Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa
File:                     8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa (raw, json)
Hash identifier:          iEdQGBoB9qnrFDHokk5EM8hLkW0CDvNVXwV77q40YWU=
Subject key identifier:   3B:BC:3F:EB:CC:A5:51:A8:B3:D8:38:57:6D:1B:C9:75:41:63:B8:02
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDC6798A9BDC505E0A95C8E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.43.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:98:a9:bd:c5:05:e0:a9:5c:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=5045dae7-4baa-4cc2-bed4-a020fec1387c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:d4:6f:a2:85:95:6e:33:eb:a9:16:b1:d2:
                    1d:4a:a7:1e:c6:8f:0b:ec:2f:d7:1d:82:22:2c:45:
                    15:41:ce:8f:72:1b:eb:6b:9c:23:21:cf:33:24:49:
                    83:92:b0:de:c4:6d:34:c4:f3:4b:a0:f7:70:8f:34:
                    48:ea:9b:6d:4b:85:ce:30:e8:f7:d4:b3:c6:22:64:
                    89:59:5f:10:01:5f:8f:a2:5b:c2:f1:8b:c3:24:f6:
                    c3:47:0f:99:8f:7c:74:01:52:90:c2:26:4f:02:06:
                    87:c5:69:c6:f3:e6:51:ed:72:2a:6e:ed:69:28:70:
                    d1:37:01:71:cb:7d:17:d7:da:03:85:4e:fe:c5:b0:
                    ac:4a:83:80:90:8a:f5:ab:60:d0:95:14:8e:8c:8a:
                    cc:56:04:89:af:fb:93:55:29:f2:9c:7d:7a:ba:66:
                    ad:8e:02:64:d2:86:1d:18:9e:0d:3a:c9:7e:c6:9b:
                    c8:77:2b:47:5c:58:7e:29:d9:ea:38:34:aa:50:e1:
                    7d:df:f6:b2:c5:17:9a:6d:71:5e:21:c0:de:32:49:
                    3f:05:0d:93:4d:f7:e2:31:dc:5a:73:6e:29:a5:26:
                    01:3e:7b:a2:4b:2d:2f:08:3b:75:ca:0c:c0:ed:14:
                    39:31:d4:de:f8:84:2b:41:88:16:d6:ef:fb:29:06:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BC:3F:EB:CC:A5:51:A8:B3:D8:38:57:6D:1B:C9:75:41:63:B8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:c5:b4:2b:b4:fc:12:8d:72:85:78:71:ac:26:07:4b:d7:
         9c:03:16:02:9d:42:c3:62:95:c7:0e:58:c9:63:9e:84:a4:18:
         1e:a6:52:ff:a7:8d:a9:0e:44:43:47:76:48:db:a5:6d:fa:82:
         58:af:57:81:3e:93:ee:43:ed:72:9d:45:cb:3a:92:34:ee:33:
         c4:77:3a:df:8d:81:52:52:06:00:e8:c2:e7:d8:7d:f1:8e:1e:
         d3:08:f9:93:7d:55:62:bf:6d:14:04:e0:dd:a1:61:eb:67:db:
         a6:69:ce:ef:9d:4a:da:0c:2f:55:97:2e:af:0e:7d:c8:2e:b5:
         f2:1d:14:ab:c8:af:bb:f5:79:b1:ef:74:e5:78:56:79:bf:86:
         dd:a3:02:dd:16:54:a1:93:9c:a7:ef:cd:d6:a2:d1:3d:55:f3:
         b3:8d:a9:6a:14:bd:3d:c5:81:28:98:b7:0d:a4:23:a2:fb:0c:
         95:68:9f:9e:bd:31:c9:15:e5:16:85:f0:cc:fa:18:f3:df:03:
         6e:ea:e7:ae:63:ba:25:10:b7:82:77:ad:4b:f3:92:75:a5:05:
         9a:50:69:ff:5e:14:65:04:16:5c:52:b5:d7:40:bb:8f:e9:e3:
         2c:ea:85:15:ee:9a:09:3f:2d:0b:b0:45:01:b9:56:59:a3:93:
         e3:72:4a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:36 2026 by rpki-client