Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b56273-add0-366d-947b-5ae5cdf7a8b6.roa
File:                     d5b56273-add0-366d-947b-5ae5cdf7a8b6.roa (raw, json)
Hash identifier:          W4p7KQlHIxHMBzpKHHJ0CPwF3VMACrU98pEZPbhjGDE=
Subject key identifier:   34:70:CB:09:10:04:17:2C:53:8A:71:BA:A3:83:AC:BE:29:B9:EC:39
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DC135C9B090ABB7FEF306ED80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b56273-add0-366d-947b-5ae5cdf7a8b6.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        23.49.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c9:b0:90:ab:b7:fe:f3:06:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=c4543bed-7a7f-4b7c-b20c-2fa60fecc0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:c5:91:07:19:62:d4:36:59:33:55:08:59:
                    45:f0:e5:91:c7:93:11:e0:0a:70:95:6c:ce:89:74:
                    53:db:11:3f:d0:02:67:34:b9:76:49:ba:69:56:40:
                    7a:9e:3b:74:0f:5a:31:fe:d4:e4:30:c5:7f:9e:d0:
                    b9:a8:00:d6:e5:34:d4:95:18:4e:90:e0:b6:ae:9a:
                    1e:25:c5:39:d9:cb:c3:7d:11:c1:71:70:d1:cb:b9:
                    d6:3f:c6:f4:73:5e:b2:a8:33:68:ca:41:45:9b:d6:
                    51:84:40:eb:c5:5a:8e:42:19:f6:59:6c:cf:17:11:
                    66:73:fb:bd:ff:04:7b:cd:3b:67:99:f4:49:d5:bd:
                    c6:5e:e3:9a:36:c4:6b:f7:ad:08:c6:4c:b8:4d:4d:
                    37:14:2c:21:54:86:23:bf:31:8d:5c:0f:f7:15:75:
                    62:7e:70:65:a1:3f:a1:cc:e7:bb:a8:6a:60:23:fd:
                    77:fd:d5:c0:00:62:ef:83:9c:d1:2d:3e:0b:c7:e8:
                    6a:18:43:8a:56:4b:a0:19:1b:91:89:04:2a:3d:d0:
                    fe:69:f1:f6:04:80:e6:1f:69:09:a1:60:ed:8e:99:
                    f2:45:ac:be:94:8d:0f:f2:64:62:31:b7:20:0a:bd:
                    49:8c:79:a1:3e:b1:28:c1:c2:79:eb:d6:24:12:c4:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:70:CB:09:10:04:17:2C:53:8A:71:BA:A3:83:AC:BE:29:B9:EC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b56273-add0-366d-947b-5ae5cdf7a8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:53:2f:a8:32:54:3d:28:85:2f:1e:23:2a:06:0e:27:9c:1e:
         31:07:b7:69:5b:39:18:da:45:c1:d8:7e:00:52:bc:ca:f3:87:
         6e:b4:fb:67:90:72:e3:49:40:13:e8:fe:85:98:c0:ff:e6:73:
         dd:c0:de:68:31:00:14:62:78:cb:22:dc:89:ab:62:2b:a3:17:
         9b:30:cf:80:2a:d0:06:6c:62:68:54:20:aa:ec:bf:e1:e9:c8:
         83:cd:7f:0b:c3:15:e4:c9:60:0f:d4:3d:7c:7c:01:75:4e:8f:
         86:ea:51:c7:92:64:11:5d:bb:81:f6:53:43:83:ec:10:64:c5:
         e6:aa:52:01:e0:73:75:a1:fd:3a:55:39:3c:08:38:97:48:01:
         ea:b5:9e:78:5d:f7:c8:10:15:fc:c5:cb:eb:66:06:49:25:a1:
         b6:7f:f8:4b:ec:4d:d8:14:b8:40:60:ac:cc:32:c6:a0:e5:e3:
         ec:4c:a4:eb:eb:b8:bb:96:20:08:43:9e:b3:77:88:7d:f5:74:
         23:bd:ff:cd:57:c4:12:3a:b0:f6:79:ab:ed:71:4a:69:d8:40:
         2c:52:6b:11:5b:94:df:08:86:3a:18:f8:7c:95:b6:2c:fe:ed:
         8d:bd:24:62:54:2a:a5:84:33:aa:6c:74:03:6a:3f:cb:1b:63:
         39:46:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:47:26 2026 by rpki-client