Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b73525c-9423-3893-bf4c-78f46756d60e.roa
File:                     5b73525c-9423-3893-bf4c-78f46756d60e.roa (raw, json)
Hash identifier:          XHA8hvxshdBC7hfs5XdqEYszLnIERFVkOvKNwitrO7w=
Subject key identifier:   E9:38:DD:5C:81:EF:5D:16:92:58:D1:66:1A:24:05:C9:70:CB:4C:CB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0647AEC579AB0928AB1C0240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b73525c-9423-3893-bf4c-78f46756d60e.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.199.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:ae:c5:79:ab:09:28:ab:1c:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=8292940e-5f33-423e-b479-1c47250775b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4e:4f:3f:bb:39:cb:ca:78:f6:8b:56:43:e0:
                    db:12:91:95:15:db:9d:8d:5d:38:13:1f:eb:6e:a2:
                    4d:49:c4:ae:a5:dc:14:c3:ad:36:79:9f:98:34:68:
                    8f:df:cc:ae:42:68:91:fb:7b:7f:e5:c6:7d:30:bc:
                    ce:d9:e2:ce:f1:ff:cd:2c:d4:07:bf:91:25:38:be:
                    60:7e:79:b3:36:7d:57:8e:77:45:ae:5e:ff:a7:d1:
                    1c:99:df:9b:b2:a4:d0:d7:0f:49:0e:ac:64:4f:03:
                    3f:3b:0d:7f:5e:f3:65:85:7a:23:5a:20:98:d1:8f:
                    e9:5b:35:f7:bb:e7:60:f4:64:40:7f:c3:6a:6a:c2:
                    68:71:88:c4:c3:8e:bf:f7:d7:1c:d0:9c:52:e9:00:
                    6f:52:d1:c5:40:dc:c1:67:99:81:a3:57:5e:3f:09:
                    2a:43:9f:68:fb:a5:6d:ba:db:81:5f:db:6c:7d:44:
                    2a:fa:7a:08:ec:ee:f1:45:46:8d:5c:37:6e:c6:d2:
                    64:5d:de:37:15:3e:65:95:ef:7d:32:de:48:76:24:
                    37:b9:c8:ff:bc:38:ca:94:1d:37:4b:01:54:7b:a3:
                    6a:44:8f:f9:d5:52:2a:84:60:b4:3d:8e:4d:1e:62:
                    a7:2e:bd:0d:b2:ae:2c:a7:26:18:4d:23:a3:fc:e1:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:DD:5C:81:EF:5D:16:92:58:D1:66:1A:24:05:C9:70:CB:4C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b73525c-9423-3893-bf4c-78f46756d60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:94:a9:57:32:4f:df:be:a7:34:32:cf:ef:da:5a:b4:17:
         b4:3e:66:dd:6e:b4:5f:b1:e2:cc:70:8e:23:a3:d4:f3:81:cf:
         9f:e6:14:a2:3f:e3:6c:9e:af:b0:1a:00:08:b1:e8:47:44:0f:
         aa:36:e4:e7:3b:66:a8:ea:3b:e2:e3:a5:8b:d8:fb:47:54:fc:
         80:ba:9d:d9:2f:de:f0:9e:26:e6:32:41:7d:ce:e0:d8:cc:92:
         a8:c9:e0:e9:e1:d4:58:52:d5:9b:d1:1b:7b:81:ef:7d:a2:69:
         bf:a9:39:6b:76:62:00:e3:49:8f:d0:78:30:c6:9e:e7:18:fc:
         5b:d0:ab:d2:3f:f8:ee:fd:09:ce:b5:94:ec:66:5b:da:68:91:
         a1:38:f2:99:7b:f3:08:8a:8a:08:c3:51:d9:8d:75:8a:39:46:
         20:cb:b2:a8:08:07:75:4d:0c:29:32:3f:72:fd:21:74:f9:43:
         f4:bd:da:c9:21:74:45:63:4f:c4:13:be:7c:02:97:a1:5d:d0:
         85:1c:09:73:3a:8b:f3:6b:34:0f:f1:fe:2b:68:52:da:07:33:
         1e:15:69:f5:0b:fc:fe:23:1c:57:8c:c6:01:ac:a9:92:8f:39:
         2d:4e:4a:d0:ef:09:ff:4e:48:88:88:bb:4d:03:f2:e8:1e:df:
         d3:53:2c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:55 2026 by rpki-client