Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/566915fa-8f3f-3758-860b-0e99ce81daa7.roa
File:                     566915fa-8f3f-3758-860b-0e99ce81daa7.roa (raw, json)
Hash identifier:          OSMsRbdt4CTcXbdEko0oakO9/ReOz9qMwy2aAgWvrDY=
Subject key identifier:   BD:C3:FF:23:E3:68:A9:F0:1C:FC:1E:4B:CD:DB:55:12:C6:85:25:E1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F3E47F6C618351DA6134C0100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/566915fa-8f3f-3758-860b-0e99ce81daa7.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     16625
IP address blocks:        23.36.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:f6:c6:18:35:1d:a6:13:4c:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=431f8017-6058-416c-98a1-977c5e9f2afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:69:3b:8b:14:b3:d8:f9:fd:b6:91:94:c9:
                    7e:d8:05:b7:90:0e:37:83:03:64:cc:2a:9e:3f:58:
                    f5:60:91:39:54:4f:60:39:41:39:78:99:5b:21:a9:
                    0f:a0:25:79:73:ba:fd:87:14:f3:0c:7b:60:9c:81:
                    38:91:53:b1:e7:20:f3:0d:e8:6a:85:03:d0:6d:c2:
                    43:b9:69:68:0b:99:a4:9e:c4:5a:d5:ce:38:6b:7e:
                    10:25:6d:59:5a:76:bb:ee:65:8f:74:6e:ea:43:ea:
                    b4:1d:e5:29:dc:30:42:4f:46:94:d2:e8:b0:6d:37:
                    34:0e:88:5b:cc:e2:c4:1b:af:b3:d7:f0:37:1d:a3:
                    75:9f:58:9d:61:e1:f7:99:88:78:e5:b1:05:72:b4:
                    e5:cd:75:a6:9d:c9:3a:3c:36:ea:95:89:ac:20:f1:
                    e8:dc:66:6a:67:4f:6b:9d:61:ad:1d:be:9c:ad:ae:
                    7f:df:74:1a:04:86:83:ca:35:14:48:4e:0d:27:bd:
                    3e:73:e4:6e:04:ee:58:a6:85:a7:9a:50:7d:ec:eb:
                    e1:1f:7c:40:a0:90:10:7e:9a:25:bb:f9:61:05:ea:
                    4b:77:6c:eb:46:04:be:2c:ae:7a:5c:9f:09:6b:79:
                    a2:e8:a1:46:37:d2:8e:7a:47:89:31:0a:36:9c:7b:
                    45:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:FF:23:E3:68:A9:F0:1C:FC:1E:4B:CD:DB:55:12:C6:85:25:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/566915fa-8f3f-3758-860b-0e99ce81daa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3b:71:25:bf:9c:be:ca:dc:51:a0:f3:c3:1f:e1:36:6d:77:
         cf:27:bb:39:04:6b:3e:b6:7e:5b:c0:b1:11:9c:67:a7:ab:1e:
         ed:ac:a5:a3:49:43:4b:9c:d2:44:5f:b5:f3:d3:da:22:e5:e1:
         39:4e:37:07:7a:99:62:61:c8:f9:d0:aa:55:bd:06:78:2d:8a:
         7a:b3:74:43:bd:83:9d:f9:28:eb:be:61:95:cd:e1:dc:99:e4:
         b5:b3:62:06:62:9a:cc:9d:40:91:37:10:c4:a8:91:f7:3e:ae:
         45:82:41:90:fc:51:3b:05:86:e3:17:dc:74:be:c2:58:03:c6:
         01:40:d7:7f:a5:21:7b:0f:97:3a:6e:0b:d9:11:a7:ff:94:e7:
         e5:89:be:03:b1:23:11:3b:95:3e:54:91:f3:dd:51:0c:4d:bc:
         bd:15:59:e8:ed:26:89:fe:78:37:72:56:3b:01:23:a4:71:65:
         15:dd:fe:3e:17:47:c4:d0:65:cd:ed:32:7b:5d:13:51:2c:e1:
         15:77:e4:99:af:b0:62:07:d6:48:d2:c3:11:75:56:b5:89:ac:
         10:65:4e:7f:c2:31:ff:ff:72:17:c5:2d:70:7b:fb:8d:eb:a9:
         89:ff:1f:91:ff:bd:5f:c7:ee:69:15:9f:94:29:a4:51:78:6d:
         53:bc:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:48:10 2026 by rpki-client