Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2f5c80-e1ab-36e8-8e42-7db14479857e.roa
File:                     be2f5c80-e1ab-36e8-8e42-7db14479857e.roa (raw, json)
Hash identifier:          k1J25CJ3ga0753kzd2FHXEv1735fJJOQuJRZrP+2qZw=
Subject key identifier:   E4:66:D9:1E:59:13:52:BF:8F:A0:6E:67:FE:13:17:CD:AE:D5:53:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA787A0923D364DB8C673FAE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2f5c80-e1ab-36e8-8e42-7db14479857e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.62.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a0:92:3d:36:4d:b8:c6:73:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=14a1e0a7-8a22-42a2-9e24-f97cb09a05ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:52:30:08:ac:df:51:ea:08:56:85:4b:e9:
                    30:d2:13:14:01:ec:24:b9:04:f8:1e:60:5b:3a:c2:
                    78:f9:c0:92:44:1d:fb:f2:1d:12:b1:b8:f8:e1:5c:
                    13:95:5b:03:4d:79:81:b8:f7:27:9c:09:c3:d2:f5:
                    19:ab:93:78:e9:86:fc:3d:d6:8b:f2:02:d5:03:b9:
                    07:05:a6:97:b0:6f:07:f9:01:f3:f3:c9:17:a3:32:
                    a1:b3:4e:54:28:84:42:fe:e3:66:75:2e:f5:d8:14:
                    86:f0:da:74:c4:99:a2:2e:76:86:79:de:ce:bc:75:
                    e5:c2:91:08:eb:4b:46:3d:18:84:8c:95:81:6d:a4:
                    bb:7a:de:0a:0b:45:ea:61:69:85:56:5d:c6:62:84:
                    5b:2f:8d:68:cf:dd:d6:a8:e4:c0:a9:de:b1:08:5c:
                    99:30:19:73:f4:2a:e5:fd:7c:10:59:cc:77:6a:d0:
                    1d:e2:d1:91:a3:6a:5e:da:cb:87:c5:b7:9f:8f:7d:
                    14:dc:2c:0d:46:3f:b8:b8:0f:52:92:78:32:95:0c:
                    7b:de:32:43:53:fc:0d:46:26:64:d9:8c:30:7d:60:
                    89:c6:a9:4a:85:57:e6:c3:d6:37:db:5c:46:7b:12:
                    e4:4d:5c:94:8f:4b:3b:1a:73:a8:fb:b4:1c:c4:ad:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:66:D9:1E:59:13:52:BF:8F:A0:6E:67:FE:13:17:CD:AE:D5:53:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2f5c80-e1ab-36e8-8e42-7db14479857e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:29:54:a2:d7:f2:18:f4:63:ba:a0:22:ac:51:d0:00:8a:bf:
         54:55:f6:b4:3f:44:37:85:e6:e6:0e:7f:87:51:30:da:ee:1f:
         66:99:82:ee:d4:5a:3e:e5:88:38:33:96:34:db:4d:78:db:2a:
         90:c7:b9:2c:f4:79:16:37:7e:7c:23:5c:20:64:44:88:81:6d:
         ff:ce:06:71:af:b9:ce:fd:40:eb:b7:a5:cf:6f:2b:4d:0c:0c:
         b9:f3:a4:6d:bb:50:b5:e8:cf:62:ea:67:03:6a:c2:44:47:bd:
         d7:cf:b2:9f:8a:43:bb:a9:8b:24:8c:02:d2:40:82:07:4a:a3:
         38:4b:31:21:74:ab:fb:f7:7a:48:3e:19:ac:70:c0:df:a7:82:
         e5:99:23:94:f3:de:98:4f:57:ee:3b:fe:d1:8b:17:f8:c4:1d:
         ee:44:8c:51:9f:fd:c0:47:25:3d:d4:70:d0:5d:b0:c5:51:99:
         a4:44:c6:e4:65:a3:43:e8:dd:dd:98:84:78:81:56:2e:db:98:
         28:4a:ef:4f:e9:3a:08:5e:39:f7:7d:1d:ca:45:9a:ae:8e:40:
         c5:7c:6f:49:a1:e5:9b:61:5d:66:7f:70:86:ce:86:e0:b2:0a:
         1e:2b:31:9b:9d:54:96:e2:e7:5f:1a:4f:fe:11:6e:ae:99:d3:
         d7:25:87:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:51 2026 by rpki-client