Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa7e9c8a-ae0d-3aad-af5b-d7ddfa1bcae0.roa
File:                     aa7e9c8a-ae0d-3aad-af5b-d7ddfa1bcae0.roa (raw, json)
Hash identifier:          FER+O2EgOmlqiZ2Y6ME6kwuE8kbJu9gHcdby9pVSfcs=
Subject key identifier:   51:EF:3E:70:A0:67:85:C8:7D:80:B3:6E:6D:C4:4F:D5:67:1B:CB:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBD05ABA38B6B1250A1292580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa7e9c8a-ae0d-3aad-af5b-d7ddfa1bcae0.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.44.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:ab:a3:8b:6b:12:50:a1:29:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=736033dc-4155-40db-a528-83e418a26a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:c9:1c:22:83:2f:3f:89:66:8b:aa:16:bd:
                    73:35:03:6e:10:0e:e9:0a:c8:dd:10:a5:89:5f:84:
                    f9:37:3d:8d:20:9d:c0:34:18:bf:4f:ed:03:6d:bd:
                    31:6e:a2:be:9a:44:b4:8f:32:39:4e:d1:a1:8e:24:
                    70:56:23:26:39:7d:70:a7:84:52:0a:d5:2b:51:10:
                    67:bf:88:13:e1:c1:f2:ac:9a:18:ec:dc:9b:3f:2d:
                    5b:60:17:3f:b4:14:52:b2:43:3d:2c:0f:2e:7e:58:
                    fb:e5:99:98:dc:42:a6:a1:8f:6f:b4:10:23:b1:af:
                    dc:d8:55:fe:71:61:fd:7c:78:3e:d9:4c:05:4f:27:
                    7e:fa:93:75:80:95:d1:82:5f:e3:19:8c:1a:48:3b:
                    ba:3f:15:08:78:3c:e7:b9:c3:e8:47:5d:97:2c:4d:
                    56:a1:60:80:b4:eb:23:53:4d:6e:4a:c4:2a:f0:f2:
                    92:b3:fd:b8:70:74:8b:32:a2:38:38:cd:d2:60:36:
                    6b:49:d7:7e:b8:4b:76:5d:ee:1a:e8:9e:72:18:8b:
                    aa:0c:d1:6e:e8:78:b8:3c:4f:bb:42:ca:02:1b:30:
                    3f:80:7a:40:56:79:b4:82:34:3c:2f:7e:bb:ab:b6:
                    50:da:eb:5b:ab:0d:7f:38:33:13:9c:55:0b:5b:e4:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EF:3E:70:A0:67:85:C8:7D:80:B3:6E:6D:C4:4F:D5:67:1B:CB:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa7e9c8a-ae0d-3aad-af5b-d7ddfa1bcae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:08:c6:a4:1c:e5:5e:31:f3:b3:cb:7c:58:33:df:ac:74:2b:
         c5:54:21:fc:e3:87:8d:c6:14:40:3f:68:25:8c:0c:30:27:a9:
         8c:2e:59:49:35:59:2a:6a:73:60:19:56:fa:0a:10:4b:e5:d1:
         fa:40:2b:70:7f:9b:c4:30:18:0d:dc:72:62:ac:32:77:db:5f:
         7a:98:1b:89:35:ab:66:98:82:32:19:c7:75:ff:96:85:9e:52:
         7e:41:00:7d:f7:b6:81:9e:dc:c8:ad:73:f8:f2:08:13:82:da:
         f8:a5:91:58:17:8f:d5:b8:c2:0f:92:aa:aa:9b:a2:cb:cb:5a:
         77:df:ff:1f:48:16:26:fe:92:02:a8:85:5a:c0:35:29:11:1a:
         94:91:c1:9d:a9:78:44:37:2a:99:5a:51:54:d5:a3:d5:2b:dc:
         eb:66:23:34:cb:c1:22:b7:23:a3:da:95:58:43:19:9b:ea:50:
         06:f3:f2:6b:eb:a6:45:1b:0b:21:7b:aa:6f:35:66:5a:e9:93:
         00:f6:9f:cb:74:ac:a9:0f:4d:8b:4b:8d:a0:70:50:31:18:79:
         2b:98:e0:86:c0:73:91:c9:c2:5a:94:2e:e3:8f:70:c1:de:39:
         e8:9c:ea:51:fb:62:a0:a5:fa:a4:18:39:9a:1f:13:19:4c:33:
         20:4c:90:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:36 2026 by rpki-client