Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31dea028-f665-3af9-8747-1d8f1f53ad7c.roa
File:                     31dea028-f665-3af9-8747-1d8f1f53ad7c.roa (raw, json)
Hash identifier:          agKTSildimeZL3XijVmCxJMu74K19MYaJtKYQGMuTHA=
Subject key identifier:   8C:31:6F:F7:BC:FA:47:DA:42:F3:D7:31:F9:D7:E9:35:77:13:3E:CC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D19B4CC5EE9207FFE54C9DB40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31dea028-f665-3af9-8747-1d8f1f53ad7c.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16625
IP address blocks:        23.206.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:cc:5e:e9:20:7f:fe:54:c9:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=c6a3bbcb-0f4d-49b2-94f8-39a40c462416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:52:08:d9:fb:08:f6:67:04:77:93:18:1d:
                    95:3f:c6:28:d9:5e:d0:42:dc:44:9d:7d:b7:79:1c:
                    df:ec:a8:be:48:38:06:04:b2:d7:99:22:ca:16:46:
                    a8:f2:9b:c0:2c:3e:b1:c7:8a:d3:6d:58:fe:4e:12:
                    48:8f:0f:94:25:2b:96:7e:c2:89:b6:0b:02:f5:7f:
                    b6:58:a2:60:f2:95:03:cc:47:e3:ed:d0:c6:c4:03:
                    25:b8:4d:d6:0b:37:b5:60:6e:0e:99:f0:65:f0:6e:
                    e5:ee:3a:b4:bf:69:7c:41:c1:20:ee:75:ab:7d:c2:
                    d5:83:a9:b2:8e:0a:d0:1c:25:ca:51:4f:9c:63:ea:
                    8a:74:87:dc:6b:7a:e1:79:10:8f:69:45:dd:15:64:
                    16:0e:7d:88:ec:98:71:e9:59:8c:00:10:46:15:14:
                    08:fd:20:79:f1:3c:42:f3:2f:3d:ce:d3:25:d6:f0:
                    55:bd:d2:ed:92:93:32:f1:fa:5d:c2:a3:21:40:02:
                    9d:aa:b2:86:b9:20:90:17:19:1c:c6:26:46:6c:b3:
                    8e:a8:ce:57:a3:91:e4:07:2f:0a:16:38:de:a0:22:
                    cb:81:8b:d8:90:0b:33:48:93:c5:83:7d:26:4c:a0:
                    b9:e3:90:ec:26:08:fd:97:f0:ef:cb:1f:20:95:ab:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:31:6F:F7:BC:FA:47:DA:42:F3:D7:31:F9:D7:E9:35:77:13:3E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31dea028-f665-3af9-8747-1d8f1f53ad7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:de:55:33:ca:4f:14:16:fa:0c:62:f8:cf:3e:82:94:bc:
         c5:0f:0e:7e:01:8a:08:5e:de:c8:1b:31:2a:80:1b:23:c7:3a:
         41:08:0a:a9:82:85:a7:05:68:2e:5c:28:ee:f5:02:e1:5c:b8:
         15:5c:5c:53:84:f7:d9:86:75:34:c8:5b:96:d8:f6:c0:38:f8:
         2d:e8:48:ed:b4:5b:aa:7d:54:4b:99:e8:e2:5b:a4:59:6d:67:
         d1:1d:c1:19:48:90:36:6b:04:58:ba:87:f9:d8:04:e7:42:69:
         a5:c1:b7:16:a3:ba:64:7a:e0:88:db:0a:51:55:0f:06:c4:8b:
         fe:00:43:34:46:28:3d:11:2f:b1:ac:29:de:cd:62:a8:48:a5:
         bb:c6:7c:bb:1d:ca:e9:07:4e:a3:16:74:a3:1b:f2:dc:d8:39:
         0b:c8:c5:de:a0:d1:06:8b:a0:34:25:75:23:7b:50:8f:2e:d6:
         64:fd:9d:88:c9:83:15:0a:b7:4d:03:fe:62:04:ae:f0:e7:99:
         c5:a8:08:61:67:29:5f:df:aa:d4:ae:24:b4:24:a8:fb:45:24:
         be:e0:5a:31:72:f7:57:9e:0a:70:55:2f:bf:07:a6:ab:0c:ee:
         1b:52:9a:3f:26:d7:a6:8b:a0:55:3c:1a:fb:ff:94:cc:4b:86:
         b8:11:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:00:19 2026 by rpki-client