Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09c1717-5034-3311-9a43-0cc97cfb992d.roa
File:                     d09c1717-5034-3311-9a43-0cc97cfb992d.roa (raw, json)
Hash identifier:          AWvHQ0QpTLZdL8L58dBhCChHNTTRfeAAkPeSROs44Gg=
Subject key identifier:   44:37:E1:7D:8A:17:C7:4A:3F:AF:D1:0B:44:33:75:B5:51:C2:1A:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBBA0630B134DB5141155B560
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09c1717-5034-3311-9a43-0cc97cfb992d.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        23.36.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:63:0b:13:4d:b5:14:11:55:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=9ae20cc2-9fc6-4d5b-a583-d18da6ceb449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:b0:f5:67:cf:dd:62:ec:80:a4:cf:b8:1c:
                    29:c3:45:b5:67:c3:85:74:b2:dc:85:23:24:2e:ba:
                    51:74:55:c9:5e:6e:e1:3e:18:80:4d:67:e1:0d:b7:
                    ef:8b:c6:8f:45:ef:dd:bb:d1:59:db:b5:70:44:d2:
                    c5:a1:c5:d8:a8:d5:af:55:ed:86:e9:56:ca:f3:c5:
                    92:6a:9a:28:d5:7b:ac:e1:b4:70:59:45:1d:21:df:
                    32:82:02:ef:28:13:6d:c7:98:79:d4:7b:82:72:ca:
                    05:b6:bf:27:18:4a:d6:05:b3:39:cb:1f:86:21:b7:
                    e3:74:c7:a1:c4:5c:88:81:60:eb:ac:63:26:6c:60:
                    51:ae:b9:e6:c7:d2:aa:04:5b:b4:fc:04:82:8a:3c:
                    30:72:43:25:e9:88:03:c3:54:89:6d:04:42:05:ff:
                    48:5c:cf:01:a9:7b:75:99:72:73:61:3f:41:66:f5:
                    d8:eb:d4:72:09:16:e5:6e:93:e3:2e:a4:bc:8b:64:
                    a7:22:e4:48:57:3e:7c:7c:49:0f:37:78:28:f1:a1:
                    0c:9d:b8:16:19:ef:47:8d:1a:33:a9:48:d3:8c:97:
                    33:69:de:a2:a5:3b:f2:c6:c0:fe:a8:68:9c:45:b9:
                    09:8b:be:57:15:e4:29:d9:c4:47:a9:a2:c9:ad:38:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:37:E1:7D:8A:17:C7:4A:3F:AF:D1:0B:44:33:75:B5:51:C2:1A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09c1717-5034-3311-9a43-0cc97cfb992d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:12:12:2e:af:51:c1:f5:82:4e:ab:14:18:bd:03:7c:0d:
         f5:e0:c5:4f:86:b5:85:8f:68:09:bc:df:14:18:be:3a:84:36:
         a3:8a:ce:98:e8:cd:68:ac:37:c0:0c:85:50:da:6c:3b:fd:f9:
         b5:07:17:5d:0e:ba:72:0a:63:5a:ac:85:80:9e:f9:2d:a1:95:
         a1:9e:3f:95:47:cb:dc:76:24:e7:46:76:09:53:e0:e6:a1:da:
         6f:80:2c:57:a8:1d:46:1b:4d:df:b8:48:67:04:79:81:ee:e1:
         07:bd:69:8a:8d:26:69:73:98:47:52:81:21:9d:1c:f1:02:7e:
         8e:34:31:12:1b:62:e2:ce:d6:04:c8:f5:32:34:c0:89:7c:13:
         cd:8a:59:ff:e7:cd:20:1f:5e:38:01:c3:c9:0d:3b:ef:ff:46:
         10:6c:b3:f9:ef:39:28:92:cb:7a:83:4c:fe:c4:1c:61:25:7a:
         3c:1a:e3:2b:1b:4c:91:4e:cc:cb:fe:41:4d:81:7d:bc:0f:a6:
         35:d9:ba:32:80:f4:e3:fa:4c:4c:39:8a:ff:e3:ae:49:9c:8c:
         37:dc:96:da:e1:ef:04:62:1e:a7:9f:97:87:5d:aa:e7:13:19:
         bb:5b:10:20:ce:5a:6d:0d:f0:f4:99:8d:27:9c:e2:b9:11:91:
         ff:c8:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:24:40 2026 by rpki-client