Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2278d8d4-5af5-3e37-874f-bb173adefee6.roa
File:                     2278d8d4-5af5-3e37-874f-bb173adefee6.roa (raw, json)
Hash identifier:          5KAXshaozOB4kXCobpxemIRagR/F+S8wnO7IKTgJ/D4=
Subject key identifier:   B5:28:BB:4B:7B:5E:4B:51:84:72:6C:31:8B:5D:10:21:0A:C2:14:B2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1B1A24B0FD6F6B42D5C4ECC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2278d8d4-5af5-3e37-874f-bb173adefee6.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     16625
IP address blocks:        23.213.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:24:b0:fd:6f:6b:42:d5:c4:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=492f2699-df93-401a-bdb8-de37e66bebcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:9c:df:40:33:04:68:26:c5:5a:ce:fd:89:
                    14:90:b7:69:6d:a1:4a:d4:49:95:81:f5:8e:28:e5:
                    da:8b:93:92:ec:4f:c6:7f:73:e1:e7:30:cb:d0:96:
                    0f:e1:ca:e9:47:a1:e7:85:1a:6d:bf:7d:fa:d6:5a:
                    01:11:d4:3a:89:a4:ae:54:d6:26:ea:d7:ab:ce:cc:
                    49:90:03:9c:e9:30:73:0b:e2:fc:2c:b8:3c:ca:2b:
                    d3:67:c6:99:b7:80:fd:61:ac:cc:94:26:35:8e:ac:
                    f1:d0:55:35:2b:03:f2:97:4b:60:49:0c:1e:5d:cf:
                    2b:3d:8b:79:59:ba:9b:ff:d5:af:04:98:1c:4d:20:
                    aa:fd:5d:8c:cf:db:5c:63:1a:96:d6:60:09:6f:63:
                    d5:8f:d4:d1:f6:38:05:17:65:c8:2f:24:b7:b4:06:
                    7e:a6:87:55:63:54:a9:43:14:38:5e:a8:de:d1:7d:
                    7c:5e:a1:f1:4a:a2:72:14:20:95:26:0c:d9:d0:f4:
                    d9:25:a7:36:08:5f:d9:97:4a:ef:3d:88:5a:bf:ca:
                    2f:ee:31:14:d4:14:b9:69:f4:45:7c:73:f1:99:6f:
                    7c:1e:45:a4:d3:22:87:51:2f:fe:8a:9a:49:e9:72:
                    e7:45:69:9d:c3:85:b2:5b:8f:ec:52:c6:dc:7a:1b:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:28:BB:4B:7B:5E:4B:51:84:72:6C:31:8B:5D:10:21:0A:C2:14:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2278d8d4-5af5-3e37-874f-bb173adefee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1f:e4:09:54:00:57:95:60:34:0f:17:fb:f0:82:5b:f9:66:
         bb:b3:28:49:c6:37:09:5b:9c:fc:c5:3d:17:50:fc:9d:9d:bc:
         e0:58:67:ec:08:c9:95:a6:e2:6c:bc:13:cd:13:dd:ef:01:c2:
         a3:33:f8:72:78:bd:ee:bb:6b:51:9f:b5:e8:8f:25:04:23:e0:
         2b:01:c5:a9:b4:c0:bc:c4:b9:d4:da:b5:a4:0a:90:4c:30:77:
         78:80:62:de:dd:3b:c3:61:a2:0e:de:98:54:28:bc:22:e6:29:
         82:37:01:e1:52:ed:08:aa:46:a3:40:8b:78:c8:fd:c6:36:7f:
         24:6a:a8:a7:b3:58:4a:1c:71:df:45:84:3e:b1:15:2b:1e:19:
         d0:2e:2a:a6:da:d1:dc:26:57:f2:8b:45:a0:aa:cd:ea:5e:53:
         b6:00:d0:90:17:a6:da:4f:60:1a:89:c9:37:9d:60:57:ef:be:
         bb:3e:c5:65:15:68:72:03:26:da:62:a5:63:dc:46:97:28:25:
         16:72:d5:e6:7b:18:ec:d6:cf:5a:3c:c1:76:f3:cd:1f:c0:59:
         f0:2b:17:58:f2:8d:c0:c5:38:85:90:a1:3b:c0:93:2a:90:b0:
         b5:c9:c4:25:09:90:b3:67:a5:05:06:a4:cf:ec:7e:ca:ee:46:
         02:ea:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:46 2026 by rpki-client