Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/40e673ae-b248-303b-84a6-e803376b302c.roa
File:                     40e673ae-b248-303b-84a6-e803376b302c.roa (raw, json)
Hash identifier:          LVOL/z/Re9WAolGGodcqEXvYW2xXiFgG3XfFKm9+mCo=
Subject key identifier:   EF:5F:04:12:D1:EB:7A:08:93:94:14:F3:57:06:86:81:6B:E4:BC:48
Certificate issuer:       /CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7
Certificate serial:       010D0C9F4328584F4986D8F5989CF1C37DECC200
Authority key identifier: 02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/40e673ae-b248-303b-84a6-e803376b302c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399955
IP address blocks:        64.72.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:d8:f5:98:9c:f1:c3:7d:ec:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ceee4d19-a85e-4107-abd7-2d802a970389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:49:c4:8c:7a:f8:b2:75:b0:7f:3e:22:98:1e:
                    d0:1f:b4:c8:5f:6d:82:1e:4f:d7:9b:6b:ca:f2:1e:
                    ee:37:b5:3e:67:27:13:f0:1e:e6:1b:f5:b3:7a:64:
                    e0:8c:7c:2a:49:3e:09:7d:6a:87:96:30:4a:c8:86:
                    0e:c3:65:69:72:64:d2:3d:75:60:60:77:f9:a6:06:
                    db:84:61:2a:0a:45:e6:6f:a7:d9:96:61:bc:60:eb:
                    58:3a:20:2f:a4:2e:79:c2:6a:21:90:bc:e0:7f:a8:
                    68:02:bd:d9:ac:3b:a1:62:e6:a0:12:9d:aa:69:b9:
                    6a:76:28:a5:d2:54:cb:89:39:64:e6:4b:6f:1c:23:
                    cc:ec:e7:63:ba:c0:7a:24:79:84:81:2e:57:f4:3a:
                    1d:77:07:84:30:3b:9d:25:8e:cd:05:68:8f:09:a9:
                    d1:5b:e2:33:23:ab:85:ed:35:94:05:7f:08:62:ae:
                    8b:47:54:8b:ca:6b:8e:b1:50:37:3c:a3:34:c1:57:
                    91:e3:a5:53:bf:76:f4:fe:8a:ab:4d:98:1c:54:a9:
                    cc:c4:56:62:df:35:49:46:a4:15:52:64:df:68:43:
                    a3:c6:bf:0d:e5:39:1f:98:a9:96:ec:db:e4:49:9c:
                    76:e2:48:79:d7:ef:47:76:f6:35:b3:7e:08:40:45:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5F:04:12:D1:EB:7A:08:93:94:14:F3:57:06:86:81:6B:E4:BC:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/40e673ae-b248-303b-84a6-e803376b302c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.crl

            X509v3 Authority Key Identifier:
                keyid:02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:92:78:13:18:46:5b:e5:91:3a:b1:8d:da:99:53:61:eb:36:
         80:5c:e6:11:53:0d:fd:e6:1f:b6:aa:50:14:c7:33:46:f6:51:
         51:62:60:cd:af:38:42:67:3a:f4:21:b1:33:eb:9f:1c:58:81:
         23:f8:dc:5c:f9:f6:f1:88:28:72:8f:11:ff:31:13:0f:38:b1:
         b5:a3:96:fc:f3:bc:83:c2:6d:16:b8:1a:91:09:e0:ca:69:76:
         ac:56:b1:35:0e:cc:26:a8:08:e4:55:e8:1d:6a:9d:5d:50:b1:
         e5:57:03:ed:ee:d2:23:34:e2:21:b8:2d:c6:4b:60:90:4c:58:
         99:34:dc:84:0c:f1:bb:fd:00:89:89:9e:ff:be:3b:5c:49:c4:
         54:45:eb:d2:32:60:1f:3e:de:8c:3f:d5:46:45:00:1c:6a:74:
         18:08:5a:4c:40:6f:43:21:18:ca:e9:03:51:a7:c9:a7:1d:6b:
         27:07:69:b4:57:3e:6a:eb:53:7d:ce:ec:53:50:6f:0c:7b:19:
         54:c0:e9:b0:e1:4f:1d:f6:a1:46:88:70:9e:28:6d:d4:ca:ef:
         8d:46:41:5e:41:4a:fa:3b:a4:37:37:63:6c:26:5c:c9:88:36:
         79:11:d2:0a:dd:c7:d0:cd:65:2c:75:33:9d:95:86:ff:b4:4a:
         3e:f3:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:31:05 2026 by rpki-client