Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/fb58f100-10e3-3a53-b057-2e9879927dd9.roa
File:                     fb58f100-10e3-3a53-b057-2e9879927dd9.roa (raw, json)
Hash identifier:          is4PcuXiIPc9JJInuKJ6TjVFOL4K21Du7waibQw0JuQ=
Subject key identifier:   24:26:C1:EC:C6:B2:E4:67:78:CD:77:C0:BF:D8:58:9C:5B:1B:AF:C4
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F4328584F498814B4193DBB56E98BD6E0
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/fb58f100-10e3-3a53-b057-2e9879927dd9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401243
IP address blocks:        23.146.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:14:b4:19:3d:bb:56:e9:8b:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b32b7d8f-ec7b-4333-941b-a4db367334fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:40:4b:d3:08:a8:e4:66:bd:65:82:90:47:e4:
                    f0:51:eb:0d:33:7e:7f:d9:2d:ba:1a:70:b9:d4:f5:
                    6c:b6:82:d2:0d:ad:b3:f1:89:19:90:06:9d:00:58:
                    c6:4c:79:c5:de:60:58:84:55:38:fd:b8:58:d8:50:
                    f4:fa:73:d7:9b:ab:cc:12:84:d8:d5:ea:c0:10:ae:
                    2e:c0:35:3b:d7:ed:38:37:c3:1a:1a:aa:7a:19:4f:
                    2b:30:7b:17:17:8b:ce:04:ea:9d:de:b2:f2:da:17:
                    3a:b8:55:f2:f2:56:aa:da:f2:32:68:d7:93:1e:72:
                    39:05:ab:bb:c8:a4:b1:46:3e:ba:c6:7a:ab:16:5b:
                    17:75:23:74:b5:04:39:c4:e9:5d:1a:5c:a4:ad:cb:
                    19:e8:75:f9:b2:92:e0:20:75:b7:ce:30:08:91:29:
                    ea:cc:17:db:e0:ec:96:9b:c0:50:21:cf:8c:f3:cb:
                    8f:83:50:7a:c8:49:8e:86:d4:af:40:40:57:a9:a5:
                    90:6f:63:f1:b1:1c:7c:45:40:23:35:43:b1:16:6b:
                    26:2e:5a:d6:55:d6:e2:ce:e3:30:51:61:71:af:d6:
                    e0:e1:98:ef:a1:97:d6:60:55:11:01:68:25:5c:03:
                    e0:ef:20:42:ad:09:fa:3e:51:cd:36:14:32:5d:5c:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:26:C1:EC:C6:B2:E4:67:78:CD:77:C0:BF:D8:58:9C:5B:1B:AF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/fb58f100-10e3-3a53-b057-2e9879927dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:bb:4a:16:e0:26:d8:f2:df:4f:b2:34:f5:41:09:b3:38:54:
         e7:40:f6:c8:16:48:23:2e:bb:5c:d9:53:14:e0:c9:63:6f:53:
         91:f6:0b:2b:50:28:cc:e9:1e:3f:1e:6f:ee:a5:b5:17:c1:13:
         a9:46:6f:e1:39:85:1e:0e:ac:f4:12:ad:3a:4e:94:ad:d9:de:
         73:b9:25:7b:40:ca:aa:ed:4c:2c:72:8b:5c:38:a0:91:17:d8:
         9e:7d:02:0c:9e:94:47:19:a4:de:bd:15:09:5e:4e:01:1e:fc:
         d2:1f:b3:e5:72:dd:c3:8a:57:4c:dd:f4:4c:3e:aa:e8:66:d6:
         66:99:2d:84:d2:c3:6e:d4:01:79:13:b8:b6:28:ba:06:f2:27:
         d0:3a:15:51:7d:bc:d8:7f:75:45:69:c8:32:d4:4c:70:d2:6e:
         d4:4b:d6:7a:ec:23:02:b0:2f:a5:c6:a6:07:c7:28:38:cb:2a:
         f2:87:f1:b6:7e:c2:63:de:2f:50:27:d0:52:ec:fb:16:0d:fd:
         32:f9:69:94:af:f7:a1:e4:6e:3f:0e:74:a5:93:62:44:f2:ff:
         38:e1:10:00:e1:fc:00:6f:f9:81:2d:5d:0c:29:32:cb:29:ce:
         cf:15:bd:65:3f:9e:e2:4e:2c:ce:c9:a5:bf:9e:07:bc:f4:32:
         d9:2a:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:51:02 2026 by rpki-client