Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d62c3c31-c4bd-310b-8906-62774f194027.roa
File:                     d62c3c31-c4bd-310b-8906-62774f194027.roa (raw, json)
Hash identifier:          h4u4JWz5aNepajNa/sduao4nmZCS44nXHplZkMS2cUQ=
Subject key identifier:   4D:E2:19:D9:5F:96:06:77:3F:5C:F8:D0:8E:49:A6:0D:96:69:A9:A0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA0155715D9C265A8F098EA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d62c3c31-c4bd-310b-8906-62774f194027.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        23.47.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:57:15:d9:c2:65:a8:f0:98:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=35f5fc31-0a97-41a9-aed8-9454f3899cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:22:ff:70:78:53:44:e7:fb:fa:a2:32:f1:
                    b2:5f:48:7e:65:f2:21:44:bd:4c:3e:ef:94:55:e6:
                    80:b0:5b:be:5c:00:bb:ae:71:0f:d2:c3:84:52:ec:
                    44:0f:73:28:b2:2e:df:47:55:42:25:9d:c5:83:3d:
                    9d:9e:34:08:56:91:ef:2e:cb:80:4d:aa:5a:7b:b0:
                    ab:c4:e3:53:ed:f0:70:6c:93:35:28:a5:f6:4c:bd:
                    3b:b2:69:f7:57:ea:d8:d6:e8:ab:77:8c:b7:1b:ef:
                    e6:d2:03:1a:19:5a:6e:41:5a:55:0d:7a:2d:35:5e:
                    7e:0d:09:39:5b:fa:e7:22:43:a7:36:20:94:b7:c6:
                    52:7d:e2:df:7d:a9:cd:06:d0:ab:19:cc:73:50:f1:
                    e5:bf:b1:b6:a6:b1:2e:e0:c1:ce:96:42:93:bb:f2:
                    31:01:93:b4:07:db:e9:01:59:df:3a:34:61:0a:52:
                    7d:86:41:d5:64:d3:7e:22:5b:bc:e0:71:73:e9:44:
                    b2:47:42:9f:19:af:aa:cc:ca:fc:1b:5c:c5:59:77:
                    f3:4b:bb:c4:10:e4:7e:0a:f5:b7:c7:db:f7:95:50:
                    45:58:10:29:37:52:68:b0:da:37:14:82:c8:b0:bd:
                    12:e7:ff:86:9c:96:15:7e:e8:94:b5:bf:e4:a3:a4:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:19:D9:5F:96:06:77:3F:5C:F8:D0:8E:49:A6:0D:96:69:A9:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d62c3c31-c4bd-310b-8906-62774f194027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:5d:4f:ce:3d:6d:79:c7:5b:01:ed:6f:60:62:a1:13:30:
         1d:03:63:2f:ff:d8:48:bb:3d:66:f9:bb:47:d8:7c:96:ab:95:
         30:f6:8c:0d:3d:14:7f:5d:48:1c:25:4f:c7:1d:76:18:e8:d7:
         bf:48:ce:d5:d6:a8:01:6d:4e:bf:b4:44:71:19:d2:c6:b0:49:
         38:d9:7b:04:62:15:04:58:55:e1:1a:36:0a:4a:73:75:76:29:
         67:aa:73:1b:76:be:8d:16:92:13:c2:ce:9a:cb:05:43:5c:f8:
         b0:f6:bc:ce:2a:a6:5e:40:81:a5:fe:7a:0d:82:6f:88:41:f9:
         9e:e4:cb:6a:28:00:0f:db:d8:75:ed:52:a4:60:0d:8f:f4:7d:
         7c:f9:06:dd:c3:29:46:33:b2:77:24:25:ab:28:75:ac:cd:ed:
         0e:0a:5c:f8:3b:23:5f:bb:60:73:cb:14:48:6a:cf:6f:60:09:
         c1:2d:d7:fc:a5:d9:55:07:80:3f:a6:29:be:56:d1:e1:78:2d:
         95:1c:3b:28:9a:fd:f6:a9:15:87:3b:df:d9:27:bd:fb:de:46:
         3d:2d:29:1a:87:d3:03:f4:3c:91:a6:86:49:7e:45:d3:20:d3:
         fd:40:24:2e:e4:02:54:1a:83:0e:37:1f:d4:3e:1b:7c:90:8a:
         02:e4:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:47:06 2026 by rpki-client