Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e661b7c-fe8b-36b9-be26-8e48d404f614.roa
File:                     8e661b7c-fe8b-36b9-be26-8e48d404f614.roa (raw, json)
Hash identifier:          fBtFA0BPkeF0Vpp/pW2zZvePx6Gcgwtp57jRPVE+cRU=
Subject key identifier:   FB:FB:6D:64:6D:1D:5A:66:B0:7F:D2:D4:9D:37:15:14:99:BA:79:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA01553246DC89C9A63FC9458
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e661b7c-fe8b-36b9-be26-8e48d404f614.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        23.47.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:53:24:6d:c8:9c:9a:63:fc:94:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=ed5f8fbf-1ba3-4951-a12f-e95402cfd406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:e5:0a:32:c7:37:3f:7c:7d:df:92:1a:5c:
                    e8:aa:86:34:02:7a:75:d7:f9:7b:55:e2:09:18:2c:
                    a0:4b:78:60:60:32:f8:92:30:0d:da:a9:e5:08:63:
                    d4:08:19:a2:39:03:7b:ce:fe:8f:4a:62:ac:67:47:
                    6c:d4:9f:f0:8e:2b:00:a2:b8:d1:92:1b:8d:13:ba:
                    c7:fc:78:38:27:47:ac:a1:94:b7:4e:52:27:3c:95:
                    bd:7f:ae:e2:92:b1:a9:64:aa:ad:d5:f4:d4:36:97:
                    30:49:52:c1:47:35:8e:00:a8:07:f9:28:48:fd:6f:
                    11:c4:da:c5:ba:a7:ad:e5:83:75:b2:9c:45:b6:09:
                    2b:46:b1:5b:16:3f:ba:72:9e:c0:da:56:82:62:32:
                    03:42:be:e4:d7:f8:20:ad:65:7a:35:c1:d0:6b:3a:
                    df:00:92:97:ed:99:83:9c:c9:11:2d:d0:03:15:f0:
                    72:56:b5:8d:78:28:98:cb:bb:a4:a5:e2:b4:44:f0:
                    56:7f:72:59:5b:1c:af:29:ae:27:d3:42:49:d5:08:
                    72:70:61:82:8f:29:94:24:7b:2a:a3:9c:64:87:e2:
                    4d:13:6f:b4:6f:c6:57:d0:64:ad:e5:ef:76:9d:52:
                    48:a2:43:d9:7e:2c:60:7a:1e:e4:80:7d:28:26:37:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FB:6D:64:6D:1D:5A:66:B0:7F:D2:D4:9D:37:15:14:99:BA:79:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e661b7c-fe8b-36b9-be26-8e48d404f614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6d:22:0f:11:9e:df:39:b9:99:48:3a:b8:40:11:ac:46:1d:
         9d:eb:c6:e2:0b:f4:5e:b9:71:e7:31:39:14:de:a4:1d:77:8c:
         fd:eb:28:71:f7:f4:a0:ac:dc:df:36:a1:63:88:b1:62:d7:5a:
         06:ae:f6:b6:03:57:2d:c3:29:cf:6e:a7:33:46:52:0d:cb:9f:
         1c:30:13:a4:bf:26:d5:a0:0f:b4:92:c5:db:c8:5a:cc:b1:d7:
         f0:b3:f4:56:c6:08:b8:b2:95:9e:98:9f:12:57:0e:51:5f:f5:
         6d:26:fa:d4:78:8f:1f:94:08:b5:38:54:97:2d:dd:f8:46:28:
         61:ba:98:09:2c:c2:c4:52:bf:35:9b:dd:f1:be:e4:e5:c5:9d:
         7f:e7:60:b7:31:89:7f:ea:7c:7f:c5:ec:11:33:8e:74:89:bc:
         5e:fd:80:ad:6f:05:fe:4f:7a:20:c0:2c:c9:9d:6e:89:b7:6f:
         1c:74:69:f3:82:48:4c:2a:82:69:e2:f6:05:0a:14:9b:a9:58:
         8f:b3:f8:8a:d9:63:27:a5:b5:61:5c:32:b0:57:5a:d9:91:4a:
         33:6c:b9:4c:7a:c8:bb:65:cf:15:84:0b:3a:ee:19:c3:4a:b4:
         d5:6d:ed:af:c6:70:cc:ff:21:30:f1:0c:39:2e:87:ec:c8:ec:
         47:e3:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:03 2026 by rpki-client