Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a60d561d-3834-3a30-aad1-f9bb5887eacf.roa
File:                     a60d561d-3834-3a30-aad1-f9bb5887eacf.roa (raw, json)
Hash identifier:          aw3J7ldjkA7AWjoW/91lP8OdXqnNZlidYQfv30l56mI=
Subject key identifier:   C5:89:4A:38:D8:AD:C5:A7:66:8E:CB:9A:3C:2F:3B:3F:C0:2C:B9:4D
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D9A2008E42788F5430AFAF890
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a60d561d-3834-3a30-aad1-f9bb5887eacf.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     62904
IP address blocks:        23.231.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:08:e4:27:88:f5:43:0a:fa:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=d1ab020e-85bb-4320-b44e-9d61a247df7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:51:99:71:ce:2c:64:21:3c:6c:94:3f:ad:
                    e9:a2:05:2c:8d:d4:05:ff:28:45:59:d5:fe:47:96:
                    1b:d7:32:5b:26:98:73:9f:c2:12:a5:9b:2f:41:23:
                    a9:cb:51:f5:15:81:90:a8:47:3b:f0:a6:07:67:1a:
                    3d:18:29:e4:94:49:1a:a7:ea:6b:1e:18:d8:95:8f:
                    a7:36:79:1f:da:39:b8:f9:d4:8d:aa:32:5b:a5:2b:
                    18:9a:77:82:ee:4a:8a:89:8f:76:29:d3:76:d0:20:
                    20:b3:3c:78:b8:57:96:e8:d7:7e:5f:13:22:53:b7:
                    21:cc:b6:68:8a:bb:22:37:90:50:e6:10:8d:16:9d:
                    a0:b8:b2:01:fc:c7:ea:78:bc:c1:b0:13:23:af:b1:
                    9b:60:ea:16:90:93:24:3a:c3:e0:b4:01:7f:37:84:
                    bb:42:23:1d:b4:a0:af:2f:eb:c1:de:96:19:34:69:
                    d5:86:5b:b4:f9:47:48:7b:d9:fc:41:bd:4d:70:b6:
                    6e:48:65:ba:b3:09:08:d0:26:59:d5:40:d4:77:2f:
                    7b:65:49:bd:72:49:67:86:7d:dd:c2:6b:b7:a7:84:
                    ef:ce:14:f1:0c:92:ae:9e:ed:22:ee:18:5a:0b:dc:
                    82:21:40:7e:b8:de:37:9b:ce:42:cd:4b:f0:54:06:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:89:4A:38:D8:AD:C5:A7:66:8E:CB:9A:3C:2F:3B:3F:C0:2C:B9:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a60d561d-3834-3a30-aad1-f9bb5887eacf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e1:28:fc:40:a3:57:1c:1b:f4:91:34:4a:ca:3c:07:e9:30:
         dd:fc:6e:0d:91:35:b2:c9:1c:d1:62:56:d8:ae:ac:b0:a6:a9:
         ff:81:f3:8f:6e:44:3f:9a:e7:30:73:ab:21:be:72:30:9d:0e:
         e9:ec:c5:65:ad:8f:87:fc:41:9d:69:78:f1:43:73:63:2e:8e:
         e4:eb:7a:bd:fd:3a:68:d4:68:54:a4:4c:49:d6:ca:8a:bf:a5:
         dd:8d:86:65:e4:cb:85:b6:50:95:57:c2:cf:9d:05:cc:87:55:
         17:b5:5d:31:14:1d:89:c0:20:d9:31:49:91:2f:e7:73:22:66:
         c8:c2:7e:fd:38:bf:44:e1:92:3d:96:57:eb:2e:38:d4:44:39:
         8c:5d:06:90:6c:b8:be:40:50:a0:35:92:37:7d:10:1f:dd:8d:
         84:25:b8:0f:49:7a:df:a9:1a:86:10:32:f7:5f:26:04:16:b9:
         df:3f:68:a4:b3:74:38:f9:a9:9b:bf:11:60:36:99:1c:e6:76:
         9f:8d:cc:e6:fc:8b:9b:af:6e:b7:f4:00:a8:2a:ec:90:ce:59:
         70:d7:99:cc:0f:51:2e:b5:8c:5b:65:37:16:53:d6:fd:c2:b8:
         c2:cd:90:58:d8:04:e0:b5:7e:9e:00:95:59:a6:40:7a:b4:d9:
         60:1a:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:32:42 2026 by rpki-client