Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/911c01cb-d955-3b3d-a7aa-fac07f89292d.roa
File:                     911c01cb-d955-3b3d-a7aa-fac07f89292d.roa (raw, json)
Hash identifier:          e4AXwfYAbTJki8onfEyYu3XsUSoBvejLTx21PwSOb8k=
Subject key identifier:   7C:22:BD:F9:14:DA:D8:FC:15:6E:DC:1C:96:93:E4:7B:DB:BB:C4:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1F4A318E502B220B412C948C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/911c01cb-d955-3b3d-a7aa-fac07f89292d.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.216.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:31:8e:50:2b:22:0b:41:2c:94:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=5e314eb6-ad4e-44e7-8854-88e38926d834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:a2:8b:59:e3:48:d3:38:e3:7b:d6:82:60:
                    06:ad:43:1e:17:35:23:4b:e1:c0:13:ba:cb:3e:3f:
                    76:2b:1b:1c:0c:dd:70:f9:8a:11:e7:a3:96:32:10:
                    5c:a3:0f:28:9f:c4:9d:be:13:c8:05:75:90:0d:24:
                    98:f1:3b:b3:31:eb:26:9a:c8:77:03:ae:a7:82:89:
                    a0:2d:47:9e:4b:24:8e:89:94:00:e0:be:a1:40:02:
                    c5:7a:66:ff:3f:67:7a:1f:37:c1:07:8a:b7:3c:a0:
                    47:5f:a7:1a:40:66:30:52:b4:95:eb:5a:1f:e8:bc:
                    8f:78:c3:77:d1:17:c5:9c:ad:45:5a:73:de:d1:0d:
                    05:de:2e:9c:b6:6a:5a:72:8e:8f:56:a0:8d:94:fd:
                    59:86:e1:44:e1:e3:d7:af:38:89:60:fa:44:1f:7c:
                    f2:b2:b7:28:aa:91:23:83:0a:cb:b8:95:16:23:97:
                    25:3c:41:61:20:2a:9e:f9:bf:81:14:e2:46:75:86:
                    a2:99:cc:0f:d7:38:ac:05:e6:23:99:af:24:98:ab:
                    f3:a9:37:e4:10:c1:48:71:48:42:e8:d8:73:bc:95:
                    d8:54:bb:52:aa:19:ab:51:2a:ee:44:a8:82:72:c2:
                    06:0b:82:fc:00:b1:2a:94:e6:0a:d1:10:2d:d7:26:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:BD:F9:14:DA:D8:FC:15:6E:DC:1C:96:93:E4:7B:DB:BB:C4:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/911c01cb-d955-3b3d-a7aa-fac07f89292d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:43:d3:be:07:d2:02:02:89:c2:83:93:99:4a:b1:c3:f3:40:
         42:a6:a1:2d:d5:51:1a:a3:a4:f3:a7:bd:aa:e1:77:34:e3:df:
         30:24:63:5f:de:40:63:5b:ce:b6:42:a4:7c:8e:af:9d:32:2e:
         19:d7:fa:92:e6:b2:ce:9a:33:73:18:1e:3b:69:bf:c6:88:d6:
         04:d2:84:4c:d7:39:ad:d7:03:87:0d:a5:69:35:6d:49:ef:9e:
         c5:6c:f6:ad:93:02:2e:fc:50:c1:e3:d0:3f:73:c0:ea:e3:61:
         8e:0e:78:f2:66:98:50:0c:74:72:93:78:be:5a:99:64:12:de:
         ea:a4:be:f4:25:69:10:d2:ca:3c:85:34:82:36:30:24:28:49:
         e5:fd:a9:ce:9a:83:cd:cf:38:8d:a3:2c:86:82:a1:c0:20:e9:
         4c:ff:38:cc:78:da:53:27:42:48:6d:a2:5d:73:1d:4e:b9:e7:
         d5:b0:85:cf:d1:76:1e:c9:9e:76:d7:91:75:a7:f5:25:95:94:
         4c:ff:6c:d2:86:71:1e:2b:7d:ba:ea:a7:d0:e7:a9:1f:ea:eb:
         b8:4d:72:48:3e:58:48:2e:fc:fc:c6:e7:c6:ba:6f:ac:89:0c:
         67:38:3d:c8:a4:4b:0d:6d:60:6f:62:11:d4:a4:fd:ad:28:39:
         80:93:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:36 2026 by rpki-client