Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b69d7ba7-0e38-3590-8cad-aa0a51aee3e2.roa
File:                     b69d7ba7-0e38-3590-8cad-aa0a51aee3e2.roa (raw, json)
Hash identifier:          mm353t3YeYemPEbqwGicxPxBeENqFCHiHpJNzPvS1YA=
Subject key identifier:   60:17:B2:24:17:32:6A:00:F5:23:51:D3:4A:84:82:17:4A:84:F3:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D19B4C7D41BB7AB692965DA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b69d7ba7-0e38-3590-8cad-aa0a51aee3e2.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16625
IP address blocks:        23.204.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:c7:d4:1b:b7:ab:69:29:65:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=85062e1d-ca99-45bd-8fcb-0e6c5ed42b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f8:b1:3e:1e:a3:e4:fd:85:69:bc:d7:24:9d:
                    04:1e:b5:bc:d0:41:ad:7f:36:e4:3d:d8:1a:98:ac:
                    1a:dd:c4:2d:5f:85:70:65:da:17:f6:d2:8d:c5:c9:
                    25:83:e8:2c:c8:c0:9d:87:3e:3e:a1:b1:87:6f:95:
                    04:59:ba:27:e8:55:1d:d9:f2:17:1d:b7:7b:c6:09:
                    4e:82:45:1c:63:89:29:e6:45:2f:a9:5f:8c:d5:de:
                    91:2b:c3:54:1a:9a:44:9f:a3:7a:61:97:f8:e6:ec:
                    6b:50:51:3b:37:03:f5:9e:87:d6:88:87:4b:dd:7f:
                    55:d1:97:5b:e1:88:44:c5:a7:10:c5:8f:31:fc:52:
                    20:76:35:b2:ae:a1:49:78:35:3a:f5:ab:4b:81:19:
                    53:b1:67:33:6a:13:eb:df:b5:4f:46:e3:11:42:42:
                    24:b4:1c:86:4b:8b:71:7f:c4:91:61:05:ab:06:65:
                    e7:c2:c2:9f:b4:a2:ba:3a:95:ab:8c:54:91:d2:a5:
                    33:cb:ae:67:4d:69:4c:fc:f0:ff:77:f6:e8:a8:ae:
                    30:de:49:6b:0c:6a:cf:6b:ae:4e:98:d3:fd:fc:f6:
                    15:a9:f2:a6:43:5d:c4:cb:0d:f1:68:4e:64:b0:13:
                    72:12:ed:29:51:4f:1d:eb:53:75:6f:a1:04:44:97:
                    46:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:17:B2:24:17:32:6A:00:F5:23:51:D3:4A:84:82:17:4A:84:F3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b69d7ba7-0e38-3590-8cad-aa0a51aee3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ad:08:76:bc:4c:9f:1e:56:4f:33:4e:1e:a8:95:d5:42:09:
         06:2f:0b:99:74:1b:85:09:ef:9e:cb:fe:bd:85:9d:7c:34:19:
         0f:a3:a4:bc:1c:11:9b:7a:be:82:22:b6:95:f5:b3:a2:1b:4d:
         2b:85:8d:c0:99:e0:fb:4f:fc:42:f5:57:19:8e:c5:16:0b:b3:
         dd:3c:ef:33:e6:51:a4:ba:aa:56:a7:b8:7c:c5:54:43:f2:e9:
         50:d4:6d:41:f7:98:ff:6b:eb:e6:82:3c:b3:71:74:28:a9:a6:
         7c:15:b0:8f:95:70:29:6c:5e:3a:41:40:5e:0f:fa:cf:c8:dd:
         bd:c8:ec:6e:98:05:30:e2:df:a8:ed:cb:ae:6c:ea:56:c6:8a:
         ae:a3:6c:1b:37:4b:2e:eb:e9:9f:e9:48:30:5d:7d:54:94:d7:
         9a:a2:d2:10:eb:80:8f:86:af:1f:8d:b4:ca:8d:48:b4:af:7c:
         a6:3e:c3:c4:47:f6:e1:4b:f1:fe:71:18:2e:cf:a1:3f:08:35:
         5d:a0:76:1f:48:9b:85:3c:a1:f5:ab:74:fc:71:a8:0d:3c:c6:
         21:58:ea:54:40:7f:79:f5:b5:e3:05:3c:eb:4b:48:6f:4e:8b:
         4d:c6:7e:e6:c0:d9:b4:ea:64:c3:40:38:71:4a:ae:8a:9f:46:
         cc:fc:54:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:27 2026 by rpki-client