Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d05be79f-a6bf-3f27-a8e5-0bf670dbd128.roa
File:                     d05be79f-a6bf-3f27-a8e5-0bf670dbd128.roa (raw, json)
Hash identifier:          yRodtZHDGGrfBJAENpwGd9aNXBW57rUa9Tnbl6pRr64=
Subject key identifier:   55:F1:E4:ED:51:1F:E6:AF:5D:43:BF:0B:41:48:BA:82:02:7F:25:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE41B42EF47B72876300CC520
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d05be79f-a6bf-3f27-a8e5-0bf670dbd128.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16625
IP address blocks:        23.193.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:42:ef:47:b7:28:76:30:0c:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=ffee3b75-6858-4771-910d-f0a5e17d6a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:5e:32:e7:be:bf:54:21:12:ee:ad:7d:a2:
                    4f:5c:83:f7:2c:6c:ee:b4:42:15:20:4f:17:a4:c6:
                    43:fd:c8:ec:3d:b5:19:d4:a6:a0:95:af:3f:aa:1a:
                    fe:49:99:8d:7d:09:ad:fb:a5:bc:91:06:73:15:5b:
                    0b:5d:30:cf:c6:c8:43:f2:80:72:16:a4:be:df:e9:
                    53:9b:14:fc:b3:c5:a6:84:77:ac:cf:20:33:58:71:
                    79:fe:d5:fa:1f:4f:ab:a6:b2:e9:8b:52:21:8a:01:
                    44:3f:22:17:89:b4:92:29:3d:17:dc:bb:2b:56:91:
                    3f:1a:97:5d:2c:a8:cd:de:f8:2d:81:46:c8:50:1f:
                    c6:48:9d:a3:79:6e:f9:3e:d2:5d:ed:73:f7:6d:f3:
                    89:c9:14:9c:03:2b:e2:9c:18:df:7a:59:95:51:ef:
                    d6:14:55:df:4a:cf:d8:ce:e1:15:56:71:68:96:9e:
                    20:dd:79:d5:6e:df:ee:b9:59:35:25:e7:76:32:ff:
                    68:8e:ee:1a:d9:34:70:6e:1c:b3:1d:0d:50:a2:23:
                    18:d5:70:17:c6:3b:c5:2d:4a:50:0f:cb:a1:93:fd:
                    b8:00:50:55:89:8b:6a:15:db:e1:cd:e3:bc:b4:1a:
                    26:46:74:1c:56:e0:99:ce:0a:ce:75:0a:5e:bc:f8:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F1:E4:ED:51:1F:E6:AF:5D:43:BF:0B:41:48:BA:82:02:7F:25:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d05be79f-a6bf-3f27-a8e5-0bf670dbd128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:22:8e:7e:6c:20:e5:ce:b3:ef:0b:a3:ed:7f:7c:3a:5d:
         12:93:59:0f:e7:58:69:d9:18:0f:80:90:93:55:d3:ec:de:bc:
         82:90:14:b1:b0:49:ba:96:b4:f0:26:1b:03:f3:4e:11:f9:15:
         e6:4d:a8:bd:70:32:27:88:4c:ad:8c:2a:7c:65:4c:63:72:a8:
         ff:a5:66:25:f2:f5:25:37:9e:4f:78:8a:c3:a5:ad:f6:93:85:
         ea:b6:da:cb:04:4a:ca:56:03:0d:0d:94:80:2d:37:07:e1:65:
         82:68:e1:10:12:01:21:fd:79:92:c1:50:61:bd:f5:7a:6b:0a:
         4c:a2:88:04:54:a5:09:fc:df:56:24:72:6a:85:2c:3e:ce:57:
         20:9b:45:f0:3e:2a:12:a9:c8:2b:75:e1:91:4a:15:b3:4b:75:
         9b:2d:c8:06:d4:9d:47:04:b1:ee:d9:0a:d4:ba:66:34:40:75:
         8f:ee:94:1a:40:08:21:98:e7:7a:9a:b1:cb:69:ee:77:ea:1c:
         bd:b7:dd:b1:79:5c:dc:4d:c2:9b:d2:93:7d:ad:9b:38:78:1c:
         ed:df:ad:15:54:73:6f:02:45:4e:62:3c:cd:b3:b9:08:95:59:
         6c:b5:e5:ce:9c:b9:3a:1c:f0:c2:04:ca:3c:af:53:3e:95:82:
         6c:f7:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:51 2026 by rpki-client