Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa
File:                     57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa (raw, json)
Hash identifier:          uuEJLIiSKi4lgh7vXX3CazyABxbNzZQJXFI6tIYGKJY=
Subject key identifier:   16:9D:AE:F1:62:83:EF:F7:D0:F0:DB:A2:8C:50:20:2C:EF:6A:37:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E9BE5206C807188FB2B803F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     16625
IP address blocks:        23.38.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:20:6c:80:71:88:fb:2b:80:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=502e7c7e-3849-4de6-af21-2ef5bde30d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:ac:5c:6d:07:ee:3f:57:78:a5:ad:2c:26:
                    a0:bd:83:97:fb:33:52:7e:9f:ea:3b:4d:47:04:cf:
                    c6:93:34:f6:40:ea:66:18:78:dd:f7:8c:7e:c0:db:
                    83:8f:6d:e1:c7:03:7e:77:5e:04:a2:eb:2d:e2:9a:
                    89:71:77:96:55:3f:fe:ad:b3:4f:b2:b7:c0:20:99:
                    d8:3d:93:87:36:ab:74:74:fa:af:87:3d:81:39:c7:
                    80:cf:56:60:95:81:83:c8:ae:98:f8:ae:2b:35:93:
                    4b:4a:75:9a:25:3e:8e:5b:19:85:0a:7c:0a:30:af:
                    11:36:f3:64:12:ac:c9:03:c1:b6:37:fb:e4:66:e5:
                    dd:ef:5c:46:f2:ed:d4:9f:fc:48:d9:69:9d:55:bf:
                    96:25:85:cf:d0:37:c4:2c:ad:ca:4e:f5:22:8c:36:
                    5c:ac:f6:e0:5d:b4:4e:ac:86:80:31:62:b9:bc:4c:
                    98:69:bd:5c:9b:d5:a1:62:7b:f4:37:69:d8:63:b0:
                    f7:d7:18:6f:d9:65:f8:45:52:7e:10:13:bb:ee:4e:
                    4f:3c:0b:aa:2f:a2:30:b7:24:7c:8f:8d:8a:b5:ad:
                    62:4b:a1:6e:87:1c:08:de:ef:83:72:c7:92:c6:a9:
                    69:b0:a0:3a:82:85:6e:00:da:6c:c0:9c:c7:4b:16:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9D:AE:F1:62:83:EF:F7:D0:F0:DB:A2:8C:50:20:2C:EF:6A:37:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:b0:fd:40:93:14:a4:2c:e4:6c:f4:ef:2e:66:72:7e:31:
         44:0e:36:8d:0e:48:d7:01:c8:d2:58:12:1b:fa:9c:d2:79:10:
         0a:58:b4:5b:b4:2f:68:03:c4:49:bf:1b:29:32:58:75:93:e5:
         5b:6e:51:a0:26:2a:24:ac:e7:34:69:e5:39:1a:5e:9a:a8:a5:
         b6:8d:80:10:0f:52:f2:3d:c8:78:59:f5:e2:ec:d7:33:ba:3b:
         6c:af:e0:d1:df:cd:54:91:c0:19:ea:a0:6b:e1:1e:c2:75:1e:
         3c:00:ca:0b:37:c3:7f:50:a7:b8:e1:42:ef:54:17:48:33:5c:
         26:86:f1:31:95:8f:07:ea:55:94:bc:04:7f:d9:c2:67:02:22:
         5a:8b:31:da:4a:52:a3:aa:ad:e0:ab:00:a7:5c:1d:2c:22:3c:
         0a:7c:44:2f:ea:35:53:85:ae:db:cf:81:2f:e3:92:c2:6e:00:
         3b:d7:92:56:43:39:c7:e6:a7:73:6e:ac:a5:c4:a4:30:36:64:
         1c:6b:7a:a3:c5:59:b3:3b:26:75:70:7f:9f:8a:a1:a5:c8:e6:
         c1:bf:b6:a1:d1:94:76:c4:86:ac:62:4e:da:b4:91:12:04:ca:
         b9:bb:0b:21:62:8a:62:35:51:8b:dd:c7:80:e5:0c:d5:eb:96:
         bb:8f:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:39:21 2026 by rpki-client