Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93513076-5c26-3c77-b513-4846528c0970.roa
File:                     93513076-5c26-3c77-b513-4846528c0970.roa (raw, json)
Hash identifier:          GBvi6na6zIPn3ehDVQD5LwNkuEKTklbJ4hzyE9TpMfw=
Subject key identifier:   22:1C:21:C3:A7:8C:07:04:6E:9C:C8:4E:FF:5E:6F:04:45:CF:86:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CEFF25865C83E0BC9A3620800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93513076-5c26-3c77-b513-4846528c0970.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.197.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:58:65:c8:3e:0b:c9:a3:62:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=7ca97ddd-681d-4faa-8c79-29461d84c6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:16:c9:d1:65:94:ce:0a:41:74:b4:40:d3:
                    b1:4f:56:aa:06:1d:31:9b:2a:c7:41:81:d5:f9:53:
                    13:f9:8a:dd:4e:b6:dc:23:99:55:bf:33:fb:fb:08:
                    ac:9e:08:87:a2:b2:47:52:be:d6:66:69:b1:18:b9:
                    23:41:51:c6:f4:8c:88:6a:45:8d:b0:1e:04:40:4c:
                    75:14:b9:49:4d:a1:05:f4:59:c6:00:45:20:d8:df:
                    22:3d:b5:1e:99:8a:cc:f0:e9:a1:48:61:bb:f9:ff:
                    8f:34:9d:0a:49:dc:04:1b:90:5a:92:64:3c:fb:7a:
                    3d:95:2a:fe:4c:6d:09:b8:b6:36:d8:b4:4c:e7:d0:
                    6d:0d:43:1f:28:19:b2:fa:f8:74:1f:e3:6b:c6:ff:
                    a5:de:f9:ee:80:42:81:56:15:79:71:e7:80:32:af:
                    ce:b5:99:43:5c:e4:8f:4c:1a:f6:f1:57:30:26:de:
                    8b:03:cf:66:93:86:72:1e:7d:d1:9f:9c:d2:fd:13:
                    66:da:8e:d9:78:ca:86:a1:76:6b:44:ce:89:c3:93:
                    2d:a1:24:eb:67:02:73:34:1e:16:3f:e9:0f:05:9b:
                    ca:a9:f4:c5:a4:f3:65:7a:a4:55:21:fa:98:32:34:
                    17:63:0a:20:79:5d:ef:c1:51:ec:7e:eb:dc:57:b1:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:21:C3:A7:8C:07:04:6E:9C:C8:4E:FF:5E:6F:04:45:CF:86:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93513076-5c26-3c77-b513-4846528c0970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.197.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:a0:06:e9:7e:ae:ea:0a:92:37:fc:88:97:43:e8:fc:b5:
         ff:3c:b6:3c:29:77:0a:16:37:fd:0c:ef:26:3b:43:3c:20:a5:
         a0:01:65:ff:36:b1:aa:97:9c:b1:02:ae:e3:6b:2d:a6:1d:ff:
         a1:16:be:c2:70:b0:65:35:4a:f5:33:d3:2d:aa:55:c8:08:d9:
         d7:76:8b:d9:a5:bd:67:08:6b:07:70:22:be:28:4d:27:1a:27:
         10:13:dc:9d:88:bb:5a:2d:1e:ce:10:7e:b8:cc:ff:41:26:33:
         db:dd:ef:84:92:2f:ee:c5:94:35:6a:ab:ef:45:1a:b0:55:8e:
         a3:6c:c2:94:0b:80:3f:81:09:3d:34:6b:8b:b8:3c:62:48:c8:
         70:d9:9e:f3:a2:68:7e:ca:f5:9d:bc:8b:39:c2:7a:cd:f1:72:
         3a:4e:c1:d5:14:02:79:98:00:0b:58:3a:f1:e0:75:8f:fa:71:
         2e:d4:32:9b:03:95:64:8e:cd:d9:e8:f5:6c:c4:38:d3:ea:00:
         e5:5f:1d:9d:fa:fb:29:71:6d:ee:01:e9:f2:16:a7:0b:a2:53:
         f3:54:03:46:8b:2b:41:17:1d:a6:d7:99:46:11:6f:9a:0a:01:
         1e:bc:a5:d9:d7:71:ce:58:01:9f:29:fd:73:b9:f4:08:bf:94:
         1b:db:b4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:53 2026 by rpki-client