Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/980003ab-14ad-3e72-bc29-c3a2e3975fe1.roa
File:                     980003ab-14ad-3e72-bc29-c3a2e3975fe1.roa (raw, json)
Hash identifier:          2PC1f+bEYQqIrR7RD2p6p3o/l9r+AhGe8CgyzeFWNJc=
Subject key identifier:   7C:A1:AE:CF:D9:CC:A1:D0:C2:57:24:AB:BF:A1:00:3C:E3:20:C2:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D80FFFD64AD0C2B7AA7B43580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/980003ab-14ad-3e72-bc29-c3a2e3975fe1.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     16625
IP address blocks:        23.79.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:fd:64:ad:0c:2b:7a:a7:b4:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=30a7bb86-c70f-4e39-b9d4-9b6b55621a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:a2:23:89:34:09:17:13:4a:d7:3f:ac:cb:
                    4c:cb:f0:75:08:89:a6:9a:5c:7c:7d:4b:4a:f0:93:
                    dc:79:b6:50:c3:7c:92:c0:f4:0a:6e:34:97:97:8e:
                    12:5d:3c:c8:c1:81:18:95:64:dc:f1:24:18:3d:c4:
                    10:5c:2c:5d:94:ca:82:9b:c0:2a:69:5e:0c:b9:8e:
                    39:90:0b:1a:a6:12:73:b8:20:b1:ae:a0:fc:af:1a:
                    be:88:b2:61:51:8f:00:e0:d9:66:8b:86:98:58:c7:
                    fa:d9:bf:f1:5d:00:c6:94:af:41:67:d4:0a:38:e8:
                    b7:ff:83:11:93:0d:38:f0:e7:7a:be:6f:13:12:f6:
                    54:3b:b4:66:34:60:23:74:59:35:c9:7d:b9:b5:b5:
                    db:c9:c7:17:2a:3b:23:38:c0:43:83:c6:13:3b:c3:
                    c7:8b:03:c6:1a:7c:f7:47:5e:54:a1:92:44:6c:7a:
                    3c:d9:6d:76:1f:89:e6:8a:34:c7:98:4e:c0:e8:ee:
                    9a:9a:27:f3:4a:4e:11:73:56:18:d0:10:9a:65:9a:
                    43:15:c9:5f:12:42:94:1a:dd:95:f8:8f:5d:03:c2:
                    8a:6f:f0:c0:09:46:4f:1a:5e:19:26:f4:ac:b8:76:
                    44:e0:d8:05:82:a0:c6:82:72:96:ff:ed:91:46:b2:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:AE:CF:D9:CC:A1:D0:C2:57:24:AB:BF:A1:00:3C:E3:20:C2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/980003ab-14ad-3e72-bc29-c3a2e3975fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.79.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:e7:34:51:35:69:0c:e1:a7:b1:2e:33:4c:6d:31:dd:d7:
         2e:40:2b:b7:e6:e4:e2:a0:2f:11:d9:84:43:c0:5a:16:5b:d8:
         8f:41:8b:da:f1:82:e9:bc:64:7f:27:c3:8f:f8:52:8a:9c:a5:
         df:c6:51:0a:ec:85:f0:f3:64:43:be:c8:26:4d:b7:1a:a0:51:
         2b:48:9c:eb:cb:1b:50:8f:a9:27:40:11:1d:42:4b:13:b9:26:
         0f:7a:f1:5c:3a:fe:df:4c:4e:e5:5c:a2:f0:20:cc:59:62:69:
         5c:d2:1c:32:45:ce:93:14:3c:4b:85:15:45:54:1e:16:b3:54:
         a8:5e:e6:e1:0d:e2:5b:12:99:64:4a:0e:23:d0:d5:dc:c3:b9:
         83:ce:8f:c3:d5:d3:81:c0:ba:db:69:51:94:8a:a0:fe:be:b2:
         80:3b:da:f6:03:80:df:55:04:fd:45:d1:ca:41:55:bc:98:30:
         18:43:e6:3b:62:d8:fd:e5:de:53:e9:6b:9e:40:92:d0:15:b6:
         b9:6a:de:1d:1b:67:28:b3:2e:f4:c3:96:05:27:d2:63:62:4a:
         a5:b4:63:16:de:3c:4d:7d:ad:8f:9a:44:6c:8a:b9:a3:e8:db:
         9f:7f:5e:92:62:be:94:56:c4:ef:d3:87:d6:ba:42:fa:4a:8e:
         87:04:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:49:45 2026 by rpki-client