Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/105656ac-b385-343c-8f88-fe05eea21f6f.roa
File:                     105656ac-b385-343c-8f88-fe05eea21f6f.roa (raw, json)
Hash identifier:          DbAhmCKfixzjNpLxWiAApsmw4oH2gSnnuGyT9i5T43o=
Subject key identifier:   60:BD:B9:BD:42:F0:0A:F7:09:D8:E5:E7:4E:53:58:96:D4:9A:4E:1A
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584D5E1A684B1EA025FD6BDCE860
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/105656ac-b385-343c-8f88-fe05eea21f6f.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     61400
IP address blocks:        23.140.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:68:4b:1e:a0:25:fd:6b:dc:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=4696bdd4-f95d-457b-a0d8-ee4918437097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:79:86:04:a2:68:61:1e:0b:5b:d2:a5:a0:12:
                    b1:e9:02:dd:48:cd:fc:7f:8b:8b:af:3a:3f:ca:77:
                    00:b6:ff:ff:fa:bc:b5:4e:a3:0e:bc:84:88:e4:38:
                    ca:f7:05:e3:19:2d:36:46:aa:7f:58:5f:ea:0d:e2:
                    8f:fe:5c:39:da:83:3d:45:03:94:75:2b:fd:eb:8c:
                    5d:38:e8:f7:e3:c1:fe:d8:f0:8d:6a:68:81:aa:22:
                    3b:e8:10:48:f0:ee:90:24:53:14:da:3b:e9:bc:3d:
                    ee:15:af:a1:84:de:de:8b:84:fe:87:52:f0:f1:70:
                    1a:60:d2:e8:d5:15:d2:05:76:09:53:6c:33:c9:a7:
                    9a:da:cd:39:41:26:c8:1a:cf:c7:e6:72:cf:4b:fa:
                    7c:a0:7e:a0:fa:79:05:05:50:3a:6b:5b:6b:f0:89:
                    00:f0:1f:23:70:d7:88:30:e5:40:b9:53:4f:6d:26:
                    d1:82:a4:99:d0:6a:af:3c:3f:19:09:1e:70:5d:7a:
                    ad:33:73:71:85:0e:64:e6:c2:f9:d5:08:48:d6:36:
                    54:b9:a0:90:db:14:d3:fb:ce:58:02:55:0f:e4:b5:
                    49:5e:f2:46:c3:0c:a0:25:83:be:d0:b6:f0:64:b6:
                    2e:ec:06:0f:81:1a:09:1d:a0:b4:62:39:24:e6:e7:
                    a0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:B9:BD:42:F0:0A:F7:09:D8:E5:E7:4E:53:58:96:D4:9A:4E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/105656ac-b385-343c-8f88-fe05eea21f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4c:0d:e5:0d:fe:b1:30:48:d8:ed:20:16:7f:6d:1c:f5:ac:
         5e:4f:63:e2:19:50:9d:c4:ef:ae:6e:ef:d2:36:a2:b7:bf:d7:
         99:3c:b8:f8:28:b3:12:82:73:15:db:0e:a8:ff:85:73:12:8d:
         b6:05:69:25:59:66:4d:f4:dc:d8:16:d4:6c:bc:40:44:e1:91:
         bd:58:22:f2:40:ce:e5:b2:1b:aa:a5:b7:f8:e9:8a:3a:9c:ca:
         9b:95:ee:87:b5:c9:a8:b8:a2:29:b6:5c:d7:b8:75:47:01:fb:
         6e:ae:88:3b:e8:9d:4e:6c:b8:e4:d0:98:18:68:ae:eb:12:fb:
         89:15:e7:3c:22:fa:de:e9:87:43:85:53:f5:bf:12:77:f1:b9:
         3e:a5:3a:13:1e:18:98:e1:23:7e:54:94:e0:4a:e9:5d:22:88:
         1c:ba:08:94:d7:8b:57:97:20:dc:e1:bc:56:89:13:9a:53:d7:
         39:fb:98:1a:a3:b8:e8:e4:7b:5f:4f:c2:03:6c:0f:c4:a9:81:
         c4:d4:07:02:84:6f:7e:d3:c4:0e:a9:4b:cc:4a:e4:63:7d:44:
         c3:53:0d:25:e0:9b:04:de:d2:23:cc:ad:03:8d:83:13:bf:44:
         73:bc:e5:60:d5:44:da:c4:f4:15:08:57:f0:53:b8:37:2d:76:
         ba:99:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:19 2026 by rpki-client