Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb8294d0-7922-34ae-819a-25f3893b96eb.roa
File:                     eb8294d0-7922-34ae-819a-25f3893b96eb.roa (raw, json)
Hash identifier:          A6GDpR8P3+e7bvzdb4TmmfBTnWaNkgLBx+e8H4UJVUE=
Subject key identifier:   E0:3D:36:07:53:C1:8C:71:BB:77:DA:6C:5A:F9:F9:C8:31:7E:9D:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0647B31DDEC85FC20B9A7640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb8294d0-7922-34ae-819a-25f3893b96eb.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.198.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:b3:1d:de:c8:5f:c2:0b:9a:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=c9da6e70-0dea-4c78-8624-8e3850dd4e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:70:24:d9:f6:77:c2:4c:29:d1:b3:99:b8:
                    df:76:67:fe:22:3b:99:c6:7a:ce:6b:70:89:3e:32:
                    bf:62:16:ff:d1:da:89:a6:66:46:e6:37:13:66:a4:
                    6b:71:64:5e:84:a4:69:3c:03:f9:0d:cc:48:be:0b:
                    bf:a2:65:4c:ea:2d:95:1b:39:5a:7c:9d:91:4e:70:
                    6c:41:16:d2:5b:df:f0:f4:d2:64:97:39:74:96:80:
                    d7:f4:c8:0d:7e:89:f6:e2:b0:52:12:44:5e:4c:ca:
                    80:10:c0:2e:ca:8e:7a:be:0d:04:25:56:8b:29:04:
                    6e:5e:b2:af:9d:30:c5:81:60:45:6e:f4:b7:3d:9b:
                    df:b2:aa:b4:7d:be:99:ac:17:39:22:0f:91:49:71:
                    fd:e5:bc:70:b4:d0:b4:a4:84:8c:c6:28:2a:76:50:
                    3d:d3:c3:61:cb:b3:04:33:76:42:c5:75:ca:51:3a:
                    c5:9d:0a:2a:52:49:cf:42:ee:13:62:af:4e:f5:db:
                    48:7b:b5:60:a9:60:a4:67:b0:1c:1e:55:51:7e:b7:
                    7f:ce:6b:07:de:46:17:6a:94:44:9b:49:5f:bd:16:
                    30:f8:95:e9:d1:05:0d:39:82:3f:6f:43:5d:75:b4:
                    2c:a4:e0:e4:e7:aa:b3:57:1b:3e:cf:2b:20:ef:64:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3D:36:07:53:C1:8C:71:BB:77:DA:6C:5A:F9:F9:C8:31:7E:9D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb8294d0-7922-34ae-819a-25f3893b96eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.198.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:a3:9c:c4:72:33:7c:ae:0d:ae:3d:6c:cf:76:79:4f:db:
         44:54:9d:f3:35:c4:dc:47:5f:45:cf:10:90:79:f7:52:e3:7a:
         a4:ec:2e:8c:38:3b:15:e8:50:e5:44:2b:bc:e1:29:ef:c5:8f:
         47:25:8b:f3:69:2b:ba:61:3e:3f:ef:d7:f5:65:58:cb:d7:59:
         04:66:c3:53:a9:63:01:51:45:4a:2a:5f:8a:77:b0:6b:16:fa:
         56:48:d7:6d:ac:c5:08:00:51:bb:a4:f1:38:07:a6:5a:ae:85:
         e7:a7:0e:d2:09:6a:64:0c:44:58:c7:a0:5e:76:dc:91:98:a3:
         99:7e:4f:2e:d0:ab:72:80:15:a3:17:1b:80:b0:f1:d2:8d:88:
         42:2b:47:2f:f3:af:fe:b5:71:f7:dd:d5:50:ec:40:b6:6d:92:
         fe:7d:05:44:71:9a:18:7c:be:c4:a4:12:cf:0d:8b:de:bc:c6:
         25:71:5d:c1:d6:0e:58:51:ae:c4:c0:8a:f6:48:e1:16:4d:e8:
         2c:22:7d:d1:09:c1:0a:23:4c:d3:a1:f2:bb:b8:14:d0:7d:05:
         42:be:e7:ed:a1:11:82:19:28:9b:97:90:b8:e3:a6:cd:22:b9:
         87:c2:3e:32:d2:5a:3f:2a:61:97:9c:f3:e8:67:84:77:6f:15:
         eb:d7:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:05 2026 by rpki-client