Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/57f583dc-beb8-35dd-9ada-8d7d83b09b50.roa
File:                     57f583dc-beb8-35dd-9ada-8d7d83b09b50.roa (raw, json)
Hash identifier:          P7Z23s0Lkz7Q6WA1R1j1/WEsAxfHKR16p8l9kMoThxI=
Subject key identifier:   F4:89:00:78:05:6E:D3:E3:9C:2A:23:35:EE:AC:62:CD:CF:E1:33:3D
Certificate issuer:       /CN=dd639a75-4ad6-4357-bfb1-0a1cbd65f344
Certificate serial:       010D0C9F4328584F0D6CE2CCC17CDCCF09205740
Authority key identifier: 3F:06:CC:18:87:D3:9D:DE:A6:CD:D3:7C:8C:F7:21:5D:C3:21:A5:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/57f583dc-beb8-35dd-9ada-8d7d83b09b50.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     402153
IP address blocks:        23.148.184.0/24 maxlen: 24
                          2602:ff29::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e2:cc:c1:7c:dc:cf:09:20:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd639a75-4ad6-4357-bfb1-0a1cbd65f344
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=98800856-09a8-45a0-aed3-0076813c1bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:4f:04:6d:c7:bd:72:27:bc:a8:1a:cc:aa:
                    13:30:7f:0e:bf:b9:be:a4:37:18:19:14:de:87:d4:
                    47:e9:e0:06:c5:7f:0b:2b:4b:89:c4:0a:4e:1a:f3:
                    14:dc:26:99:fd:d3:4f:89:3c:52:c6:f2:b7:07:7e:
                    8c:0d:8e:25:fa:cf:bb:81:bc:ae:4f:63:d8:f8:e8:
                    85:1f:f3:ed:2e:cd:8a:c1:b1:b9:01:ca:92:b9:ce:
                    3e:dc:2c:b2:2c:2b:5f:15:68:46:2e:48:04:bc:23:
                    cd:dc:bf:da:15:8a:a5:9d:7a:03:a1:f0:94:7e:45:
                    60:8f:be:45:2d:ad:9e:f1:6c:05:e8:de:f5:64:3a:
                    fb:48:50:f7:f2:5a:e2:62:3e:b6:70:fe:cb:f8:17:
                    4b:f1:33:02:c4:a3:50:c2:6d:78:35:e1:cc:2d:de:
                    51:e5:30:70:c5:77:e6:25:4e:95:2c:96:f0:03:62:
                    18:0a:71:c0:63:68:09:35:0a:0c:db:52:09:e4:b8:
                    c2:7a:b0:07:71:a3:69:a3:6f:9a:65:00:d3:59:2f:
                    a2:3e:79:a1:94:5e:53:09:bf:53:92:50:8f:2a:9b:
                    f4:21:19:29:78:6f:63:fa:f1:d7:95:02:e5:04:50:
                    73:00:70:85:b3:01:cf:65:9d:ff:61:a2:84:bc:a8:
                    ed:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:00:78:05:6E:D3:E3:9C:2A:23:35:EE:AC:62:CD:CF:E1:33:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/57f583dc-beb8-35dd-9ada-8d7d83b09b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.crl

            X509v3 Authority Key Identifier:
                keyid:3F:06:CC:18:87:D3:9D:DE:A6:CD:D3:7C:8C:F7:21:5D:C3:21:A5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.184.0/24
                IPv6:
                  2602:ff29::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:4f:5e:25:c2:46:5f:6a:55:9d:3d:cf:fa:5f:4b:5d:0e:
         a3:33:72:a6:4b:8e:c0:f3:f3:0f:ae:b5:33:4d:87:a1:a5:96:
         6c:ba:52:2c:5c:cc:ba:92:6c:5e:07:0e:6c:f5:32:cb:35:08:
         a2:cb:0e:77:fc:b7:73:69:40:60:31:14:02:30:3f:03:d4:6d:
         8e:4e:a8:f0:f7:c1:42:7f:a0:1c:29:f1:7f:6d:9f:13:9f:25:
         dd:71:e1:9d:dd:fd:89:87:ca:f1:2d:fd:a3:bc:50:8b:57:c5:
         e6:e7:fc:23:31:a2:4d:9d:3e:19:29:77:d9:d5:82:3c:a8:a7:
         f9:0e:05:78:a7:20:66:84:5b:81:13:d8:e0:18:b6:99:aa:0a:
         a6:b8:c7:32:04:33:6a:87:4d:9f:97:e7:a1:7c:c7:b6:0f:5d:
         a1:7c:e8:a2:1c:ae:e6:51:33:9b:5b:4d:2d:6a:66:29:58:b2:
         1b:f8:06:1c:4a:1b:32:15:ca:e7:e0:8c:8a:8f:76:6e:8b:9a:
         64:98:e7:2c:95:3d:ed:63:38:e6:f3:e0:c8:9d:99:e7:43:41:
         66:1a:db:c5:40:db:d1:ce:c7:60:6f:05:7b:55:bf:ce:ee:bc:
         ed:3f:de:13:1c:68:64:ca:19:c6:d1:2c:63:98:3e:ea:1d:25:
         9b:24:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:53:25 2026 by rpki-client