Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d376e0b-e530-3c71-9c58-30e99e36c4cb.roa
File:                     7d376e0b-e530-3c71-9c58-30e99e36c4cb.roa (raw, json)
Hash identifier:          w8HAOZByPpqSAiTWqMtbR7pnxKey5cyy5JkSR23xyFs=
Subject key identifier:   CE:AB:F8:CB:46:12:C0:87:C5:C6:AA:9C:F6:F4:34:D5:D5:F2:1A:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DB0758C8CC0E725714909F500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d376e0b-e530-3c71-9c58-30e99e36c4cb.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     16625
IP address blocks:        23.198.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:8c:8c:c0:e7:25:71:49:09:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=71a2ea19-674b-485d-9d85-917874f1f04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fc:b8:d4:9a:e3:94:32:f3:2a:f5:b8:b4:8d:
                    34:bc:a0:76:9d:0b:ab:9d:c7:a5:0c:ba:a1:5e:59:
                    49:7d:df:7d:04:d5:2d:35:51:e4:c8:64:b2:e1:4d:
                    56:bd:ff:ac:84:e7:d8:4e:43:99:25:cc:38:12:44:
                    03:b2:cd:9f:c0:71:ed:ec:be:3e:dc:fc:9b:ef:f3:
                    ac:22:c1:67:97:5f:5d:76:19:fd:4d:b0:d1:35:58:
                    05:f5:0c:e5:5d:d7:a8:53:7f:e6:39:78:d0:ef:b5:
                    2b:dc:35:7c:44:03:37:43:8d:c8:af:33:1a:7f:1a:
                    ab:5d:29:8f:9b:fe:86:0b:4e:f0:58:77:54:cd:c7:
                    75:2d:d6:d5:37:97:3e:15:5e:b0:c5:ec:8b:2b:be:
                    82:13:78:27:c9:da:56:80:cc:22:96:22:ef:bc:87:
                    22:b8:05:ee:66:88:34:52:a3:4c:d2:08:31:c2:ca:
                    8c:a7:86:92:4a:b8:70:3d:af:ea:ad:c7:fb:5a:25:
                    b5:d2:eb:49:cb:67:6f:17:de:90:68:2b:54:b5:86:
                    7f:35:56:21:6b:0f:fd:72:12:9a:7e:08:bc:d4:38:
                    30:ce:cc:11:30:0d:86:80:a4:f3:be:3e:c0:cc:db:
                    51:d4:55:03:64:f9:e8:be:83:18:36:f4:a8:4d:08:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:F8:CB:46:12:C0:87:C5:C6:AA:9C:F6:F4:34:D5:D5:F2:1A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d376e0b-e530-3c71-9c58-30e99e36c4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.198.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:14:46:3d:4f:d3:fc:de:7b:95:a3:6e:fd:f6:a5:78:88:
         e9:dc:e7:dd:35:ed:0b:59:6f:ce:5e:d5:40:89:33:77:46:6e:
         53:c7:d8:09:d3:1b:82:51:34:3e:22:18:d7:0b:b1:86:85:38:
         73:18:81:a2:f8:0a:92:b1:df:1d:73:91:be:81:02:79:4f:b0:
         0b:b1:be:16:c8:b8:71:50:74:e1:28:95:02:8d:d3:f1:ee:cb:
         5d:7a:5b:aa:d7:b3:48:18:6e:bf:f9:70:0b:32:6d:06:fd:d0:
         2e:9d:b3:eb:6a:d4:2c:ba:cc:84:fc:50:3b:a4:30:41:04:5f:
         f8:ef:68:19:a6:6c:a5:5a:77:33:30:54:6e:a1:03:f1:c6:d5:
         1c:9e:4d:9e:4f:2b:83:6d:f2:08:3d:68:d4:c5:2b:fa:55:27:
         71:52:2d:76:42:da:73:84:3d:a2:c7:77:7e:26:28:06:cc:fb:
         bb:22:5f:02:2d:70:c1:ac:e3:6c:b7:46:2e:43:7f:55:6d:7c:
         31:91:c0:71:98:93:40:2f:2a:25:63:97:fd:b4:6b:1f:78:67:
         42:10:4c:92:9b:6d:a5:fa:3d:04:80:95:ee:34:18:27:0f:5d:
         1f:54:1c:56:3c:df:37:f9:b5:bc:ed:0e:bc:1f:3f:e5:f7:ca:
         6d:9b:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:29 2026 by rpki-client