Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6373c5e8-2d9d-311e-94b5-3ce851c42eda.roa
File:                     6373c5e8-2d9d-311e-94b5-3ce851c42eda.roa (raw, json)
Hash identifier:          DcdeJhmkFPS2FXcKsj/n313QSz/8v8mbL4/WbFROmco=
Subject key identifier:   3C:50:56:4D:66:BC:FE:7B:DB:B7:C4:88:37:3A:2E:B6:FC:54:37:A4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F498570E229D8FD635129D860
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6373c5e8-2d9d-311e-94b5-3ce851c42eda.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.62.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:70:e2:29:d8:fd:63:51:29:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=05922c6f-683a-4c1c-963d-a3e5a72aa9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:dd:d4:11:41:79:43:90:45:37:74:0f:39:
                    c5:3b:db:16:4b:b5:12:f7:aa:2f:63:1f:95:e2:db:
                    3f:9d:85:4e:d3:f8:f0:19:df:37:20:e7:6c:9d:05:
                    3f:68:52:28:de:60:02:bd:9d:e2:48:2b:1b:1d:50:
                    4b:b0:50:1a:6e:67:49:16:14:da:07:80:5e:ea:09:
                    5e:d5:4f:84:8b:47:38:39:28:3a:c6:da:5c:15:df:
                    d0:2a:74:e9:75:bc:57:d3:c7:d9:75:4f:d2:31:16:
                    7c:7f:8e:8d:bb:1b:78:6d:36:1d:5a:31:d7:14:19:
                    13:03:27:3e:5f:ad:1a:fc:bb:56:d9:69:23:2c:2c:
                    7f:72:c6:0d:5b:8e:70:95:85:04:31:8d:62:4f:c6:
                    a7:27:b2:65:0e:a3:ac:5e:54:fd:c6:42:98:bf:ab:
                    95:30:46:62:14:0d:36:03:ec:46:44:a2:63:5d:86:
                    99:0a:0f:2a:dd:eb:47:46:4a:61:ee:f5:59:73:88:
                    58:49:c4:54:51:c7:9f:49:b1:18:3b:12:ce:ec:57:
                    cf:e4:40:e0:83:d5:54:16:84:92:09:80:96:a9:cb:
                    e5:f4:9a:59:10:21:d7:a5:c2:b3:f8:27:ac:a4:87:
                    59:45:2e:d5:d0:d2:71:80:e9:c7:27:b3:b1:8b:98:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:50:56:4D:66:BC:FE:7B:DB:B7:C4:88:37:3A:2E:B6:FC:54:37:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6373c5e8-2d9d-311e-94b5-3ce851c42eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:25:d6:27:7e:9f:d0:97:a5:1f:5a:1f:8f:b3:0a:f7:6f:4e:
         d6:78:24:20:6f:7c:2b:81:fb:ed:14:ec:c5:46:33:fd:9d:35:
         f8:e6:d8:22:51:f0:48:05:35:eb:bb:55:e5:6a:b5:d9:65:df:
         24:23:dd:bf:2a:80:c1:c0:9f:9e:77:0a:53:b8:ff:82:aa:fa:
         6c:7d:3e:e1:9e:89:2f:3d:a3:5c:47:a5:b9:49:fe:d2:fe:68:
         0c:7f:50:bd:ac:e4:46:ac:87:9e:02:b9:4b:5a:9d:2c:00:43:
         14:ad:c5:47:29:7c:2d:fc:1c:ea:74:26:d0:23:cb:94:5f:49:
         42:5a:4b:47:4a:01:1f:40:d7:5e:bb:0a:7c:0b:24:71:89:e8:
         41:2a:ce:57:91:d7:3f:13:78:8c:3b:10:26:4e:fb:d3:8a:c2:
         a7:74:6a:48:01:99:0b:f7:ff:69:23:f7:4a:b7:6b:c6:a9:d8:
         15:22:11:98:43:93:40:d1:e8:76:1f:0f:ec:ab:7f:d1:df:22:
         6a:2a:03:b6:19:66:7b:46:9e:94:83:06:fb:fb:53:76:7a:f7:
         3e:31:f8:c3:dc:a2:ed:c2:2b:47:05:4e:7a:aa:da:1b:f5:67:
         8f:1e:13:b2:0d:98:14:55:9a:90:19:89:83:3b:dc:01:69:4e:
         ce:f9:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:49:02 2026 by rpki-client