Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb7d57fe-a549-379f-8658-736555c232bf.roa
File:                     eb7d57fe-a549-379f-8658-736555c232bf.roa (raw, json)
Hash identifier:          qQxRvPi8Yq4cxuzflOzDyllSKAKfhNFen3chkZRWnlg=
Subject key identifier:   AA:59:3B:A4:35:6C:06:43:4D:A9:EB:A3:4A:8C:E2:ED:66:65:E0:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F49857708FE396EB8E8AD0380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb7d57fe-a549-379f-8658-736555c232bf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.201.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:77:08:fe:39:6e:b8:e8:ad:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f428998c-a957-4fd9-b7cb-366269b8ba1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:96:6d:54:d5:e0:75:84:08:cc:c1:16:2b:
                    19:eb:98:ec:a3:13:8d:61:8d:8f:57:da:91:02:6c:
                    50:9b:5b:78:6e:87:bd:b9:f4:8f:bb:18:a1:22:97:
                    3e:14:c4:e5:c0:6e:47:47:a8:d1:7d:54:d5:ec:8d:
                    90:07:9e:dc:3e:1b:7c:e3:4b:29:18:04:94:b4:92:
                    19:2a:29:5c:d3:79:29:f6:ef:a9:a6:ff:10:6a:37:
                    23:da:2e:42:34:02:67:84:21:94:d0:64:a9:bd:cb:
                    e0:ee:95:9a:b3:42:35:7c:a1:a5:f1:d9:32:7e:e5:
                    e0:59:aa:63:bc:7c:56:bc:74:ca:70:8c:a0:ec:a1:
                    c7:70:e1:6f:f9:00:8b:29:ec:86:05:65:44:07:1b:
                    d4:7c:e4:9d:5e:6b:bc:3b:2e:e3:fe:32:d0:71:b1:
                    be:7c:28:f0:4e:c3:b0:7a:cd:d9:0a:ee:a2:8d:a2:
                    2f:63:2f:4b:5e:05:b3:0f:38:10:3d:8f:1a:db:49:
                    c0:a5:ba:53:69:ab:a7:8c:e8:9c:1f:21:12:fa:d8:
                    07:e5:52:3b:ac:da:90:57:cb:b1:f1:52:c8:f4:b8:
                    79:8e:37:51:f2:dc:7a:37:18:94:8a:61:45:15:0e:
                    c3:d8:07:6d:65:38:f4:da:39:58:21:4e:ee:e0:2c:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:59:3B:A4:35:6C:06:43:4D:A9:EB:A3:4A:8C:E2:ED:66:65:E0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb7d57fe-a549-379f-8658-736555c232bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e4:ca:ef:b6:e3:84:77:4e:7c:20:19:bd:a3:5a:f5:62:d3:
         cd:7f:bd:24:77:02:14:00:0c:7e:19:d9:92:02:8b:ee:01:e9:
         dc:6b:42:a9:d1:04:08:76:14:14:00:d3:be:4e:23:65:32:00:
         f5:cb:4b:38:db:44:ff:6d:df:24:49:f5:b5:d5:91:2e:53:81:
         2c:ec:45:40:b4:91:d3:14:78:0f:69:18:d9:5f:c5:7a:81:15:
         cc:b8:49:d3:01:96:c2:92:09:b0:8f:d6:53:4e:a0:21:05:da:
         4e:65:38:5d:ea:7a:14:4f:b9:43:ce:ee:6d:fc:98:e3:04:3c:
         64:1e:d4:a0:40:69:d7:7b:23:31:48:34:cb:7b:40:33:62:5d:
         48:e8:06:af:b8:44:9e:46:13:cf:e5:f5:82:42:1d:97:8a:09:
         ec:28:92:c7:f8:27:f9:fb:ac:e8:87:90:5c:40:db:1b:a4:62:
         a7:05:f9:d1:8e:74:67:5a:17:1e:2d:eb:a7:c1:cf:66:3a:18:
         b2:74:60:a3:c0:45:27:9a:c9:08:27:eb:5b:74:97:86:72:28:
         4c:52:3e:18:44:03:de:ee:ed:05:f8:05:31:32:35:9d:ee:d0:
         a0:96:50:2a:1c:22:b2:2b:f7:62:0d:38:72:1e:2c:9c:cb:13:
         fe:14:25:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:45:57 2026 by rpki-client