Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206f36c7-1c35-3269-ae51-246289621a05.roa
File:                     206f36c7-1c35-3269-ae51-246289621a05.roa (raw, json)
Hash identifier:          ddlGmFuSwOMrF5OtJsbg2EBXCr0Bysn5bVk3nC1w170=
Subject key identifier:   AF:B1:60:76:10:85:38:A8:1E:FD:FD:91:DF:9F:A2:30:A1:18:DE:99
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D2BDA2DE99F9852B9AAEDBE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206f36c7-1c35-3269-ae51-246289621a05.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     32787
IP address blocks:        23.45.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:2d:e9:9f:98:52:b9:aa:ed:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=fac39020-4f69-46fb-982a-854e13134251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:d2:fc:01:ed:87:a1:64:d0:f0:82:39:42:
                    b8:3d:b9:08:f8:ba:39:a9:5e:56:00:a4:23:1c:d4:
                    f5:d1:36:87:f5:92:42:97:f6:1f:0e:ea:0c:75:70:
                    d2:58:d0:5c:61:70:b3:b8:5b:57:b0:92:7c:89:3c:
                    fe:18:5e:af:62:24:cc:88:39:bc:91:0d:4e:82:d2:
                    91:05:34:79:ef:ca:3f:14:b7:b2:43:63:12:50:00:
                    cf:f8:01:58:0b:fe:13:68:b7:e7:5f:fc:f4:d8:42:
                    0c:7f:fe:f9:4d:1a:da:79:82:c0:af:ac:9d:eb:a6:
                    be:17:09:16:56:64:89:46:f6:cf:24:b8:92:ed:36:
                    80:b4:f9:54:97:ff:00:72:65:1b:93:cb:fd:31:ca:
                    1d:20:59:af:b6:32:ba:4b:3f:c1:85:22:b5:5b:e7:
                    b4:13:9c:9e:00:42:23:81:d8:38:4d:3f:c8:8c:cd:
                    63:1e:0f:38:5b:5e:50:d2:16:75:c7:ce:87:4a:70:
                    55:b3:61:08:53:b0:48:0b:8f:ca:94:4e:7a:80:22:
                    e7:d1:a2:6d:87:6b:72:78:b9:f0:c5:e8:86:4e:8e:
                    27:39:04:f2:24:e3:1a:cb:1a:e1:34:7f:20:ee:d0:
                    28:90:6c:c2:f3:f1:8e:d3:f7:6b:87:81:1b:36:a7:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B1:60:76:10:85:38:A8:1E:FD:FD:91:DF:9F:A2:30:A1:18:DE:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206f36c7-1c35-3269-ae51-246289621a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b0:2d:ef:46:4b:20:fd:17:8a:5f:95:f2:fb:32:ba:af:f5:
         6b:f1:72:38:ae:9b:7f:a8:0d:bc:d6:b8:c3:f2:ee:33:a5:ad:
         87:12:ec:b2:04:0a:00:1e:10:4d:b5:71:79:97:8a:f4:b1:b8:
         32:0f:e7:99:23:a3:6f:a9:ee:4a:52:c5:2d:91:72:d9:c5:11:
         1e:b0:d6:a5:c3:be:ba:f4:d1:ed:b4:16:90:64:18:49:85:3c:
         fb:89:70:15:52:59:d1:71:e4:15:8c:8e:af:11:60:7b:f4:98:
         16:19:29:bb:24:3a:bb:e0:3d:9f:21:85:8a:5e:19:6b:2c:8e:
         f3:dc:60:78:7b:0c:cf:52:2f:5d:90:9e:2e:c5:f8:9b:a6:6f:
         44:96:fd:9a:e1:14:37:00:ad:4c:6c:61:c6:1d:d3:68:d8:0a:
         d0:df:bb:a2:64:27:d5:bf:24:d2:f3:c0:6a:ac:0b:14:60:30:
         fc:b5:e2:e5:33:56:63:de:e3:93:4f:cb:8c:31:b9:39:cb:89:
         63:b3:0d:80:6a:06:b4:14:d0:c1:6a:7c:42:89:e8:36:fc:dd:
         fd:f9:ef:45:1a:f5:fd:b5:85:db:3a:d4:16:b9:44:3a:cf:cf:
         b2:87:ee:fd:e8:2d:73:ba:9c:94:16:0c:a9:b9:22:f6:dc:0a:
         96:64:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:30 2026 by rpki-client