Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96/420ab5e5-e91a-3134-837e-b953c1ef527a.roa
File:                     420ab5e5-e91a-3134-837e-b953c1ef527a.roa (raw, json)
Hash identifier:          tn64Yo9mwnV15kV44PhQVmgkZY+aUwxvPnqcm3ItPog=
Subject key identifier:   DB:CC:AD:68:ED:66:DC:96:F4:1F:B0:91:5A:B7:79:4F:BD:FB:85:FD
Certificate issuer:       /CN=8072e3c1-4a62-4e93-830d-c44624567c96
Certificate serial:       010D0C9F4328584F38B2774AD89B63990E5C8600
Authority key identifier: 92:28:7E:0F:EA:DE:A3:03:2F:C0:9A:54:58:D2:70:08:77:17:B8:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96/420ab5e5-e91a-3134-837e-b953c1ef527a.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     62837
IP address blocks:        23.173.40.0/24 maxlen: 24
                          2607:8640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96/8072e3c1-4a62-4e93-830d-c44624567c96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96/8072e3c1-4a62-4e93-830d-c44624567c96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:77:4a:d8:9b:63:99:0e:5c:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8072e3c1-4a62-4e93-830d-c44624567c96
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=8de8a244-172e-42c7-8a7a-7ac71f6ad776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:a3:39:f5:0a:20:70:03:f4:9f:35:c4:df:
                    49:0d:ab:22:27:99:05:3b:de:ab:a4:7c:22:fb:91:
                    f5:54:25:02:7a:16:ed:4f:a4:a5:50:66:93:89:75:
                    3f:a2:53:aa:59:d3:7e:46:1e:e6:af:d8:16:68:cc:
                    ed:94:34:d1:e1:cb:15:91:84:c2:6b:76:7e:69:e7:
                    0f:9a:12:6b:62:76:85:07:4a:4f:17:7f:50:2a:04:
                    d0:c6:d1:5a:2c:11:0d:cd:1b:bd:1a:22:8b:01:c2:
                    46:46:e9:6d:71:d9:44:56:33:bd:f4:69:44:ff:71:
                    9f:64:c6:06:37:d3:39:2d:e6:4b:f5:42:46:14:ee:
                    87:ef:00:82:9a:b1:76:42:07:4f:4e:b5:9a:89:a5:
                    39:2e:bc:fc:84:67:68:97:fd:59:5b:2d:ff:cd:8c:
                    57:47:5d:3a:65:4c:3f:dc:1b:f9:72:94:4b:39:b2:
                    83:17:83:31:ce:5c:84:84:92:bd:f3:26:18:57:d0:
                    f5:a4:55:27:07:53:79:b5:65:11:71:7b:f6:e5:5f:
                    05:56:e4:fe:a8:46:18:5c:cb:e8:f4:8d:5f:a2:26:
                    f0:b6:76:85:1f:52:d6:ee:20:f0:88:4e:bb:d5:47:
                    6c:b4:a8:90:06:5a:93:6b:74:4f:80:7f:25:30:0c:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CC:AD:68:ED:66:DC:96:F4:1F:B0:91:5A:B7:79:4F:BD:FB:85:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96/420ab5e5-e91a-3134-837e-b953c1ef527a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96/8072e3c1-4a62-4e93-830d-c44624567c96.crl

            X509v3 Authority Key Identifier:
                keyid:92:28:7E:0F:EA:DE:A3:03:2F:C0:9A:54:58:D2:70:08:77:17:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8072e3c1-4a62-4e93-830d-c44624567c96.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.40.0/24
                IPv6:
                  2607:8640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e4:eb:89:b9:ff:40:e0:34:66:d9:1d:17:92:96:b9:43:8e:
         48:a8:ea:50:68:0d:58:31:95:83:b9:b8:d8:bd:e2:d3:32:f6:
         f5:02:53:fa:84:a1:22:65:7f:6f:2d:e0:c6:f1:01:8e:6c:fb:
         55:b4:1e:73:95:1c:bf:63:ab:d9:45:27:ed:ce:47:05:78:6a:
         1c:34:75:5d:d5:6c:0a:f6:42:ec:da:0b:a9:d5:9b:97:53:46:
         06:76:2c:bf:9d:34:ae:4f:74:fa:55:e5:c9:1f:d5:a0:02:45:
         1b:d1:ad:da:51:fb:03:75:8e:dd:47:33:58:e0:cc:4f:07:44:
         70:c1:ba:49:de:e0:99:4e:41:61:ff:41:38:66:c3:73:82:c4:
         2e:d1:f2:c3:83:a4:be:d7:e9:43:ce:0a:85:a8:d5:4c:94:c1:
         c8:ac:f6:b9:de:17:c6:27:87:50:fe:7e:3a:7f:3e:63:83:dd:
         b5:c1:12:6d:d1:3f:f7:7b:99:6e:80:9f:c4:c2:99:50:99:d7:
         13:f6:7b:27:1c:0c:19:9e:3e:84:f0:8b:5c:b0:ce:e1:07:18:
         9a:6e:9f:79:7b:9a:32:0d:0b:8a:d0:da:37:f2:7d:b9:24:5e:
         7d:15:22:e1:3c:9c:84:32:d9:3c:b6:41:a0:91:7d:65:c0:12:
         12:1c:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:19:27 2026 by rpki-client