Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69c6bc80-2881-334b-8bec-b03e32f32ffb.roa
File:                     69c6bc80-2881-334b-8bec-b03e32f32ffb.roa (raw, json)
Hash identifier:          GRtDciICY/Ip+qfziWwuK8diZRoz+cdaLec5MgAgu8w=
Subject key identifier:   48:27:D2:5E:42:56:D9:A2:E2:35:A0:7B:68:8B:54:41:D7:63:D7:4E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D24E131B23E4DADCC44102880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69c6bc80-2881-334b-8bec-b03e32f32ffb.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     16625
IP address blocks:        23.220.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:31:b2:3e:4d:ad:cc:44:10:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=e0747ff2-cb78-439a-96ae-9848f893d782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:8a:33:fe:88:3f:a9:ba:5d:27:a1:05:fe:
                    d5:59:47:20:8b:b8:f2:86:5a:3e:b1:24:93:02:ac:
                    a0:e1:83:c9:41:00:10:19:ca:55:11:cb:ac:00:d1:
                    db:86:04:a3:58:44:a2:61:39:23:ff:c2:25:da:bd:
                    58:96:46:e3:43:ed:33:99:c7:09:d1:6a:7c:ac:ef:
                    68:fb:50:21:87:8a:df:72:e7:2c:ab:5e:65:28:8d:
                    f8:9f:fb:78:fe:a7:7f:89:48:d8:7a:08:eb:86:71:
                    16:54:27:62:22:ce:6c:bd:a8:f9:48:9e:ba:52:57:
                    08:95:13:f8:b0:e7:af:6b:0c:a0:cc:20:95:8b:95:
                    f5:42:fa:be:c3:61:12:2e:9d:c8:e5:17:ab:88:47:
                    15:19:26:ed:3d:b5:9d:01:31:e4:ce:c0:26:37:52:
                    94:06:da:e4:b4:9e:c6:26:da:ed:f5:13:27:5c:52:
                    84:ed:39:ae:85:af:96:74:72:94:eb:a6:9c:a6:8f:
                    9f:6a:d0:ca:d4:9e:c5:bc:5c:2f:ed:65:4a:41:0f:
                    67:4f:51:94:fa:8f:e1:c2:00:52:fc:44:49:fd:77:
                    aa:e6:10:6e:e1:d1:52:83:33:07:5f:62:79:f9:4b:
                    ee:5e:fe:05:e5:d2:a8:15:07:e2:4f:ed:ea:0f:d4:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:27:D2:5E:42:56:D9:A2:E2:35:A0:7B:68:8B:54:41:D7:63:D7:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69c6bc80-2881-334b-8bec-b03e32f32ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.220.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:9c:f7:69:a6:38:88:dd:96:ba:13:af:5f:c4:4d:32:58:
         b7:b5:16:99:14:d0:b4:09:99:1b:6c:fc:e8:7d:47:ac:b0:b3:
         96:93:3a:6b:91:dd:19:ca:4f:2a:f4:a9:99:20:ca:c2:93:40:
         bf:10:66:1a:a4:02:e0:f3:30:cf:02:38:b5:1e:ad:21:5c:b8:
         83:f1:f8:fd:6f:44:dc:67:cd:f6:4b:9d:1f:60:a9:00:ab:5c:
         6f:0a:7a:ea:a5:7c:03:25:c0:ee:b0:c2:d9:78:b0:30:cb:15:
         c9:75:0b:9b:60:fe:3f:76:10:85:c5:77:58:96:5a:19:3d:cc:
         70:f3:fd:05:d2:02:f3:9a:35:de:e9:71:3f:ed:10:49:7c:9f:
         ba:d4:b9:5b:23:5d:2c:f4:16:4f:f1:67:aa:5b:92:6d:34:13:
         73:a2:bb:a6:8c:a2:e3:3c:d7:42:f0:2a:55:78:74:00:4e:95:
         6f:93:9b:71:75:40:e4:74:bf:09:e6:92:45:ab:01:00:13:99:
         a7:89:73:f0:56:2f:8e:68:11:78:4e:62:7c:b9:90:28:2b:f5:
         31:68:25:00:1e:39:2c:a2:dc:ff:49:0a:09:e2:76:5d:08:c2:
         3e:54:c6:34:f2:a0:1b:8e:a0:42:71:19:dd:12:82:cc:43:e9:
         7a:71:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:48 2026 by rpki-client