Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/eaad386d-7466-3768-96e8-379ff1ebbcb4.roa
File:                     eaad386d-7466-3768-96e8-379ff1ebbcb4.roa (raw, json)
Hash identifier:          tK/sQ60qIf06Ufzmm8Fn+efMfGlJwUVSzI9oD2KnVow=
Subject key identifier:   4C:BA:31:7B:C8:92:EC:23:B5:E0:93:0B:E4:93:CD:80:B7:D4:F8:D2
Certificate issuer:       /CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
Certificate serial:       010D0C9F4328584EA7989A8841D4588EFC765600
Authority key identifier: C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/eaad386d-7466-3768-96e8-379ff1ebbcb4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40448
IP address blocks:        23.138.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:9a:88:41:d4:58:8e:fc:76:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=42f003c9-50a9-4a01-9681-789f60b7937f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:e1:8b:e2:b1:39:b6:05:19:cf:11:34:87:
                    08:47:64:eb:f7:5c:88:3b:62:c2:db:d1:70:0c:58:
                    fb:9f:cf:fc:f3:15:c8:f2:b9:c4:18:37:19:3a:6d:
                    a3:3f:61:54:7f:25:16:bf:f7:b8:7e:26:0b:e9:5b:
                    97:ed:eb:f3:7d:9b:0a:a5:1f:08:f8:ca:f5:1c:25:
                    7e:bc:b0:da:cb:bf:3a:dc:21:f6:0d:89:42:ce:49:
                    1a:3a:79:e6:12:4c:57:45:0e:48:95:5b:5f:32:69:
                    1e:88:8f:b8:d9:26:78:d3:8a:60:53:a0:06:7f:72:
                    d3:8d:4b:27:96:72:22:bb:44:69:94:14:3e:b1:3c:
                    40:02:34:e6:44:fd:84:0a:14:45:48:b1:3f:d3:17:
                    c0:97:16:2a:9a:5b:5f:02:97:f2:87:bf:a6:83:cb:
                    99:bc:95:f1:3f:7a:53:d5:b9:ed:f9:92:95:9c:91:
                    db:76:ca:37:fb:79:56:1e:df:fe:6b:12:4f:f5:43:
                    da:b8:79:52:79:8f:47:3f:a9:40:be:ae:5a:9a:31:
                    44:7d:80:a0:dc:6f:f0:f6:2e:c6:5b:1b:1b:e1:5e:
                    88:ee:39:af:f1:e7:0d:4e:6d:c0:4b:0f:0a:29:67:
                    33:c6:2b:2b:ec:7a:99:08:0d:6a:0d:97:b6:9f:10:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BA:31:7B:C8:92:EC:23:B5:E0:93:0B:E4:93:CD:80:B7:D4:F8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/eaad386d-7466-3768-96e8-379ff1ebbcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl

            X509v3 Authority Key Identifier:
                keyid:C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:29:10:78:10:ee:54:4b:23:01:c5:eb:44:81:b0:f1:b8:24:
         d4:f0:c7:04:47:03:d7:42:56:ef:de:34:8b:68:ce:09:b6:5f:
         48:67:3e:7d:24:1a:2c:e1:79:f2:62:7a:61:e7:21:bc:84:f0:
         26:7d:1c:0f:94:f3:46:93:e5:10:e0:3b:66:53:e2:26:2f:b7:
         de:ee:43:92:0f:3c:ef:38:8f:03:8f:cc:0c:a5:9d:a1:3d:5e:
         cb:52:9d:49:dd:ed:7e:a2:79:3f:60:3a:04:a2:87:84:76:c1:
         f7:61:1d:02:53:c8:11:f8:1d:bb:64:e2:b6:de:d4:96:f5:58:
         31:42:1d:ae:af:01:62:a3:15:ac:46:c4:90:29:9f:97:80:d7:
         f2:88:36:f0:dc:88:12:22:c1:93:3c:78:e1:13:66:7b:0b:6e:
         0e:5e:b4:c0:5f:6b:89:64:d5:51:fd:17:62:f0:c2:ab:b1:95:
         f5:ba:f8:2c:6f:53:b2:06:ac:26:6e:a9:5f:4a:31:09:69:4a:
         b9:1b:c6:40:b7:aa:d9:f6:c0:53:a6:00:54:43:fb:a0:ff:cf:
         54:cd:8e:8f:15:e6:10:49:76:78:b9:49:21:cd:26:6c:b1:ba:
         45:f1:f1:0d:0c:0e:b2:92:2d:c6:9f:12:26:f7:ae:96:e3:f1:
         e4:ae:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:45 2026 by rpki-client