Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa
File:                     d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa (raw, json)
Hash identifier:          FFKVWEk3KjQGZCarYazkE77R11HB+Ni8aytv4myeIRQ=
Subject key identifier:   C7:E3:63:AC:BA:01:45:BB:9A:8D:A8:C3:0F:96:87:A8:7C:8A:07:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CED27B240C3713C7EAC686A28
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     5432
IP address blocks:        23.61.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:b2:40:c3:71:3c:7e:ac:68:6a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=fc9884fd-2cd6-4f15-94b7-48c59ef762d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:17:1e:ad:f7:65:78:ec:55:32:7e:6d:75:
                    c1:e5:3f:81:96:fa:a4:82:bf:0b:72:af:1d:dc:af:
                    01:3f:28:ff:54:0a:0a:80:ee:10:eb:81:49:ea:c4:
                    c3:26:65:55:fe:d5:0f:f0:9d:16:b1:6b:3b:00:9f:
                    fa:a9:36:52:38:9f:30:01:a6:ec:a7:18:0c:35:0a:
                    e8:3a:08:35:77:3b:1d:57:5c:1b:23:1a:d3:32:5b:
                    25:4f:30:0e:af:7a:ab:1d:4b:e4:f4:10:d1:82:ae:
                    3c:a0:7d:d6:ae:1f:1f:76:f9:48:5d:75:63:bd:a1:
                    65:2b:dd:3b:5a:d8:ab:e5:02:3d:0e:1c:36:31:d3:
                    eb:ad:8a:da:8e:ba:32:c4:c3:49:3f:20:5e:85:ee:
                    2c:25:01:36:a3:ce:45:4e:37:a4:12:6e:0f:7c:48:
                    68:e2:a1:88:18:71:8c:09:2c:8c:aa:78:65:19:b9:
                    70:28:a2:34:1b:87:d6:3f:76:13:ae:f1:1f:e5:eb:
                    44:3a:5c:d2:da:4a:60:1f:34:18:ad:0e:f2:5c:29:
                    6d:76:d8:50:1a:0e:25:0d:84:89:f1:6d:82:bc:7a:
                    6f:99:fa:5e:1c:6b:72:96:53:80:17:af:d9:6a:49:
                    4f:1c:89:bb:1f:98:53:51:59:b6:c0:f9:2a:d0:db:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E3:63:AC:BA:01:45:BB:9A:8D:A8:C3:0F:96:87:A8:7C:8A:07:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:dd:c7:ae:ed:14:82:25:86:33:05:34:4a:70:08:96:79:f7:
         35:3e:24:76:67:92:0d:70:ec:db:96:ba:33:ea:b4:6b:bf:19:
         11:ab:60:1b:e2:0c:ad:5d:cf:15:13:68:15:a8:36:fa:45:33:
         d6:6f:1a:9e:a1:9a:c7:a1:98:37:d1:0d:2e:5d:2a:85:8c:01:
         ad:c6:99:f5:eb:bb:d9:9f:5d:90:b4:1b:38:b9:6d:53:91:8b:
         dd:3a:6e:30:49:1f:5b:09:03:1b:77:3c:62:3c:be:d8:16:71:
         84:f3:f7:53:28:93:0d:02:90:0f:6a:a7:b8:99:28:ab:36:08:
         0e:32:18:3b:94:6c:15:cf:17:eb:de:2f:5e:11:b1:67:00:04:
         36:e3:fc:c8:ec:29:e7:5e:43:53:86:c0:e4:f0:af:ae:69:ab:
         5e:e7:ad:b4:af:5c:f5:b1:a8:23:41:22:73:e7:bd:80:06:a2:
         45:f8:2e:83:9e:a0:ac:48:4c:38:fc:94:84:4c:66:99:fe:99:
         bc:c5:ac:50:5a:c4:c4:f4:84:27:af:6a:36:97:1a:43:83:f4:
         02:39:21:9e:a2:44:7b:b7:38:d4:28:73:6d:bd:b3:08:67:df:
         f8:fc:dd:af:5e:dd:ef:92:36:4d:ae:f3:d0:db:ea:f9:ae:f5:
         72:8d:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:56 2026 by rpki-client