Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7391cab9-2424-39f9-a3ce-271f5c1fd2b0.roa
File:                     7391cab9-2424-39f9-a3ce-271f5c1fd2b0.roa (raw, json)
Hash identifier:          ISVe7gOk2MXKK9AgdseG4ryYBOaGC2V3ksCzYvyzTjM=
Subject key identifier:   B9:B7:F6:DA:AC:86:FD:6A:86:AA:AB:62:2C:24:AD:0C:6D:5C:D4:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBD05ABD2B5F9D203D6897100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7391cab9-2424-39f9-a3ce-271f5c1fd2b0.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.44.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:ab:d2:b5:f9:d2:03:d6:89:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=4e6f60f1-7896-4502-b54c-5b5299bf4b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:77:64:0c:5d:fd:82:0e:3c:8c:18:73:ec:25:
                    c6:ea:90:44:54:eb:87:61:d6:b3:a3:99:5a:5a:2b:
                    9f:30:ad:65:a2:7e:67:d7:26:d4:21:a1:1a:c2:c6:
                    20:ff:f3:af:11:f5:9d:01:34:44:94:17:75:7d:3b:
                    c6:e6:da:a2:a7:77:31:75:a3:ef:c3:6f:65:2b:83:
                    a7:80:ba:74:ce:a3:a8:39:ed:e3:1a:c0:de:fb:6f:
                    c1:de:d9:0a:49:4d:df:90:1e:28:87:af:9a:a2:68:
                    d6:37:fd:d9:3a:26:86:d7:c3:b6:61:6a:bd:d0:56:
                    ef:7e:b5:a2:4a:eb:e7:05:63:02:15:92:94:e8:b1:
                    ad:7c:2a:d5:d7:1f:c9:04:e8:98:e4:08:bb:92:f6:
                    f4:e5:ef:4b:ce:f7:8e:21:02:dd:63:69:45:0d:68:
                    e1:8d:9b:f6:c7:f8:8c:e7:0e:5f:bc:bd:73:c4:56:
                    71:8c:fa:f3:aa:8f:fe:38:83:3e:50:80:d7:53:95:
                    2d:01:a5:ff:3c:0d:43:9e:39:8a:c6:a5:43:e8:5c:
                    09:31:2d:55:d8:52:42:bf:3c:d6:85:79:49:71:8d:
                    d5:8b:12:12:57:57:d5:ac:fb:29:c0:68:38:ba:81:
                    df:77:74:09:a9:14:7f:aa:16:56:4d:45:aa:7c:9c:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:F6:DA:AC:86:FD:6A:86:AA:AB:62:2C:24:AD:0C:6D:5C:D4:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7391cab9-2424-39f9-a3ce-271f5c1fd2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c9:ed:6b:59:7e:78:cb:4b:76:60:0d:7d:9c:48:45:95:e8:
         dd:ed:0a:41:23:cc:10:87:91:43:33:5e:21:47:96:c2:57:1f:
         12:98:dd:b2:d2:6e:7d:e2:09:09:73:af:cd:df:0c:8a:ec:2a:
         63:eb:38:88:04:6d:ec:af:83:28:68:6c:f7:9b:01:73:08:33:
         d1:60:51:dd:ed:a1:f8:df:7a:2f:36:f9:74:0f:95:d8:91:ba:
         1f:44:19:e5:0a:04:de:fb:cb:fb:19:3a:0c:be:98:f4:1a:49:
         4d:95:42:2a:d9:63:fa:6c:22:ad:7f:b3:c2:59:f8:1c:e5:a6:
         d2:34:d3:d9:57:4c:a8:4c:55:c1:7c:2c:9f:1d:ef:14:55:f7:
         a3:99:14:79:54:ee:61:46:1d:30:91:c2:61:bb:51:61:b9:c9:
         1b:10:74:c8:2c:1a:a2:95:8e:b7:86:cd:ba:2f:fa:9c:3e:4d:
         31:90:4d:36:e7:f0:bf:46:23:40:47:5a:3e:27:3f:5d:2b:02:
         95:91:26:dc:14:b8:d4:c0:56:fc:fd:35:f5:3c:33:c9:c7:9a:
         bd:74:9d:0d:39:8a:06:d9:f5:67:bf:67:34:a8:78:6a:84:f7:
         04:b4:9d:24:db:f0:30:d5:d6:7a:f6:19:37:7e:ed:c6:a6:2b:
         35:2d:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:07 2026 by rpki-client