Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6483716-52f2-35b4-b668-bea0d0a29f6f.roa
File:                     d6483716-52f2-35b4-b668-bea0d0a29f6f.roa (raw, json)
Hash identifier:          zElm3LkR/9V1kLdq5Odjk8q4YiZRV7aPMyyhIUp8WGs=
Subject key identifier:   45:BE:5F:03:24:57:74:02:82:94:FA:77:9D:C2:7E:F4:B7:0F:CC:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DA6B03392754BA6F3D2CFFE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6483716-52f2-35b4-b668-bea0d0a29f6f.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.7.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:33:92:75:4b:a6:f3:d2:cf:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=b8bed16c-24ae-42bb-921e-f389db51831c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:31:3d:e4:11:0d:67:8b:8c:3f:6f:9c:52:
                    be:a7:91:15:fa:a0:4e:f6:f4:c0:f2:f3:59:c9:8e:
                    cc:e0:b0:b8:3d:36:bf:18:e6:80:5a:47:56:3c:cd:
                    75:92:ac:45:93:68:ce:3b:8b:ae:c9:b0:3a:58:71:
                    c6:82:66:87:8c:e8:de:91:af:a5:65:fa:40:a9:0f:
                    8c:d6:47:b7:21:38:b2:37:f3:e5:80:b9:c0:cb:57:
                    47:1f:8d:50:33:49:2a:93:4b:ba:af:3a:f5:11:42:
                    ca:29:1c:25:d9:d5:50:06:23:ea:df:8e:6b:d9:d7:
                    6b:4f:f9:23:b0:b8:d4:a4:f7:df:24:c3:cb:32:70:
                    90:33:1b:2c:fd:26:96:b2:f6:0b:f5:b5:d6:76:aa:
                    fb:7c:1b:38:fa:2f:21:59:61:f8:f9:52:7c:69:b3:
                    2d:a3:e7:2d:d9:20:b0:b1:71:e9:89:75:b2:5c:be:
                    98:5b:20:c9:cd:05:36:87:35:b1:34:9f:49:7e:db:
                    8b:19:13:8e:76:4b:80:f8:eb:1a:28:c8:60:01:40:
                    c6:75:0a:78:12:5d:30:26:c4:b4:fe:8e:45:7d:d6:
                    1c:60:c3:a1:9a:1b:0c:3a:47:5d:ee:81:a5:2b:01:
                    bf:af:07:06:a5:89:86:67:d8:a2:c0:17:ee:15:5d:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:5F:03:24:57:74:02:82:94:FA:77:9D:C2:7E:F4:B7:0F:CC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6483716-52f2-35b4-b668-bea0d0a29f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.7.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:54:7e:68:09:c4:54:7a:ce:54:75:44:b2:3d:69:38:59:02:
         0b:92:c4:ba:26:2c:bd:54:e6:4e:89:16:06:ed:f7:47:8d:8e:
         ff:8e:0c:b3:35:1d:a6:e5:ee:5b:65:95:cc:46:79:69:b4:b6:
         ed:fe:3c:bb:13:49:a6:0e:c4:da:42:ac:69:71:2a:4b:78:87:
         1d:a9:80:c0:91:3c:11:6d:d3:99:2c:b5:6b:19:65:ca:bd:04:
         48:bc:b7:58:22:de:5a:e0:ad:80:61:05:ef:6b:99:a1:50:57:
         67:26:ec:8b:0b:b5:98:d5:07:2b:2c:1f:8c:80:7c:7e:d1:42:
         b9:ab:08:bd:fd:75:6e:0c:5a:84:67:c1:56:61:0d:a5:d7:33:
         43:63:59:66:a4:ad:cd:2f:80:a0:dc:53:ea:6b:5f:8b:c4:37:
         f9:bd:74:fc:4a:e9:70:1a:f8:a2:21:8b:d1:7a:90:cf:40:53:
         e6:88:63:13:2f:aa:05:ce:80:0b:d3:3c:22:00:10:4f:26:cf:
         33:52:bb:54:28:60:2e:66:25:a9:61:ed:1f:98:b5:dd:aa:6e:
         03:65:2e:69:68:65:24:09:94:02:8f:b6:3e:01:2a:03:34:7f:
         9c:dc:ca:ea:5d:12:e6:4d:01:f4:03:b3:3c:5f:7a:69:51:ce:
         72:1e:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:49 2026 by rpki-client