Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/40ab9ebe-4871-33e6-b755-8c99c310f04e.roa
File:                     40ab9ebe-4871-33e6-b755-8c99c310f04e.roa (raw, json)
Hash identifier:          UQVlSoXC1Stv8TN2QANS2yz4saRlP8twnuczd2MY4f0=
Subject key identifier:   A3:CA:B3:5A:D5:49:4E:EC:D6:70:5B:8D:D3:E8:07:BD:5E:8B:8C:BD
Certificate issuer:       /CN=77c31fd1-c3ac-425f-9d0e-b9b227466366
Certificate serial:       010D0C9F4328584D237A715FBAAE95146C67F880
Authority key identifier: F5:4E:60:BA:39:BC:90:C1:05:BE:FC:9C:91:63:40:C5:71:5D:C5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/40ab9ebe-4871-33e6-b755-8c99c310f04e.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        23.131.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:71:5f:ba:ae:95:14:6c:67:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c31fd1-c3ac-425f-9d0e-b9b227466366
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=86be1235-63e0-4a0e-9499-e5c68f3775d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:1b:7b:93:24:da:a1:6e:a6:83:77:b9:08:
                    55:c4:90:1b:de:6e:3e:47:a2:33:c1:bd:37:8c:6b:
                    45:6c:b3:eb:ab:de:eb:44:fc:de:44:a8:7a:7b:bf:
                    ff:23:5d:0d:db:ac:5a:d3:a6:3a:4a:8e:d5:32:ec:
                    20:13:4e:be:62:22:2d:74:18:ba:2a:1b:70:8f:9b:
                    59:32:b0:28:3f:36:51:69:26:a9:d1:d1:b2:3b:b1:
                    6e:51:6b:d3:38:ab:bc:71:fb:dd:7a:2a:85:1d:7e:
                    a6:b4:f8:79:5e:2b:e2:9a:11:44:55:17:6f:06:43:
                    74:6c:b8:9b:15:fd:ca:b4:a6:61:ca:50:b0:49:da:
                    74:5c:39:38:fe:87:fe:97:f5:c6:2a:24:bc:c2:67:
                    9c:02:71:e9:d0:ac:44:10:c4:4d:c1:27:08:72:0b:
                    76:c5:6a:bb:6d:4c:c5:cb:4f:67:bc:e3:18:35:51:
                    ff:c1:96:74:65:6e:20:71:6a:b7:53:2f:98:7d:93:
                    39:c2:9c:07:d8:eb:1a:40:73:67:7e:18:da:cf:68:
                    64:58:09:11:7f:03:d2:8e:77:45:94:8a:9e:f5:4f:
                    9b:b1:23:4a:db:a0:12:8e:f4:ed:66:45:84:3d:50:
                    c3:45:b8:76:6b:8d:4c:9a:02:48:96:0d:8d:3b:b0:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CA:B3:5A:D5:49:4E:EC:D6:70:5B:8D:D3:E8:07:BD:5E:8B:8C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/40ab9ebe-4871-33e6-b755-8c99c310f04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.crl

            X509v3 Authority Key Identifier:
                keyid:F5:4E:60:BA:39:BC:90:C1:05:BE:FC:9C:91:63:40:C5:71:5D:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:7e:af:4b:b6:da:81:62:a9:57:6f:db:6b:d8:2c:25:6e:
         a3:25:d3:23:fb:68:d1:96:84:94:71:e2:0d:cd:c7:7b:60:46:
         6d:91:68:fe:66:9f:e1:1f:2e:28:8e:97:8a:7f:1f:35:82:e5:
         2f:82:e6:20:03:20:99:24:53:b5:d3:2c:c2:3a:52:5f:26:f6:
         1a:e5:1c:5b:78:f3:bc:b6:d9:a6:18:14:db:dc:49:4f:3c:80:
         51:17:cf:b4:e2:3b:e4:3b:ee:39:e9:de:a4:9d:d4:ae:36:8e:
         36:d0:d7:7f:be:3c:0b:a3:35:95:64:42:1d:bf:47:ca:d1:08:
         79:df:00:29:f8:e1:c5:21:ff:41:78:93:d1:18:d5:15:54:bf:
         22:68:9c:b5:74:2d:85:5d:e8:1a:7f:49:10:20:36:d3:8d:25:
         ad:c1:ee:b0:f3:bb:09:1f:ac:cc:02:13:16:46:b1:04:5a:74:
         6d:76:c9:60:9b:4f:e4:c8:dd:7a:58:f4:30:67:37:b7:f4:71:
         d4:5e:89:d0:05:73:4a:46:aa:0d:27:f5:8b:08:0d:0a:cd:c7:
         2f:f8:34:44:d1:7f:76:36:f3:93:53:22:20:e1:2a:7c:16:f2:
         ed:a5:f9:c9:a7:70:29:f8:d9:01:2b:1e:ec:ee:66:da:a3:01:
         0c:7f:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:06 2026 by rpki-client