Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d411f933-049e-3270-832d-81770845ad4e.roa
File:                     d411f933-049e-3270-832d-81770845ad4e.roa (raw, json)
Hash identifier:          lJqMhhzNM9Cc76XT/vcPIWo2mYviB3u4yTuuMQ4qVPA=
Subject key identifier:   44:29:35:92:A7:59:52:9B:35:B3:D5:18:5E:F2:9D:C6:F9:16:C2:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA01555FF32C5775000547C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d411f933-049e-3270-832d-81770845ad4e.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        23.47.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:55:ff:32:c5:77:50:00:54:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=277d179e-f2b1-4bba-841c-5987147b87e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7a:d6:c4:b2:9a:f9:ba:cd:72:03:a9:9e:a0:
                    16:f4:f8:31:03:db:5a:85:b2:50:ed:c7:78:f8:9c:
                    35:79:2d:19:41:0c:9a:8a:0a:51:eb:dc:4e:71:1c:
                    87:f6:ca:db:b2:b4:ca:a6:6b:3a:59:b0:04:d3:98:
                    bd:60:72:3b:e7:f9:91:4f:51:cf:12:ed:ba:1e:ce:
                    6a:69:92:31:02:dd:60:e5:51:66:2a:67:29:21:88:
                    ae:30:1d:9d:f2:a5:1b:8f:35:27:97:b0:34:83:ff:
                    ed:5b:d5:5a:ef:55:0d:83:bb:87:89:6d:b5:de:27:
                    14:d5:f4:88:43:b4:27:9f:0a:c3:13:c4:75:d9:48:
                    51:78:10:ce:ec:76:55:25:f9:61:52:f6:f4:03:e4:
                    22:ff:19:3b:5e:fa:c1:f3:6f:48:ff:5e:1b:cb:ae:
                    c1:78:45:80:ad:51:ca:06:a5:0a:36:ed:18:fb:fd:
                    ec:5d:7e:ca:b1:b8:00:76:8f:c9:5b:20:35:40:3d:
                    4f:b7:76:cc:e0:d7:5a:ed:41:4c:2b:fd:fe:02:6e:
                    69:9b:0c:51:61:db:9d:f2:28:80:f5:3e:0c:ac:ef:
                    96:87:9d:b1:8f:ba:f9:be:76:df:48:bf:86:f7:0a:
                    ff:89:52:6e:fe:b0:f6:3b:4c:19:7f:34:63:ab:9a:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:29:35:92:A7:59:52:9B:35:B3:D5:18:5E:F2:9D:C6:F9:16:C2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d411f933-049e-3270-832d-81770845ad4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:5d:cb:9d:54:9d:60:25:7a:af:0c:c7:c4:d8:cb:64:01:
         23:79:20:0e:f8:42:ec:ba:9d:ea:04:3a:76:22:21:d6:b1:9e:
         3c:34:21:12:2b:2d:e6:83:41:c0:e3:34:fe:cc:ff:60:94:bd:
         fd:d9:04:b2:5f:70:ed:1b:5c:62:e0:1c:10:84:15:e7:1e:0d:
         1d:11:c5:23:fc:49:63:6f:95:8e:b2:42:8b:08:04:b5:b7:74:
         4a:1d:ff:34:e1:33:3b:19:60:8a:de:5d:ca:e3:37:9b:f0:f0:
         e2:80:60:23:7e:49:de:c9:9f:1b:a5:ed:13:e5:ae:1f:0d:32:
         4a:8d:e2:c8:bb:65:4e:47:cc:f6:96:6d:bf:0d:aa:f6:ac:6c:
         63:ab:ca:57:bb:b3:5c:60:be:16:d4:47:08:61:a2:80:47:83:
         88:6c:3d:d4:b1:d8:c1:a8:7c:00:bc:21:e3:a7:0c:80:42:cf:
         70:bd:3b:ce:65:da:ea:ca:e3:7a:1a:56:2d:83:88:98:c5:71:
         dc:c0:e9:f8:1d:c9:3b:21:7a:50:e8:20:8e:78:00:94:d0:27:
         ba:55:9c:97:26:a4:40:62:f4:ac:f1:f7:b0:6a:3b:94:af:72:
         35:9c:fd:c3:a1:53:b3:e7:e6:98:07:83:86:a5:49:7f:4c:74:
         8c:76:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:38:20 2026 by rpki-client