Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95325eb5-07a5-306f-b719-bcbd324b7d0e.roa
File:                     95325eb5-07a5-306f-b719-bcbd324b7d0e.roa (raw, json)
Hash identifier:          Ea4m0udkVtjElxMfZuKAz+bpB3UZgCAOw1OuXxuhSE4=
Subject key identifier:   BA:83:40:63:EE:8F:D7:CA:C8:8F:FB:B9:BD:6E:9D:77:94:E8:6E:68
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F480D49D7E5CBE296AFA7C280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95325eb5-07a5-306f-b719-bcbd324b7d0e.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        23.52.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:49:d7:e5:cb:e2:96:af:a7:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=830de82e-6593-4410-af57-dbfe1aceb6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:94:98:16:ff:b1:8b:42:0e:df:fa:55:5a:
                    ed:f2:4e:c9:ba:89:7c:1d:1c:1e:ef:b4:b4:d3:d4:
                    94:e9:01:78:f3:0f:06:fb:a1:20:28:ab:c4:49:32:
                    6c:ed:5b:15:af:03:fa:ad:47:d3:eb:1b:46:9e:a9:
                    2c:66:69:be:a2:ff:c0:f7:a6:02:7e:6b:10:3b:fd:
                    55:cf:8e:02:eb:9a:00:c5:45:9c:ee:e9:58:dd:13:
                    25:c9:f7:f9:98:20:f7:22:49:30:c5:bc:f4:33:04:
                    bb:40:a1:a7:ca:e4:98:ff:17:f0:ae:18:4b:ab:91:
                    44:59:5f:f8:20:d6:b2:b4:94:db:1f:8b:d8:39:ff:
                    13:2a:cd:b2:1e:81:0c:75:7b:ab:87:2c:a7:3a:05:
                    9b:54:13:97:ef:8b:3b:2f:66:92:99:4c:45:a4:ba:
                    95:8b:1f:10:41:15:f1:51:06:4b:46:fd:e5:15:fa:
                    eb:74:70:5f:56:f8:81:3f:db:e7:e5:c8:8b:df:12:
                    9e:62:e0:01:64:8a:20:5e:b8:d1:77:8d:40:cc:35:
                    6c:67:a0:76:09:4a:f7:3f:9d:c3:43:83:62:b9:43:
                    cc:1e:6a:d4:ab:9e:e0:b5:e0:ba:a7:d6:10:4d:3f:
                    1a:f1:a8:0b:43:60:d2:64:a7:13:cf:4d:18:20:14:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:83:40:63:EE:8F:D7:CA:C8:8F:FB:B9:BD:6E:9D:77:94:E8:6E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95325eb5-07a5-306f-b719-bcbd324b7d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:71:0b:ad:a3:68:76:17:c0:c9:c7:74:93:63:30:a0:45:b5:
         d4:d7:40:0d:bf:47:99:dc:3d:01:a8:0f:9e:0f:ea:e1:70:75:
         81:76:da:31:35:cf:ef:0c:c9:66:c0:12:a4:eb:c6:ac:82:ea:
         b1:e1:19:10:d6:86:6a:75:91:3c:04:85:32:54:f9:fb:e3:bf:
         c1:24:93:94:88:59:08:f2:cd:2e:c4:d0:c5:ff:d9:f0:00:e3:
         89:2c:63:e5:bb:dc:0e:24:d7:01:3f:76:c8:82:29:4e:b9:c2:
         26:c8:ad:b7:5c:bf:d6:20:85:8c:b0:fb:5e:3a:28:d6:bc:39:
         87:76:e3:23:0f:da:e8:62:77:5f:86:f6:b2:db:86:72:b8:b1:
         90:27:e7:d9:d6:e9:1c:30:06:f0:27:f7:64:88:9f:94:e2:12:
         b5:eb:19:c4:ab:d5:63:ac:c4:5f:a6:73:79:d6:81:a4:36:be:
         c6:b4:23:85:d3:4a:af:9d:72:20:a4:5b:41:e2:a6:e5:33:c1:
         97:04:6a:8e:37:9c:4b:fc:c4:9c:9b:c7:c1:93:93:58:e5:60:
         c8:84:f6:cd:8c:c2:62:12:4a:fd:c8:c1:8e:09:1f:03:38:3a:
         bd:b5:25:cc:cc:2c:67:43:de:51:9e:01:26:59:23:86:32:3a:
         16:3d:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:09:23 2026 by rpki-client