Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba2e2b9-cfd9-36c9-9414-48a894d0a0f8.roa
File:                     aba2e2b9-cfd9-36c9-9414-48a894d0a0f8.roa (raw, json)
Hash identifier:          VTrXst3vNl3O29ykhRJq/d8AgPzH0vat1GtXyvM6x1w=
Subject key identifier:   2F:BB:D3:79:1D:67:F7:18:1D:7D:30:6C:25:79:5F:16:64:B7:A1:9F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DB1DAD46E7D1911EC14359F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba2e2b9-cfd9-36c9-9414-48a894d0a0f8.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.192.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d4:6e:7d:19:11:ec:14:35:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=72ee4206-616f-4b61-807b-6a955b810830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:e3:61:47:c7:a0:06:e9:34:cd:ff:d5:b0:
                    34:88:5e:4b:44:5b:b6:a1:5f:81:f7:f0:f4:48:f6:
                    a8:63:08:8c:ac:b0:40:b5:72:1c:1e:f2:5f:0e:95:
                    18:06:c6:ba:74:49:a7:42:fc:36:4e:4e:e3:f8:f1:
                    3b:bc:58:02:8d:ab:f5:67:6c:ff:98:9d:37:4b:a8:
                    74:3d:f0:45:56:e6:e2:48:57:a1:b5:ea:2b:02:6a:
                    ce:93:71:87:9a:fa:97:4e:d3:27:c7:2c:13:de:5d:
                    97:fe:56:5c:78:e0:67:e2:93:b5:eb:0b:68:f3:24:
                    c3:38:78:da:ae:96:91:37:1f:89:e2:d0:ba:f7:be:
                    b5:28:55:f1:0f:a2:c3:bd:ab:fd:27:08:99:ea:fe:
                    dc:7e:2b:1a:96:27:50:08:5f:d3:30:5f:b9:7f:eb:
                    2e:d2:9e:56:be:59:87:70:74:2a:86:02:ff:be:5e:
                    d9:24:19:18:71:81:36:c2:67:0b:77:00:cb:42:dc:
                    81:96:71:65:09:05:79:48:b8:6f:7b:cd:dd:81:49:
                    1d:a3:94:54:26:95:6b:e4:b5:50:b4:2d:5f:d4:e4:
                    21:90:f4:50:a5:22:bf:ae:d7:ff:8f:34:77:2a:b4:
                    04:0c:80:46:5e:49:72:91:0d:cc:33:7a:e2:8b:61:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:D3:79:1D:67:F7:18:1D:7D:30:6C:25:79:5F:16:64:B7:A1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba2e2b9-cfd9-36c9-9414-48a894d0a0f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:bc:8e:27:ee:75:ac:84:c6:ff:ac:13:aa:1b:41:43:7c:e0:
         3e:b7:cd:f7:25:93:0f:a3:8d:94:34:f9:69:10:64:57:3e:0f:
         6c:cd:c1:2d:11:05:01:66:e4:0a:ef:6b:12:cc:89:57:d7:27:
         3d:24:fd:54:70:45:66:56:74:85:e5:e0:8a:ea:57:a5:df:4a:
         a6:08:f3:85:bd:d7:e6:13:2c:2b:d3:c9:d4:42:88:8b:22:37:
         ae:99:0f:b8:71:6f:2d:bd:f4:20:4d:e1:2a:24:c5:0c:c4:b7:
         9c:3f:9a:4b:78:32:2c:86:63:d9:84:75:fb:85:7c:99:26:1a:
         39:06:64:fa:a6:d8:d1:8c:0d:f5:de:7a:e0:e5:9e:ad:f8:a4:
         71:c5:b9:e7:a0:ea:20:92:2a:f4:25:7a:41:bc:d1:36:ef:ca:
         87:26:1f:4c:71:0b:6a:b8:63:65:9a:78:c3:fc:a7:eb:d0:34:
         44:03:fc:f2:00:08:6d:4c:8f:7a:f9:9b:f9:1b:40:5b:91:27:
         04:5d:4b:59:2d:82:ab:ce:ee:f8:13:ff:22:de:52:c7:5d:c8:
         5c:5c:63:c1:3e:53:5f:b8:26:4e:cd:19:c7:78:71:a7:37:6c:
         e4:a2:28:0d:84:a1:ee:4a:48:c6:71:fc:b4:d8:dd:c1:9a:bf:
         44:77:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:15 2026 by rpki-client