Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
File:                     f8553b5d-807d-3297-a922-562a8bd98bc4.roa (raw, json)
Hash identifier:          i8vLkM6FUD0HFMEqfFluRiZhMu6Sx71dwVckUxqFMyE=
Subject key identifier:   34:DC:B4:47:1E:BD:0B:95:BD:95:99:85:66:CB:7B:60:A4:3B:F4:01
Certificate issuer:       /CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
Certificate serial:       010D0C9F4328584C8046D5DDD6B389BED9FAD5A0
Authority key identifier: 0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     54364
IP address blocks:        23.173.240.0/24 maxlen: 24
                          2602:809:c000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:d5:dd:d6:b3:89:be:d9:fa:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=ed8db60e-c3cb-4b49-b189-f06b0c80dede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:31:2f:db:00:58:bb:30:b4:2f:3f:91:6e:
                    b5:7f:2e:a2:3c:ff:c2:f7:98:d4:7a:f5:00:f3:d3:
                    d9:1e:47:2f:81:d0:2c:19:a4:94:72:31:ae:ed:da:
                    b5:97:f5:01:8b:8d:b7:a1:4f:4e:7e:49:90:b7:e9:
                    2d:75:29:f8:03:56:26:50:14:02:2e:89:f1:58:74:
                    7b:18:6d:4e:2e:dc:78:55:ea:8c:aa:4d:bb:46:be:
                    8c:2a:92:e2:ef:bd:67:76:16:01:fb:84:c7:46:3b:
                    1b:c1:c1:d5:9c:04:39:c6:3a:17:e7:ae:e3:d4:11:
                    12:e1:63:f3:38:56:dd:ea:b8:9f:9c:b5:a7:1a:47:
                    e4:fe:b1:40:cb:e3:41:56:b4:be:19:ba:ce:ab:a3:
                    a9:54:a8:23:30:34:e1:15:8c:93:77:f6:36:de:3f:
                    0c:07:56:21:c0:cf:77:09:98:19:d8:71:1b:27:9d:
                    56:8c:e8:c4:bc:1f:a5:85:d2:75:6a:94:3e:3a:ef:
                    f2:fb:5c:a5:8a:94:bd:fa:6c:52:76:3b:85:af:8a:
                    78:c9:a1:3f:9e:d2:d4:7c:f1:08:ac:f8:4a:7d:94:
                    d2:e6:3e:d7:4a:ad:9d:3b:f9:d7:0b:62:0a:fb:28:
                    44:80:43:4c:18:ee:fb:83:cb:8c:b1:62:53:42:04:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:B4:47:1E:BD:0B:95:BD:95:99:85:66:CB:7B:60:A4:3B:F4:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl

            X509v3 Authority Key Identifier:
                keyid:0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.240.0/24
                IPv6:
                  2602:809:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:b9:7e:02:32:16:e0:3c:42:b8:60:b1:23:3c:2a:90:27:
         c9:08:99:77:0b:5d:77:fa:ab:03:96:f9:12:af:cd:60:5d:4a:
         53:fc:0c:a5:be:2a:44:63:34:65:d6:4d:9d:4d:39:3e:6e:f9:
         c5:95:8a:b0:56:f4:d0:8a:2d:9b:99:e7:c5:e2:67:8b:d3:f2:
         08:e1:3c:44:e2:24:0a:8a:27:61:56:f0:19:c4:f5:5c:93:60:
         a3:ed:14:73:54:fe:ee:a4:2a:a1:de:c9:bd:49:21:36:e4:c0:
         fb:f3:f1:92:7f:7a:bb:62:75:28:2c:4e:f9:f7:5f:14:ec:00:
         9f:b8:22:23:41:1c:58:ec:93:e8:38:6b:c5:ce:7a:36:e4:f7:
         13:80:af:1c:bf:2c:ea:5c:23:df:f9:28:31:92:1d:19:d9:2c:
         19:4b:53:c0:e6:d3:b1:9f:e4:1f:8f:0e:1e:26:e8:e9:23:61:
         b4:2c:c7:63:97:1f:1e:05:f1:e6:15:4e:a9:46:0b:55:aa:6a:
         fb:00:bd:90:da:72:8f:72:63:5f:21:79:68:f8:f8:df:7f:ec:
         3b:4a:c6:c7:4b:45:d7:78:46:f4:63:59:10:db:cf:27:15:63:
         fe:ad:27:58:16:25:49:93:bd:04:fa:58:88:e5:32:92:b9:ce:
         da:01:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:17 2026 by rpki-client