Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9e53aca-be8c-3d42-911f-ba6cfc6e75e4.roa
File:                     c9e53aca-be8c-3d42-911f-ba6cfc6e75e4.roa (raw, json)
Hash identifier:          EucqCcuyLRUpVD0WbojET3s8bqRV+Ozf8sdOTShidQY=
Subject key identifier:   D7:67:83:74:6E:17:70:83:66:FB:EB:99:A5:3E:01:93:AC:9B:97:9E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0647B265010CB8420A04A000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9e53aca-be8c-3d42-911f-ba6cfc6e75e4.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.199.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:b2:65:01:0c:b8:42:0a:04:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=c90567e5-696b-42ba-b296-9df75b8ba46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:b0:d2:52:d1:a1:c9:fd:6c:e3:ac:03:44:
                    19:d2:56:70:d5:c5:1a:60:0b:b3:76:fe:3c:6e:59:
                    15:2a:94:d9:1f:32:43:1b:0a:78:f0:8d:85:1e:9e:
                    ce:10:a6:52:5f:92:34:35:ce:40:7e:a6:d4:3d:c2:
                    cc:71:d3:6b:68:f2:56:8e:7f:46:d8:6a:f5:43:8f:
                    d2:95:57:48:9a:34:8c:2e:5b:ed:1d:0c:14:d2:89:
                    77:3c:10:c8:29:73:90:0a:a2:d3:d4:cb:ef:ee:33:
                    5a:c3:54:6e:50:02:df:45:b7:b5:7f:23:37:35:a3:
                    62:42:61:5b:bc:d9:84:59:e3:3d:48:da:53:65:97:
                    c3:f0:7b:76:ad:c5:38:a2:54:87:90:4c:e2:68:2b:
                    d7:2b:6c:ca:3d:e0:3a:87:b4:b3:49:af:24:5d:72:
                    24:5c:ab:1b:95:98:6b:ce:e8:bc:8a:19:fe:85:2f:
                    48:6c:79:88:52:de:78:51:9a:25:22:04:71:08:b5:
                    65:b7:29:60:48:b2:02:9a:c5:fe:18:7d:11:36:ed:
                    38:b7:b0:f4:b3:3f:ce:7b:77:39:5b:7c:13:b0:16:
                    25:e5:b0:8f:c4:3e:dd:94:5a:06:8d:df:68:ff:56:
                    9b:d2:c7:50:38:85:69:37:9f:24:dd:cf:0d:61:5c:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:83:74:6E:17:70:83:66:FB:EB:99:A5:3E:01:93:AC:9B:97:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9e53aca-be8c-3d42-911f-ba6cfc6e75e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:c8:65:19:25:a4:cf:e4:f8:b2:53:8a:31:79:a8:98:21:
         dd:be:22:f6:32:2b:89:38:a2:c3:41:9a:40:14:62:e3:fb:da:
         06:b5:78:b5:45:a2:d2:09:94:09:08:13:48:1c:ce:a2:33:dd:
         b5:64:4d:ee:7c:75:37:1d:12:76:b2:17:49:63:6a:de:44:47:
         58:fe:e6:63:96:c2:ce:86:0d:98:af:ab:5d:d9:64:5f:84:be:
         1c:17:d6:91:19:aa:e6:81:7a:5d:a8:ce:c8:b5:54:92:c1:05:
         e2:69:b0:c2:25:00:0d:b2:18:ea:be:99:4b:37:5f:cb:d9:f7:
         78:d1:1e:3b:c7:8d:78:7d:9d:c0:5a:46:fa:fa:05:51:36:26:
         66:0f:1e:48:57:bd:1d:c1:b6:63:84:d6:a9:fd:d2:dd:47:84:
         61:9f:52:92:43:92:07:72:80:9d:ee:94:fb:a0:4d:5c:05:2f:
         0d:e9:7c:be:a5:b4:6f:5a:3b:f1:30:67:1b:61:fa:de:9f:20:
         f5:24:b4:7a:bb:d9:51:5e:a0:97:76:35:85:e2:e0:db:42:22:
         59:8f:06:2a:e7:93:5b:26:40:f6:95:9a:f3:e7:a2:f5:27:35:
         18:3d:3c:09:7c:29:22:f0:99:16:12:77:56:04:c0:4a:66:0f:
         77:46:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:10 2026 by rpki-client