Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa
File:                     caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa (raw, json)
Hash identifier:          6pRhMjriE/VBaEBucx+kRKPuI/ODBAtTZ9cyf2f4ymI=
Subject key identifier:   6C:3A:8A:BC:F6:06:79:36:74:33:9C:5C:51:FE:79:03:37:82:90:D3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA3158259D49788C1ED780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        23.10.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:31:58:25:9d:49:78:8c:1e:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=45b0bd4a-8293-44d6-afee-b2904ffa44c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:35:01:85:bd:ce:01:22:dd:9e:ff:08:5a:6f:
                    16:52:4d:ea:f7:f5:79:fa:5f:a8:47:cc:e7:f5:a8:
                    ba:9c:ec:ee:32:47:06:cc:9f:48:3a:ad:89:bd:7b:
                    3d:30:6f:f7:3b:19:69:82:aa:76:11:da:57:24:78:
                    b7:76:15:a2:3a:26:30:cf:5a:08:48:32:f1:99:bd:
                    67:0c:8b:ad:ef:a6:02:2f:67:e8:09:35:5e:be:55:
                    6a:a9:6b:2b:83:eb:43:34:92:35:25:19:7d:da:4c:
                    f1:ad:c7:97:80:cb:f6:4f:9c:ad:47:2c:70:c0:c0:
                    68:89:68:81:e3:a5:7f:30:33:ee:6e:a9:d7:a7:fe:
                    09:c3:6f:f4:f5:59:0d:ef:e0:ca:a4:b5:30:7c:04:
                    f3:dc:bd:b8:04:c1:b9:08:6d:bc:0b:3b:80:3c:f5:
                    9a:5a:d0:89:5e:a4:d6:49:ae:2c:f6:58:67:00:18:
                    38:5b:2e:03:8a:4b:98:a8:92:3a:51:8b:a9:95:c5:
                    bb:00:25:e6:4a:a6:8e:10:26:a4:a5:78:e4:52:d5:
                    49:5e:cd:f6:25:1b:55:81:a4:4c:8d:d9:f2:18:d6:
                    e9:80:65:ea:ff:2f:b7:f7:ec:f0:4d:42:06:ec:8f:
                    d6:50:48:ed:b2:3c:63:9c:ff:3f:94:0c:ea:a5:e8:
                    08:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3A:8A:BC:F6:06:79:36:74:33:9C:5C:51:FE:79:03:37:82:90:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.10.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:de:46:11:60:6f:55:bc:89:ce:ae:05:8b:b4:78:02:ed:a6:
         b6:29:db:5c:61:ad:b8:80:9b:4f:13:59:54:a3:29:7d:a5:56:
         f8:ef:b9:6d:ae:3d:70:6e:c1:d8:db:a6:9e:36:01:03:84:22:
         03:ab:66:2b:a0:97:82:95:4f:1e:cc:ec:a5:a3:0e:5f:e8:61:
         a6:a4:db:ab:2e:6f:d3:d6:66:9d:1f:2c:ed:97:50:ef:e2:c3:
         78:be:79:77:90:5e:c7:63:90:ac:67:0d:3f:d1:20:1e:e3:ee:
         53:48:b3:a8:32:fc:75:58:17:22:66:ee:95:d8:50:de:4e:f2:
         69:8f:12:f2:48:a1:19:b0:61:81:e9:43:82:3a:8e:9f:fe:55:
         26:66:4d:ce:ea:5d:d1:47:1a:74:7e:b5:42:9e:0b:34:61:15:
         06:28:10:eb:b8:db:6c:bb:8c:dd:1c:52:ef:36:69:d4:7f:f6:
         4b:5c:1b:f4:3f:5b:b9:b6:9b:dc:7e:b6:4e:aa:89:10:1c:e4:
         70:b3:ff:f1:93:e1:5f:83:bb:a1:f6:a9:d1:ae:1f:18:02:c1:
         7a:71:d2:9e:5c:6b:13:03:50:be:3e:63:5d:28:2c:ee:d8:b2:
         59:88:5f:64:63:36:a7:bc:61:25:60:ad:78:b4:1b:b8:83:a2:
         c8:ca:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:22 2026 by rpki-client