Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3852069-35b3-3f02-954d-12fd5e977f9e.roa
File:                     a3852069-35b3-3f02-954d-12fd5e977f9e.roa (raw, json)
Hash identifier:          jfP0mTyxF+rdy4Gv2Wy9LK3T5qKpzuLZWe26pyXFqQ4=
Subject key identifier:   99:20:0B:7E:DC:57:3D:10:95:46:81:4A:E7:11:74:DF:20:BA:1F:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CED279FBC1D27C9A4A7060740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3852069-35b3-3f02-954d-12fd5e977f9e.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.58.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:9f:bc:1d:27:c9:a4:a7:06:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=35f7b55f-4b6f-4b32-82b2-ca04484e3b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:7a:8a:8c:90:a0:d0:6c:55:2e:32:2b:0b:
                    b9:9b:07:05:47:27:8b:7d:32:90:b8:ea:30:9d:6f:
                    a8:9c:d0:c4:10:a8:8c:be:ce:27:1b:c9:31:5d:1a:
                    6b:97:de:7f:6d:e8:50:13:29:82:7c:1a:54:fc:cd:
                    97:66:c5:fa:51:20:62:4f:56:4b:9c:f9:a0:61:85:
                    f0:1d:7c:0f:d4:61:ab:b5:0a:60:17:ce:2a:ff:89:
                    a5:ef:eb:46:54:2c:8b:b0:ca:56:4e:1d:96:ec:64:
                    c4:a8:36:a8:83:16:b2:bb:b1:8c:c1:0e:99:80:b8:
                    c0:d1:15:33:85:c0:82:88:25:2e:35:66:d0:95:35:
                    ae:4c:91:fb:94:79:14:10:63:46:9d:9d:f0:62:6a:
                    83:ee:43:fc:14:c1:92:bb:5f:e4:69:d4:12:44:1b:
                    8b:17:2c:45:a0:6c:51:8d:02:76:4b:4a:9f:93:1a:
                    00:2b:48:4c:fb:82:cb:c2:2c:45:f7:a1:d5:3d:c4:
                    09:11:3b:11:a8:b3:b4:2e:6b:34:ad:f7:2a:be:c4:
                    5c:30:47:86:c4:d3:24:76:b0:9b:6a:98:5e:74:d4:
                    64:5c:07:61:dc:5d:35:b6:19:1f:dc:d4:ad:73:54:
                    6c:ae:b7:8d:1a:6e:d1:95:57:80:c7:84:58:50:ac:
                    96:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:20:0B:7E:DC:57:3D:10:95:46:81:4A:E7:11:74:DF:20:BA:1F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3852069-35b3-3f02-954d-12fd5e977f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:57:4c:c8:0d:07:20:b4:c2:aa:cc:23:be:05:c6:bf:1b:d9:
         f7:65:14:e9:a8:6d:92:4b:8d:ef:68:13:33:e6:94:a6:19:10:
         cb:12:8f:2d:47:49:0a:e8:d3:e2:69:7c:9a:f9:05:cf:39:6f:
         e4:9a:ab:92:d5:f8:7f:ac:04:27:ce:11:6a:1d:b3:3c:ab:01:
         2b:78:3c:2b:f6:bb:3e:c7:4c:d9:fa:3a:90:bf:eb:2b:19:1a:
         01:3d:8a:ab:d5:c1:27:4d:0e:f4:2e:81:ba:bb:ad:28:99:22:
         76:e6:db:e2:a2:94:1f:ec:08:87:b0:4c:ef:85:13:e0:40:a1:
         1e:42:e9:45:10:e0:99:81:7c:33:fe:e1:5d:d0:63:5e:96:71:
         11:a6:83:c7:04:80:a0:44:71:bd:ac:9e:ad:0f:6f:4b:03:b5:
         24:4f:67:7f:2e:f7:14:b9:f6:a2:f1:ac:dc:f7:ad:11:fd:25:
         02:b9:f3:e1:f0:f4:ef:fb:f6:2c:c2:8f:41:b7:0a:b1:59:73:
         de:73:b3:11:ed:6b:ee:71:1f:63:a8:7b:59:89:ab:5b:35:b5:
         63:8c:db:44:8b:d6:0e:82:b8:14:7b:db:8c:69:b4:88:60:32:
         e6:e7:b8:c9:a4:ed:9a:96:81:28:58:f1:ad:d0:2a:cd:61:f7:
         09:39:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:45 2026 by rpki-client