Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/75011d8f-277f-3791-9b29-6b17792b820b.roa
File:                     75011d8f-277f-3791-9b29-6b17792b820b.roa (raw, json)
Hash identifier:          y8J6/xfBXjRyDqpgusCfr92ZNa/bdWCRtQfZSjcfUxU=
Subject key identifier:   0B:14:0D:30:72:65:DA:58:19:5D:55:C4:C4:B8:A2:05:0F:93:FB:85
Certificate issuer:       /CN=b7862bc4-6389-47d6-bd67-0cfdcba83125
Certificate serial:       010D0C9F4328584F3CE2ACD4DA6B178B85554B40
Authority key identifier: 8B:36:67:57:60:2D:63:6C:93:66:81:E5:6E:49:13:EB:2F:EC:C9:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/75011d8f-277f-3791-9b29-6b17792b820b.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     8796
IP address blocks:        23.140.244.0/24 maxlen: 24
                          82.158.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/b7862bc4-6389-47d6-bd67-0cfdcba83125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/b7862bc4-6389-47d6-bd67-0cfdcba83125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:ac:d4:da:6b:17:8b:85:55:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7862bc4-6389-47d6-bd67-0cfdcba83125
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=0ffe9f94-7fb3-483f-8b22-a8930aa67298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:41:0d:77:fd:85:b8:70:1e:81:9c:b6:83:
                    07:1b:6c:b4:a3:c9:71:ef:6e:0d:cc:cc:27:ce:62:
                    20:c5:28:84:3e:f1:a8:5e:bf:19:b0:2a:b1:05:36:
                    d3:b5:98:63:32:d1:e9:d1:70:47:80:a9:19:4c:8b:
                    37:60:32:3a:26:a3:ba:94:11:3b:d7:67:ce:b1:03:
                    f6:aa:93:43:bd:64:a2:6e:72:9e:71:e1:a8:9d:9a:
                    58:84:b0:1e:1d:36:85:51:a7:44:d5:09:85:07:45:
                    b0:27:36:78:b5:82:4a:cd:d8:44:72:a4:e5:12:f3:
                    02:7f:48:a7:84:28:08:d9:02:89:10:89:64:b0:7e:
                    5b:77:5b:09:d8:e2:e7:2a:81:a9:a2:05:fa:70:26:
                    23:70:8f:51:01:70:49:f2:6b:3b:e9:e9:1c:3b:62:
                    7e:1d:57:df:07:4a:8f:ac:25:e4:73:9f:8a:28:95:
                    92:d2:ed:91:fa:e2:bd:91:ce:00:bd:e8:96:f3:9c:
                    38:c0:47:10:dd:c9:61:fe:5f:49:93:99:f2:d2:ad:
                    47:02:be:0a:85:8b:76:21:ac:e0:2e:ae:b9:78:fb:
                    6a:bd:50:c9:ee:95:7b:b9:75:55:44:6c:97:bc:46:
                    8b:72:02:2a:e2:87:fc:8f:da:e4:39:89:7f:10:d0:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:14:0D:30:72:65:DA:58:19:5D:55:C4:C4:B8:A2:05:0F:93:FB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/75011d8f-277f-3791-9b29-6b17792b820b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/b7862bc4-6389-47d6-bd67-0cfdcba83125.crl

            X509v3 Authority Key Identifier:
                keyid:8B:36:67:57:60:2D:63:6C:93:66:81:E5:6E:49:13:EB:2F:EC:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.244.0/24
                  82.158.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f1:35:8c:60:de:97:dc:a4:38:ac:d9:c6:4b:7e:04:3f:9e:
         a9:24:e7:d1:91:1f:39:a1:be:e3:4f:c7:2a:e1:cb:43:7f:75:
         8a:2e:2f:2e:64:e3:e7:7b:44:04:bd:79:ef:12:d5:ee:5a:bb:
         70:84:f0:04:32:f9:6d:d3:19:65:44:1f:cd:cb:f5:d8:ef:98:
         7c:05:e7:c5:aa:c5:0f:8a:dd:3b:ff:ff:aa:fd:8c:db:af:bc:
         0c:e8:c2:8a:00:e1:90:3b:ed:74:a1:2b:f0:c6:e3:cb:05:35:
         b7:0f:c8:ba:15:18:6f:89:59:69:db:a0:24:6a:38:94:02:06:
         ec:69:f4:13:e2:32:5e:6e:f0:a9:b2:1d:36:85:72:b9:79:6a:
         ec:36:dc:eb:77:db:5c:3d:65:ad:fa:64:34:2d:8e:90:8b:a0:
         5b:0a:26:08:dc:02:45:89:29:60:6b:e5:4c:64:8a:0a:0d:03:
         13:11:2f:92:84:e5:7c:b2:4a:17:f0:d8:fc:00:c8:c3:7f:9f:
         55:62:98:3f:9a:18:18:62:0b:cf:5a:04:44:ac:92:ef:6f:ad:
         be:d8:45:48:fd:36:19:f4:9e:17:2c:1e:5e:61:cd:ba:17:6d:
         cf:09:e7:2f:77:af:8f:a4:b8:de:8a:e9:3f:a9:dd:4d:4f:83:
         e2:cf:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:37:02 2026 by rpki-client