Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa
File:                     ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa (raw, json)
Hash identifier:          FQH+NvUUBYg4qa6Rz8sFki0Jzp/l+dfiY2s87j7q+7k=
Subject key identifier:   00:99:48:04:08:BF:B2:63:73:68:3F:E7:9E:CA:40:B0:56:97:03:B2
Certificate issuer:       /CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
Certificate serial:       010D0C9F4328584D1707DB03E9D83BA4F5B92080
Authority key identifier: A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     32797
IP address blocks:        23.156.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:db:03:e9:d8:3b:a4:f5:b9:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=a3dfe017-b782-4588-b22f-1ba01df8e81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:26:f4:a3:f1:ab:80:02:38:f7:f0:91:1d:
                    ff:54:70:b4:4e:4e:2a:50:b5:ea:31:28:41:7b:ec:
                    52:e4:0f:99:04:91:67:aa:2d:6c:97:23:99:4c:1c:
                    50:6f:ee:23:1f:5e:e5:bd:30:a5:6e:d5:3c:fa:38:
                    65:3c:6c:7d:b8:1a:cb:d7:9a:dd:d7:20:f7:53:a9:
                    ae:c8:66:2b:f9:0e:73:89:2f:8e:a6:c4:37:1c:03:
                    f2:c9:f1:dd:a2:ef:78:1a:25:12:97:da:9b:0b:73:
                    99:80:aa:cc:cf:6e:13:78:9a:7f:ad:8d:f2:f0:03:
                    da:cf:2e:5d:f2:e7:14:fb:d8:2f:fb:c6:f6:2e:a5:
                    47:a0:78:50:19:34:35:9e:a0:4d:db:c5:c4:5a:8f:
                    5d:4d:46:a3:6e:38:97:7e:a8:be:f6:7b:94:10:eb:
                    a7:43:a6:40:2c:a4:e0:b6:7c:4f:96:d8:ea:68:c8:
                    ba:2c:0e:be:0d:80:76:71:68:41:cb:d8:11:65:1a:
                    a2:df:6e:3b:5d:39:c7:07:10:5c:dc:3e:63:66:5b:
                    ad:6b:81:22:80:47:d7:84:e0:a7:41:24:a6:d6:f3:
                    d7:4c:e2:a6:3d:09:d4:31:55:23:2c:68:a4:fc:b3:
                    ab:ef:fd:09:16:57:a0:e6:b5:61:36:19:06:b1:e1:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:99:48:04:08:BF:B2:63:73:68:3F:E7:9E:CA:40:B0:56:97:03:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl

            X509v3 Authority Key Identifier:
                keyid:A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:6d:8a:cc:bc:50:f7:ee:d5:19:0f:cf:dd:69:a4:de:3a:
         e4:78:df:3c:f0:0f:d2:e9:67:5a:7f:a4:6d:e8:a5:d6:c2:4b:
         61:6a:9e:6c:06:2d:fd:5c:8f:79:da:41:af:01:5b:20:7a:be:
         81:2f:11:be:f9:c5:66:2b:12:15:94:e7:21:72:26:df:f9:54:
         2d:64:40:10:45:83:0d:31:33:39:8a:52:c2:cd:f9:9a:e7:87:
         af:82:0a:e4:57:25:ba:fe:ea:de:5a:59:55:30:65:12:8b:58:
         f6:27:b9:cf:57:9e:04:e3:64:60:a3:ec:12:b4:90:29:a7:08:
         ec:d6:99:e3:f0:ce:f3:79:33:e6:6f:3b:f2:9f:49:62:a8:7a:
         48:74:7d:cb:6b:8f:ba:98:e7:bc:2e:a2:f1:0b:03:92:d4:4f:
         4f:0f:4c:ba:4e:5f:82:a4:c3:df:0f:9b:67:2d:40:1d:65:16:
         d2:b7:14:42:18:6d:93:99:8b:5b:1c:20:7e:0e:cc:59:81:a9:
         af:22:71:cb:2f:69:bd:7b:63:b9:8e:4b:65:85:00:f2:42:81:
         68:91:69:c2:2c:b4:b2:2d:1e:36:bf:46:9f:b6:57:03:9d:3d:
         c7:6d:30:95:29:78:9e:47:cb:12:14:35:d7:fa:1b:77:f4:7f:
         34:a4:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:34 2026 by rpki-client