Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ea18ffa-3784-3f6e-85e8-7d42fe3503ca.roa
File:                     1ea18ffa-3784-3f6e-85e8-7d42fe3503ca.roa (raw, json)
Hash identifier:          PvCn8gBAGYwbpTohnsbWmEen/qnLfZDTO0wcK/GQTeM=
Subject key identifier:   55:29:F5:33:E1:1D:C8:07:72:F5:47:2D:6F:C1:6F:58:B6:C8:70:38
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F480D4BE8747163BD63C84F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ea18ffa-3784-3f6e-85e8-7d42fe3503ca.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        23.52.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:4b:e8:74:71:63:bd:63:c8:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=1cdf78ae-7f01-4be6-be00-f71191b00dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:7f:a7:a4:a3:0b:d6:38:43:66:72:43:52:
                    16:69:14:a3:4d:e0:3b:97:ec:81:33:bf:a2:4b:de:
                    f6:ad:20:b0:8a:d3:7f:fa:1f:c3:55:c0:61:b3:c6:
                    d4:2d:c6:35:55:32:35:3e:02:df:71:01:37:72:c1:
                    1f:33:29:3b:f3:a1:63:74:7f:87:b7:13:a5:6f:81:
                    24:fe:39:a5:b4:6d:5f:86:8a:2f:b0:bb:f0:39:c6:
                    2a:3f:38:c5:c1:ba:c3:75:d0:92:bb:55:8c:30:a9:
                    82:a8:ca:7d:0c:8d:ed:0c:17:ca:58:59:45:f4:68:
                    8a:ab:ac:17:e4:d5:05:74:9c:8c:12:e5:4e:04:dc:
                    29:79:49:f4:da:bf:59:d7:e8:cd:e7:b1:ba:b2:14:
                    c4:c2:3e:c6:c0:45:c1:1e:80:9e:bb:d0:6c:64:8e:
                    2a:d4:5b:88:13:58:ab:86:ce:c2:f8:0e:51:8e:82:
                    76:df:f2:f9:79:80:cd:c1:b3:e2:64:2b:45:c7:37:
                    0e:e9:15:ae:e3:55:10:fd:21:23:ae:f7:68:7d:32:
                    e9:aa:95:36:c2:ca:12:ee:77:a4:f4:92:08:11:52:
                    85:7d:c6:bf:51:d5:1d:0e:3a:c7:31:73:e3:6b:5e:
                    f0:7d:74:65:e4:8d:0b:75:75:34:df:d4:c4:db:4e:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:29:F5:33:E1:1D:C8:07:72:F5:47:2D:6F:C1:6F:58:B6:C8:70:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ea18ffa-3784-3f6e-85e8-7d42fe3503ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:31:94:28:2a:f2:15:45:70:d8:13:df:8b:9e:a0:d0:82:
         33:6e:81:9d:c1:2b:f9:70:b3:07:8f:92:dd:a8:ea:c0:b5:5e:
         bc:ed:ea:31:e0:4b:e8:c1:f6:5c:ea:12:f2:67:ac:16:79:dc:
         58:fb:95:05:31:08:87:22:df:d2:e7:e9:08:7f:36:54:19:09:
         a1:20:18:39:c9:b4:a1:aa:a0:39:be:99:34:0e:03:8b:5e:a0:
         88:b4:66:17:9d:64:cb:cd:c4:e9:86:7b:9d:12:66:fb:5d:ce:
         95:27:9d:35:7a:11:98:e9:74:9b:ca:16:6e:1b:31:d9:a7:29:
         7a:20:e2:65:a9:fc:03:a1:79:52:22:d9:fe:a5:c4:8f:53:9f:
         6e:13:3e:c5:5b:81:ac:d4:d8:5a:0e:6f:c5:bf:1f:bf:3f:a2:
         83:22:b2:aa:23:59:7e:57:85:a1:ae:81:8d:47:fa:e2:5c:5b:
         72:bd:a5:49:cd:57:80:fe:18:36:88:f5:17:f7:27:7c:ed:ab:
         ad:36:b5:f4:0f:f0:08:f2:88:39:be:a3:a8:39:5e:eb:0a:34:
         62:8d:2a:35:d5:a4:8e:6f:a5:20:e7:a3:c2:4d:09:00:3e:ce:
         94:0c:ad:62:be:72:12:f9:e9:67:7e:39:e0:cb:02:d6:20:1b:
         08:c9:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:48:26 2026 by rpki-client