Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec3d41-0ce9-32a6-abc7-0acbc42ff200.roa
File:                     c5ec3d41-0ce9-32a6-abc7-0acbc42ff200.roa (raw, json)
Hash identifier:          x0n3G51lmEUlrNc1ktgy1518TFMkxArF2X6jIex92f0=
Subject key identifier:   8E:E8:D2:47:FD:8F:D9:D4:8B:09:81:3C:0F:49:1F:43:7F:ED:D7:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDB022F03A9B4708A270D7500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec3d41-0ce9-32a6-abc7-0acbc42ff200.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     16625
IP address blocks:        23.36.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:2f:03:a9:b4:70:8a:27:0d:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=04618d78-3c6b-4b10-b211-a5d989b63ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:51:85:3d:15:cc:d2:6a:22:ac:39:ae:38:
                    a8:99:5c:06:97:e2:6e:3f:c2:66:eb:a3:55:ac:23:
                    c7:cc:f0:fc:ce:13:36:be:49:5a:de:68:b7:b5:c4:
                    4b:48:03:97:22:12:f7:18:b3:96:65:f2:8e:20:96:
                    f6:05:05:3e:7c:36:d6:b3:01:e3:fa:75:fa:10:e8:
                    c5:07:c6:b1:0e:a1:71:ae:c3:37:21:40:75:f7:4e:
                    cb:09:3e:ef:e7:01:69:7b:76:1d:91:53:bf:11:e8:
                    7d:7c:66:c5:29:28:68:f7:cf:43:fc:8e:8b:b9:2a:
                    bd:80:58:6f:dd:45:71:df:10:f5:47:d3:9c:f6:70:
                    b0:6a:60:9f:82:3a:6f:13:70:f6:5a:40:0c:29:fd:
                    7a:b8:6a:20:2d:6e:a6:30:6b:54:2d:9d:34:6f:39:
                    c9:c1:37:c5:6d:96:cf:e5:d5:fa:de:0a:e6:4d:5a:
                    63:61:52:51:c3:87:8e:7e:9b:55:0a:a8:69:f5:4f:
                    9f:90:4e:48:0f:f7:6e:5e:20:d6:54:2b:97:91:bb:
                    6f:f3:28:03:55:c7:69:ec:8f:df:e0:43:18:e6:6b:
                    a0:79:b9:9e:d0:ec:91:33:3d:10:6c:90:1e:60:0a:
                    2d:c1:1b:34:bb:2e:fc:f9:54:58:41:5e:e6:26:26:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E8:D2:47:FD:8F:D9:D4:8B:09:81:3C:0F:49:1F:43:7F:ED:D7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec3d41-0ce9-32a6-abc7-0acbc42ff200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b3:24:eb:d5:39:dc:3a:02:5f:31:0c:f9:8b:49:ba:c2:ea:
         20:25:77:39:b0:b1:46:bd:e1:0e:c9:23:0d:5c:bf:ee:59:33:
         d1:3b:ba:2f:ef:d6:78:23:f4:4f:58:74:90:9a:11:69:2f:bb:
         0c:5b:2b:48:de:85:f1:5c:09:a5:42:4e:84:d4:32:32:a2:69:
         10:8e:97:56:f5:4a:0e:d6:ad:5f:66:ce:75:45:6f:21:12:77:
         1d:cc:5c:cd:0a:09:22:ca:28:85:f8:5c:27:65:40:06:d4:65:
         89:ba:70:a6:b3:ef:02:9c:18:34:06:6c:10:0b:3c:fc:f4:a4:
         b9:7a:7b:7e:35:ae:72:58:9f:2b:cc:56:59:e4:86:8d:91:b1:
         62:33:df:3c:a8:68:f4:a8:ad:d7:70:df:65:96:e2:8a:4f:ca:
         96:46:12:e5:9c:53:6d:20:f6:2f:50:a3:45:30:3e:10:c2:d6:
         b4:07:2e:14:21:62:94:e7:f6:8c:1c:f8:bb:34:30:92:27:86:
         02:6a:54:ec:a0:cd:cf:35:29:fa:76:03:2c:40:b6:ca:c5:33:
         b1:46:e7:53:bc:60:c2:95:24:54:8b:c4:85:89:04:50:03:f6:
         ae:ff:d9:dd:8c:24:78:fc:b8:c0:b9:bd:81:5e:80:a3:9a:e2:
         1c:5a:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:37 2026 by rpki-client