Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa
File:                     676d52c3-3c59-3616-8a3a-27cd91d11570.roa (raw, json)
Hash identifier:          N3oLu+yVoqnokr14xAl6LTldjFo1mivGVwV543AEhpo=
Subject key identifier:   35:EA:4A:49:FA:92:B4:02:A0:B1:91:D2:54:DD:5E:FE:9D:E8:D4:72
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584DBA3AFFEB3ADBEA2ABE899400
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     11290
IP address blocks:        24.226.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:ff:eb:3a:db:ea:2a:be:89:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=9f353429-048f-42cf-bcd3-23b4de8bfbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:25:77:27:f1:d2:a7:94:35:cc:25:26:23:
                    8a:d2:91:00:cd:94:39:12:33:11:d8:9b:eb:d3:37:
                    92:f5:53:34:48:4b:51:3b:c3:52:ea:ff:f0:fd:b0:
                    c9:08:b7:6d:64:5d:7a:a7:21:e9:5b:b0:1e:34:71:
                    33:dc:f9:43:20:7f:14:63:f2:7e:1e:f6:47:81:37:
                    c7:3c:69:3e:fd:8c:2c:79:d8:c0:cf:b4:23:70:58:
                    5a:18:cc:81:fe:43:73:54:bc:ef:4a:07:fb:d9:c2:
                    55:e4:d1:55:ef:d2:c6:c9:b6:07:d4:52:0a:45:27:
                    bd:93:42:d7:7c:88:5b:b9:ee:a8:f8:c4:cb:95:a7:
                    8d:27:85:91:9c:15:1f:c3:b3:da:7a:9e:ff:31:be:
                    12:e6:eb:48:b5:2a:65:2a:40:76:82:2f:26:ed:8f:
                    e8:1f:10:01:26:69:a6:9d:0e:4e:52:25:e4:0a:fa:
                    27:c9:2e:21:c6:b3:6c:07:58:73:12:e5:05:78:96:
                    3a:e0:ea:76:64:9e:dc:f2:dd:16:37:74:e9:da:31:
                    35:7b:44:52:9e:3f:4c:e7:fc:3f:78:a0:21:db:94:
                    c1:c0:7c:86:84:9f:0e:56:35:0f:09:8a:df:f2:0e:
                    88:63:84:29:1b:8d:63:92:8e:71:9f:de:8a:bf:99:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:4A:49:FA:92:B4:02:A0:B1:91:D2:54:DD:5E:FE:9D:E8:D4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.226.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:32:45:6c:ec:3b:96:9f:f4:47:2d:11:f0:6c:2b:02:67:
         f5:f3:44:a1:0e:32:85:b6:20:15:19:8a:bd:46:42:cd:13:8d:
         be:85:ea:87:fd:2e:08:9b:79:9f:44:8e:72:59:8d:88:39:5b:
         3a:1b:30:dc:1f:d1:28:cb:2d:63:c1:12:53:c0:5d:28:4f:8d:
         e3:e0:16:6d:2a:a6:93:e4:f0:88:5d:10:7f:77:df:b9:c5:6c:
         8a:10:cf:08:00:d3:ce:ed:d1:a4:3f:0d:19:dc:d8:e3:c1:35:
         79:23:8f:8a:9b:fe:64:f1:3b:3d:7e:05:bf:16:6a:15:6e:58:
         e1:d3:3e:0d:49:51:9b:97:ac:6b:68:d7:1b:48:f4:60:0e:3a:
         f7:13:84:7f:15:a9:29:d8:07:3a:80:d7:66:9b:c7:2e:d7:a8:
         f3:0d:59:6c:09:63:5d:18:c1:15:52:36:1c:4e:08:17:1c:a0:
         06:17:3c:5c:f0:5b:d3:da:2c:3d:fd:6c:2b:84:ee:d8:19:01:
         cf:8b:dd:4a:6a:30:08:24:d0:a0:73:7d:d0:db:e7:58:20:61:
         5f:be:14:4d:c8:cd:79:81:49:50:00:6a:44:73:ba:96:de:54:
         69:4b:3b:2e:14:d9:65:8b:7b:51:a0:2a:3b:29:51:2e:af:c7:
         15:13:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:33 2026 by rpki-client