Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5608ef05-d82f-3008-9c2c-7d34da6ea47f.roa
File:                     5608ef05-d82f-3008-9c2c-7d34da6ea47f.roa (raw, json)
Hash identifier:          QSvg00N16O2BwA1UC84MZsn048kOZ9z671laOK5Ltw4=
Subject key identifier:   D4:CE:AC:E2:4C:FA:32:A8:B0:CB:96:40:1F:3C:D1:23:0A:51:67:C9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78786F1392CB569912ED700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5608ef05-d82f-3008-9c2c-7d34da6ea47f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.56.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:86:f1:39:2c:b5:69:91:2e:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=55bcb8a4-26c4-443f-8574-e0d0574f3abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:a9:f6:cb:31:e7:a1:d4:6b:cd:7f:7d:f0:
                    28:1f:b3:e9:e1:be:23:8c:b9:19:a8:95:5d:e6:db:
                    9f:0f:dc:37:cb:c2:db:69:33:a0:10:a5:47:b4:22:
                    f7:0e:ee:18:7e:57:ef:cc:42:5d:57:6d:45:e8:f8:
                    db:8e:4e:c1:18:45:2e:42:e7:dd:e1:57:0b:c5:df:
                    89:8b:e0:de:09:3f:28:5f:1b:3c:32:1b:57:b1:b0:
                    22:4a:02:4d:28:f2:fd:6d:db:f2:05:1c:8e:27:a0:
                    5e:15:3f:96:13:77:3c:c2:22:39:a8:e7:7d:0f:7e:
                    36:44:ed:75:43:00:a2:ed:cf:1a:17:62:1d:e3:b6:
                    42:40:e7:c0:51:fa:9b:a9:d8:62:d8:70:3d:67:f9:
                    3e:b5:22:34:38:4e:39:8e:e4:07:c7:85:b7:de:fe:
                    86:b7:5a:86:e7:b2:d0:0b:bf:a9:f9:0b:4e:b4:5a:
                    be:a4:1a:fc:81:5f:e4:d0:bb:bd:8d:48:95:a7:a6:
                    91:9f:82:aa:45:ff:58:3d:66:0f:82:d2:33:da:fd:
                    73:0e:9b:2b:e3:6a:be:03:33:c1:92:f9:83:01:25:
                    47:02:54:17:2e:6b:0f:67:0f:dd:e4:6b:de:3e:51:
                    ea:d3:0e:22:03:1c:09:d5:4f:e1:52:ef:a9:75:b3:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CE:AC:E2:4C:FA:32:A8:B0:CB:96:40:1F:3C:D1:23:0A:51:67:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5608ef05-d82f-3008-9c2c-7d34da6ea47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:17:e8:e3:b7:26:e4:7a:a8:74:be:e9:54:94:c7:ba:f3:
         40:62:43:2e:3b:b9:4a:4b:5b:5c:33:ca:47:3a:98:82:c7:1b:
         90:24:11:34:9b:13:9b:80:eb:ac:0a:0e:63:46:fb:97:6c:92:
         78:80:e9:63:67:1f:71:f4:84:3a:88:7e:29:72:1b:bb:6c:3f:
         fe:58:fe:39:1a:d9:3f:d4:13:35:0c:e2:0d:61:84:c4:f6:79:
         a5:3e:40:9c:e6:88:c0:06:a7:e8:e8:6c:51:e8:a7:5a:fc:b7:
         22:a5:68:1e:52:5f:b6:a4:ce:c3:83:16:78:ef:b8:72:2f:48:
         e6:03:ae:95:22:b7:f7:b4:f8:61:c1:9a:17:9e:47:a9:a1:e7:
         6c:72:4f:07:8a:be:88:67:f5:eb:81:8b:09:b6:01:77:d5:15:
         81:3d:88:dd:b4:c6:ce:00:7d:a5:d5:3f:6a:97:11:7e:8b:a7:
         87:34:33:f6:52:73:ee:5d:7d:84:3a:08:3e:e9:28:f2:66:c0:
         39:ce:83:a0:07:7b:2f:80:3d:82:12:64:c5:46:f8:49:5f:08:
         41:ae:f2:3e:f3:a3:01:72:72:a2:b9:a2:5d:2f:8f:3f:41:d1:
         4c:52:c2:ac:e5:d7:52:a7:5a:ab:ee:44:4e:76:b8:ac:5c:93:
         6a:9c:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:07:05 2026 by rpki-client