3:
                    d1:7d:8b:5f:9b:35:c5:e2:ff:f9:0f:34:91:38:a9:
                    3d:17:ea:56:88:b9:25:c9:71:27:8f:b4:2e:02:96:
                    c3:dc:5e:c0:2c:96:03:40:00:d8:52:b0:ac:b2:86:
                    63:b6:57:bd:6a:f5:41:e0:b9:52:25:69:6f:dc:82:
                    db:57:b1:ed:9a:47:3e:13:56:e3:ae:24:94:88:71:
                    69:a5:28:fc:26:09:fa:31:6e:d0:26:b8:f2:29:01:
                    7e:35:5e:0d:e6:93:2a:2d:b8:78:64:32:d5:54:56:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0C:24:A3:92:98:A3:DE:46:4B:94:F5:20:84:B4:AE:00:94:89:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/465e999e-2b29-35f3-8f0a-47717743a5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl

            X509v3 Authority Key Identifier:
                keyid:0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.240.0/24
                IPv6:
                  2602:809:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:31:24:07:7d:1c:44:f9:89:60:cf:b1:a7:b1:24:5d:5f:
         9c:22:e0:e0:a8:15:8c:72:26:ff:b6:2a:dc:ce:73:05:c6:39:
         8b:48:95:c8:5f:af:33:d3:01:fd:99:b5:2c:4f:f2:85:3f:b8:
         5e:7e:31:c5:e3:a3:32:ce:54:00:45:34:27:e1:31:af:f4:c0:
         6c:27:c0:b9:b8:ae:fc:69:1d:a1:06:17:25:98:ef:ae:1e:4b:
         41:56:b4:90:ed:51:67:d5:60:0a:89:1d:91:09:22:99:2d:d2:
         fc:c3:a1:24:5d:e5:20:17:09:d5:d6:77:77:2c:f1:85:fb:f0:
         e9:9d:4b:54:6f:32:b4:fa:25:26:d4:5f:ac:91:07:87:29:01:
         b8:55:f3:2d:25:90:d6:e9:76:5c:5f:e5:81:e8:0d:98:05:44:
         94:0f:d0:75:ad:fb:46:cb:a5:24:30:14:b6:e6:d8:ac:1b:8a:
         37:11:2f:7d:ff:78:fa:25:cd:43:5b:6b:00:78:11:2d:4b:0e:
         60:d8:c7:2c:b8:2d:a7:0f:a7:75:57:ee:65:ea:5f:26:f9:93:
         20:61:67:2e:09:90:df:b0:bb:29:32:b8:90:d6:b1:00:2b:4c:
         0c:43:73:0a:01:65:0e:07:26:60:64:e3:bd:f0:d6:38:84:65:
         b7:24:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:59:26 2026 by rpki-client