Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/8d85be77-01e6-3c74-ac4c-136266925642.roa
File:                     8d85be77-01e6-3c74-ac4c-136266925642.roa (raw, json)
Hash identifier:          BDBeMaqDSMqPs/BkXbsMcZ4KizTNsjDOXQZ8I4LikT8=
Subject key identifier:   C3:F4:07:0E:AC:48:57:9E:A4:C5:AF:66:DD:7B:AC:D9:8E:5F:28:98
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584D48ED693314ABE0087A1B9F00
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/8d85be77-01e6-3c74-ac4c-136266925642.roa
Signing time:             Tue 17 Mar 2026 17:12:56 +0000
ROA not before:           Tue 17 Mar 2026 17:12:56 +0000
ROA not after:            Mon 15 Jun 2026 17:12:56 +0000
asID:                     396982
IP address blocks:        57.140.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:48:ed:69:33:14:ab:e0:08:7a:1b:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Mar 17 17:12:56 2026 GMT
            Not After : Jun 15 17:12:56 2026 GMT
        Subject: CN=deb74cd3-7f26-4aac-b9a2-3d0425612872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:e9:08:be:0b:e4:59:8a:af:c5:60:2a:c4:
                    08:0c:ef:6a:be:d8:d2:ea:12:ce:6e:06:49:30:14:
                    e9:df:1b:e5:ce:6e:c3:c2:60:7a:43:5d:85:af:02:
                    06:9c:e1:5f:f8:d5:22:51:b5:eb:74:cc:db:d7:65:
                    7b:b7:03:09:ef:56:ec:b0:70:d7:1a:b4:cd:c0:15:
                    ab:a7:82:3c:38:5b:d3:de:3c:e9:f3:cc:62:6a:62:
                    d2:7e:09:59:5d:f9:e6:31:85:d3:21:f2:65:ac:fa:
                    93:08:bf:1d:4f:9d:7b:e4:41:69:6e:2b:4d:86:07:
                    2f:4e:b9:2d:5d:78:ba:48:84:ef:cc:65:68:1f:1c:
                    a8:a7:30:de:da:12:b9:0c:7d:26:9b:23:e3:a4:cc:
                    ad:ef:32:87:2f:a8:d7:92:7e:8e:3d:60:0d:a5:f8:
                    1a:a0:e0:dc:1a:e8:ad:de:da:59:41:1e:7e:ef:8b:
                    b9:c6:a8:69:db:f1:7d:5d:96:34:ee:88:75:f7:1a:
                    62:d8:c3:96:33:94:98:26:45:e9:3e:be:30:04:90:
                    cd:33:79:13:44:d7:cb:84:58:64:9b:90:cc:22:e0:
                    0e:c4:6e:ea:4c:54:35:1f:4e:24:05:96:d9:13:45:
                    70:d4:34:43:cd:d1:b2:ec:1e:20:f7:07:38:f8:6d:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F4:07:0E:AC:48:57:9E:A4:C5:AF:66:DD:7B:AC:D9:8E:5F:28:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/8d85be77-01e6-3c74-ac4c-136266925642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:ee:d6:f6:e6:12:65:1e:a1:a0:35:b6:34:80:aa:fe:ae:
         94:6d:d8:0f:f2:67:6a:82:95:85:27:d8:cc:93:9c:db:d7:e5:
         9b:c0:1c:df:4b:19:9c:05:4f:67:4a:66:13:b3:d9:45:b5:d5:
         7d:ee:20:03:3b:fb:a9:28:98:9f:6d:02:95:a4:14:9b:9b:db:
         fb:4e:30:9e:8e:d5:d7:48:50:55:5e:ef:d9:f8:03:d4:1c:ac:
         03:a1:5b:66:39:ae:7c:26:1d:5f:3e:be:d2:8a:8a:01:e3:88:
         f9:22:27:88:ca:f2:4d:2d:85:e6:13:1b:dc:10:09:62:24:5d:
         2c:93:22:e3:05:a0:98:46:fe:28:07:eb:7f:f7:12:e4:24:9a:
         ec:c5:a7:9d:3c:e2:19:e6:5c:df:cf:37:b6:a2:fb:bd:97:a1:
         12:25:93:bd:2a:d8:1e:88:e3:e1:75:5f:7b:87:2c:eb:70:4f:
         f6:24:f8:56:e5:56:0d:21:f9:d4:56:b4:b2:a4:a7:a5:8a:c7:
         07:b4:c5:19:83:db:e9:c0:fe:86:0a:e3:5c:82:f4:cd:33:f2:
         bc:ba:e7:db:d2:d6:c5:93:2d:95:a0:e6:51:0a:d6:87:ba:ed:
         62:3f:31:56:be:13:bf:d8:78:7d:b8:af:a5:2b:cd:58:15:72:
         35:0f:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:24:23 2026 by rpki-client