Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2842788-54c4-3dcb-b432-55260931176a.roa
File:                     e2842788-54c4-3dcb-b432-55260931176a.roa (raw, json)
Hash identifier:          Sb3he9WAS6nqeANEuhSXptTPi5AIyPNcilyzE6zuFSs=
Subject key identifier:   81:38:CB:27:68:20:C4:EA:26:DC:F6:D3:A1:5D:AB:73:F4:15:16:45
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE41B47CB6EC05AA6E6662000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2842788-54c4-3dcb-b432-55260931176a.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16625
IP address blocks:        23.196.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:47:cb:6e:c0:5a:a6:e6:66:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=36597997-a776-4d78-88a8-8ec08d4fe361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:d4:05:59:67:7d:f4:24:08:94:1d:19:96:
                    68:29:df:11:47:fa:eb:75:9c:f3:1e:20:bb:b9:d5:
                    9f:b5:2c:82:45:52:f7:d0:69:96:ca:3d:32:3b:82:
                    c9:9f:55:08:f3:48:6b:8c:f0:39:af:ac:db:7a:38:
                    b4:97:d6:48:a2:3e:1d:23:58:99:98:3f:8f:4a:7d:
                    a1:c2:91:2e:cb:78:d1:9f:01:b9:a1:dd:90:13:57:
                    44:6e:30:84:a3:f6:cd:52:2e:bd:cb:06:6f:5d:a1:
                    a5:d9:24:3a:53:b5:47:6f:7c:07:15:d9:56:87:00:
                    c3:e9:37:d1:d1:33:65:88:4a:c9:ae:ba:0e:60:81:
                    b3:97:40:86:c1:f3:b9:74:1b:6a:4d:62:46:21:f5:
                    93:04:0a:22:66:26:d4:54:bb:89:71:f8:52:28:bc:
                    73:c7:fe:67:e9:6a:9d:78:32:5b:1c:0d:a8:08:9a:
                    da:7e:2f:69:22:24:e2:63:4b:cf:12:d3:f5:fb:8d:
                    0a:07:a2:72:3c:1a:26:2d:85:f1:58:4d:5b:8c:07:
                    91:35:d3:b9:7e:c8:6d:e7:77:b7:c9:6e:53:01:d6:
                    df:49:21:7b:52:49:85:88:96:b6:e0:be:8d:2f:d4:
                    b4:be:56:4a:51:54:14:2e:b4:9b:6e:dc:ee:59:cc:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:38:CB:27:68:20:C4:EA:26:DC:F6:D3:A1:5D:AB:73:F4:15:16:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2842788-54c4-3dcb-b432-55260931176a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:c4:71:03:9c:a3:4b:ac:ed:d4:20:f1:98:b9:c1:80:09:
         ad:9e:29:42:f4:6f:b8:ed:ce:16:e8:90:86:02:db:2d:82:83:
         00:22:27:85:ef:31:29:4e:ec:b3:6b:6b:3f:48:56:5a:e1:f6:
         7c:3c:b4:ff:84:e6:f5:9d:24:89:d0:64:bc:07:b5:c6:0e:66:
         ee:a4:df:19:83:37:ef:49:05:c0:57:e7:b5:ad:ea:07:3c:11:
         ea:07:a0:d3:22:fa:35:d8:72:c1:65:db:36:88:3b:f7:c4:97:
         2b:d3:f5:3b:65:97:d0:31:81:88:3b:b6:ca:83:1a:3e:03:a2:
         6c:da:18:b8:b1:16:28:99:ca:bb:61:d7:1c:0c:fb:56:6e:f9:
         35:c3:31:13:7e:85:51:c7:b1:85:d3:64:97:61:df:2c:b5:fe:
         74:a5:c4:a9:de:7f:40:47:7b:f5:bf:1c:c5:78:da:4c:51:9a:
         e8:c9:32:f5:fb:ac:76:3c:9b:63:53:c8:a7:c4:20:2a:ea:e6:
         3a:39:3f:2e:c3:c3:70:df:0c:27:77:2c:3c:85:fc:bd:8a:bb:
         f5:44:55:ff:59:00:12:d4:49:5d:68:17:a5:bc:25:ca:83:cf:
         96:cc:e7:a1:66:bf:7e:0d:78:1b:c7:4c:39:24:2a:76:4f:1b:
         cf:1a:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:45 2026 by rpki-client