Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75650f82-6cfb-3199-91f1-98155332329d.roa
File:                     75650f82-6cfb-3199-91f1-98155332329d.roa (raw, json)
Hash identifier:          dbz27fFWMlaSe1Zz8meEH9msBXvoISM6zoVi30rTJOU=
Subject key identifier:   97:8A:D6:FD:24:E3:E9:05:AE:8E:2C:A4:9A:B4:E9:A9:47:AD:86:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDB0231BA9E4595D3ECA9BD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75650f82-6cfb-3199-91f1-98155332329d.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     16625
IP address blocks:        23.38.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:31:ba:9e:45:95:d3:ec:a9:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=4e22e9d4-638a-466e-8bba-4d576cf3ea86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:9b:b3:83:80:c4:0b:62:ca:c2:94:36:ec:
                    08:3e:03:68:7c:91:8c:a8:6d:70:86:17:d4:17:27:
                    72:b1:8d:a6:a9:ea:6d:b3:49:57:d1:a3:2d:c4:2e:
                    e4:4a:5a:bd:68:01:f7:32:12:f7:20:5f:e9:d6:9e:
                    2a:3e:31:0e:ab:15:95:c8:ec:21:e1:9c:99:91:b5:
                    a8:e2:ab:c9:d9:86:b0:46:d7:01:23:bf:a1:8f:fd:
                    a2:cd:5a:7c:f9:ae:58:8d:3c:ed:07:96:a3:41:7a:
                    21:20:ea:58:13:b5:be:5b:ff:74:53:d3:14:4a:0e:
                    e7:ae:86:40:05:1f:06:90:a9:44:6e:21:b7:7c:80:
                    18:4c:06:0f:c8:9a:e4:c4:84:0c:9a:1e:27:13:7d:
                    29:62:91:c7:53:26:7e:20:d2:83:fe:55:f1:cf:e3:
                    0d:f5:16:12:0b:6b:58:7b:b6:f1:d6:44:d7:a7:1a:
                    70:a6:95:5e:7e:66:a4:16:24:df:1a:1f:cc:53:93:
                    9e:22:7e:b3:40:dd:48:4f:43:9c:c1:14:c9:38:a5:
                    2d:a3:38:6e:c7:77:2f:a0:b7:cb:ac:0d:72:ec:55:
                    9c:ce:f2:b4:10:61:4e:08:ba:49:38:69:18:43:68:
                    90:48:e9:e1:05:7e:3e:3c:8e:ed:d6:ea:ed:44:5d:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8A:D6:FD:24:E3:E9:05:AE:8E:2C:A4:9A:B4:E9:A9:47:AD:86:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75650f82-6cfb-3199-91f1-98155332329d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:fd:af:85:20:67:e4:42:61:78:05:c8:62:2d:2c:65:ab:
         ca:31:49:ac:45:d5:43:9d:97:4d:d8:31:bc:58:f3:12:87:2d:
         51:72:a8:b4:e0:f5:00:81:cd:0a:21:c5:29:41:c2:c0:61:da:
         e5:f4:43:a7:fa:a0:ae:d2:ec:2c:80:18:5f:ee:eb:dd:2d:0e:
         b2:28:f3:dd:08:95:89:a5:6a:9b:31:37:f4:b2:23:8a:7b:c1:
         4e:fb:ec:b2:92:7a:eb:5a:7f:0c:a0:18:4d:2f:c7:a3:fd:26:
         4e:0e:36:4c:70:75:ee:f0:a2:71:64:ce:28:82:00:1a:ca:51:
         75:7c:10:c8:b9:0c:99:f3:fd:0c:c7:73:dd:c6:47:5b:d1:92:
         f4:2b:4c:7a:7f:29:45:2e:02:22:de:69:9e:59:08:3f:70:ed:
         0c:cd:5d:3f:3c:43:fa:27:9a:ea:d3:5b:65:1e:60:4d:61:b3:
         21:1c:e4:c1:fc:e3:29:a4:c4:05:e6:dd:fe:e2:89:1e:23:53:
         cb:f5:fa:27:25:4e:14:d8:a8:53:b2:e3:29:9f:08:10:c4:f4:
         6e:08:74:22:f3:e4:5c:42:48:0c:c3:c4:28:24:bf:67:12:b3:
         f8:d0:df:9c:48:51:57:9e:1d:50:5e:fc:e2:7c:23:3f:2c:8c:
         f0:b1:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:51 2026 by rpki-client