Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/22c57fb4-e3f7-3a16-8017-c8ea4f1e3947.roa
File:                     22c57fb4-e3f7-3a16-8017-c8ea4f1e3947.roa (raw, json)
Hash identifier:          zGX1r5Aqx/1IvSEFqoyWkRdh5snuYUeHx0BTKm2uMZQ=
Subject key identifier:   F3:E2:3F:D0:65:0C:2F:F5:3B:4A:1B:CD:6E:20:05:E3:ED:73:33:87
Certificate issuer:       /CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
Certificate serial:       010D0C9F4328584D84161A36CDF92997219DB600
Authority key identifier: D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/22c57fb4-e3f7-3a16-8017-c8ea4f1e3947.roa
Signing time:             Wed 15 Apr 2026 15:32:49 +0000
ROA not before:           Wed 15 Apr 2026 15:32:49 +0000
ROA not after:            Tue 14 Jul 2026 15:32:49 +0000
asID:                     20220
IP address blocks:        23.185.64.0/24 maxlen: 24
                          2602:fe76::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:84:16:1a:36:cd:f9:29:97:21:9d:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
        Validity
            Not Before: Apr 15 15:32:49 2026 GMT
            Not After : Jul 14 15:32:49 2026 GMT
        Subject: CN=8fb076dc-fa55-40d6-9f60-35868f265aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:06:40:d0:16:1c:5f:a6:fd:34:5e:bb:52:
                    d4:31:1c:30:37:f0:83:7c:bb:b2:cb:81:48:12:3f:
                    07:f0:af:8d:d3:fc:b2:b0:6c:05:a7:b8:81:81:e1:
                    0d:bc:67:95:49:56:23:86:7c:de:4e:7d:f9:c6:65:
                    e6:d5:3e:4c:38:dc:2e:02:b7:0c:53:e5:b5:db:96:
                    74:62:2b:9b:27:f6:a1:24:6d:6b:57:4a:7e:46:1f:
                    77:5a:36:38:f2:a2:cf:31:8a:6f:e4:9f:4a:17:aa:
                    de:f2:37:0c:c3:ff:69:98:2b:5c:6c:92:b4:17:34:
                    1f:6d:5c:1f:5b:21:5c:70:b8:ef:0f:10:9f:6c:68:
                    b7:1f:30:95:55:96:9f:df:18:57:71:07:2f:a9:4b:
                    00:b1:96:83:b1:22:6e:dc:a3:09:5e:9e:f6:1e:3c:
                    41:d0:5f:d3:cc:41:db:70:52:c8:db:c0:48:f2:c9:
                    30:f4:92:41:a0:42:41:e4:6e:c4:66:8f:2b:9f:29:
                    b1:aa:22:b2:40:a5:a6:20:ca:34:55:79:24:57:0c:
                    93:4e:37:99:4e:20:f2:5b:13:75:8d:57:67:d6:9e:
                    68:d1:83:82:67:cc:24:b6:6f:9c:3f:2f:f6:b4:03:
                    ef:8f:f8:03:11:bf:8d:65:4c:e4:dd:44:a3:64:46:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:3F:D0:65:0C:2F:F5:3B:4A:1B:CD:6E:20:05:E3:ED:73:33:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/22c57fb4-e3f7-3a16-8017-c8ea4f1e3947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl

            X509v3 Authority Key Identifier:
                keyid:D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.64.0/24
                IPv6:
                  2602:fe76::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:65:1e:1f:eb:0b:0a:37:4a:c3:6c:94:4c:3b:05:89:9c:56:
         f2:da:94:66:a4:ed:5a:cf:32:59:63:7c:3d:ee:7b:b6:5a:11:
         72:03:19:0b:d0:85:b8:b5:26:d3:ac:90:16:b4:72:db:bd:b5:
         4c:08:2f:5d:4b:ff:77:12:80:73:33:a5:6c:77:ea:03:98:2d:
         81:9b:cc:7b:9f:be:0c:b8:28:e6:b7:ec:35:2f:6b:b6:0f:15:
         2e:c7:3f:ec:db:00:6a:90:8f:67:de:7b:5b:1c:53:69:cd:50:
         e3:13:61:74:75:00:bf:47:ad:ee:a7:9a:0b:39:c2:ab:58:37:
         d4:f0:85:07:7b:e1:05:bf:2c:55:8a:f2:a8:fc:5a:1a:7c:e5:
         b9:11:c5:7d:65:9d:14:e8:0b:c7:65:f6:81:96:11:45:cd:a1:
         6b:2c:b0:9b:b5:45:50:ec:ed:a2:93:40:44:c9:17:e0:ea:54:
         f8:74:ff:05:56:fe:1c:6d:a8:62:52:33:e4:13:b2:14:a9:f2:
         b6:b0:ff:36:9c:dd:98:c7:dc:94:f7:cb:37:b7:1c:31:72:6d:
         4a:22:7b:fa:f2:2c:62:5a:2c:fe:58:b8:a5:41:98:29:7a:b4:
         40:73:42:57:70:31:bb:d3:b8:1a:7b:28:1a:9a:f4:16:68:7f:
         f8:e1:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:52 2026 by rpki-client