Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dbb0c77-43a9-3e4a-bf01-cf4995d8b1e2.roa
File:                     6dbb0c77-43a9-3e4a-bf01-cf4995d8b1e2.roa (raw, json)
Hash identifier:          wSyXCA0rCP1GyidR4ejlctfK8ZJFVzvtPA1OUkwKqh8=
Subject key identifier:   13:E0:CE:FD:E9:97:5E:B6:37:BC:92:A1:33:17:4E:C4:79:AB:FD:7F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1B1A23020C8B744B90240980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dbb0c77-43a9-3e4a-bf01-cf4995d8b1e2.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     33650
IP address blocks:        23.212.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:23:02:0c:8b:74:4b:90:24:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=31d1ca5a-98c3-4abd-b40a-1b153b8c56e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:32:1d:d5:9c:ee:18:2e:f3:75:87:81:d4:
                    f5:6c:af:0e:b3:83:47:73:3c:d7:f2:67:95:fa:a3:
                    cf:d7:ef:94:92:d6:55:00:f4:10:8f:cb:1a:19:90:
                    d7:d8:87:f9:1b:12:6a:f3:3e:5d:d1:f5:9c:c2:c6:
                    18:cc:73:66:56:21:9b:b0:6a:d5:06:61:a8:69:67:
                    85:73:56:7d:c2:be:e1:fb:6d:b1:c9:25:e7:94:8a:
                    fc:c2:1c:bf:97:62:09:19:a9:dd:1b:5e:23:82:32:
                    87:90:a7:f4:fd:33:34:da:7a:47:ef:55:a1:af:06:
                    0c:3c:8b:a8:24:c9:43:b4:77:82:d9:07:d3:a0:ba:
                    27:82:30:9a:9e:50:b5:7c:ad:58:21:9f:20:be:c5:
                    fd:e7:c4:a1:77:f6:10:72:d9:7f:1c:67:63:c1:d3:
                    f3:91:35:1a:73:37:8e:02:88:68:3f:7e:13:84:8f:
                    02:23:7e:5c:02:bf:af:86:47:49:ba:82:a6:85:41:
                    28:76:6b:8f:b9:53:8c:dc:d5:be:fd:48:61:c4:42:
                    59:91:96:53:41:de:71:22:5e:43:0c:2e:ab:f6:81:
                    55:7a:a0:9a:f0:b2:64:f5:48:8a:e5:9c:74:94:d8:
                    ec:2d:5c:9d:e3:f6:f8:77:2b:10:11:07:0c:58:7b:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E0:CE:FD:E9:97:5E:B6:37:BC:92:A1:33:17:4E:C4:79:AB:FD:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dbb0c77-43a9-3e4a-bf01-cf4995d8b1e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:02:e6:55:d3:53:b3:56:1e:e5:96:a3:db:a4:de:03:83:3a:
         80:14:f2:8d:1e:d9:7b:17:af:c6:8f:b1:ed:d8:79:09:3a:5b:
         85:ec:59:13:c1:d3:b5:06:6c:a1:36:d7:ca:bc:a6:60:cb:f0:
         33:5a:97:1c:26:8f:1e:0a:37:a6:f9:dd:18:09:42:6b:37:e2:
         6c:d8:35:6e:30:ea:34:5c:a3:cb:fd:e7:9b:b4:8d:b2:ab:70:
         21:e0:d2:8e:48:7a:b6:1c:51:28:8e:0c:0a:dc:46:32:c6:ae:
         93:3f:66:40:7b:0d:29:88:9e:50:70:8a:e8:e6:2e:c1:cf:1f:
         60:2c:41:66:c1:e8:f5:33:ea:98:e8:08:42:07:ef:39:dc:7d:
         4a:8b:20:cb:ac:fb:ee:a9:6d:a2:f2:fd:b9:68:b5:41:c0:bd:
         d4:07:30:8c:62:22:38:3d:4d:6e:22:6b:ba:03:05:9b:c5:f6:
         d3:5c:11:75:a5:a7:b1:ac:9c:2f:0e:01:ac:4d:2d:6d:9d:f2:
         fe:96:49:1b:14:a0:3b:f4:76:04:f1:ab:dc:f2:5b:b3:0d:08:
         17:3c:56:3a:3f:05:b5:9d:43:ae:2a:c7:95:0e:b3:08:ff:3b:
         68:19:06:24:58:9b:22:03:6c:53:bb:f7:86:3c:5b:84:b0:0e:
         ab:6d:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:10 2026 by rpki-client