Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee2ff596-02fc-38ea-b913-b9f2f7ac4b59.roa
File:                     ee2ff596-02fc-38ea-b913-b9f2f7ac4b59.roa (raw, json)
Hash identifier:          BuWO1QeYLQm4rWueoUnUU1wW2Q+VcjSvZ7k2idHNp1s=
Subject key identifier:   FD:EC:EA:12:72:4D:A4:F2:F4:8C:9B:01:73:7B:F0:B3:63:33:F4:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78783F21EB8E17ACA915040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee2ff596-02fc-38ea-b913-b9f2f7ac4b59.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.54.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:83:f2:1e:b8:e1:7a:ca:91:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=91eb71d5-1157-4e6c-91b9-8ab2b21a6fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:4b:64:cc:07:02:49:97:0a:9d:60:d7:01:
                    43:6e:40:cf:53:28:6a:ab:93:ec:62:e4:8e:e7:8d:
                    89:55:b6:9c:ab:38:28:8c:a0:4b:7e:cb:b8:ff:b6:
                    13:65:41:19:ff:64:46:8b:16:6a:6c:28:03:45:df:
                    fc:26:f5:c6:76:7c:6a:40:84:6d:8e:2f:b5:c5:e3:
                    da:8f:fc:99:60:f1:3d:d8:dc:37:b1:2f:ec:f3:55:
                    c4:8d:83:d4:b7:c6:f0:7d:23:78:89:43:fb:6f:21:
                    9e:bd:3d:e7:d6:a2:41:c1:b5:ec:2a:76:25:64:77:
                    b8:33:ba:ad:7f:60:8c:55:ec:2f:8c:89:d5:37:c1:
                    10:33:84:04:3e:a4:8f:d2:5e:87:46:bf:73:98:ce:
                    0c:b2:40:c2:be:7a:d6:25:4d:2c:32:61:7a:a2:0d:
                    d9:b4:81:eb:c8:7a:78:a4:3f:80:79:77:f6:2d:ac:
                    09:0f:b5:cd:81:a1:13:dc:32:fa:c8:78:bc:e6:25:
                    5e:0a:a2:18:08:ee:3c:20:a9:a5:11:32:cc:8b:5f:
                    e8:d9:c1:6c:59:cd:e4:bf:1a:ff:43:48:58:37:b7:
                    a3:84:00:72:47:62:4a:02:3c:20:ff:85:ce:69:2b:
                    3a:1d:25:93:74:0d:21:62:b8:8b:7a:52:78:b5:0b:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:EA:12:72:4D:A4:F2:F4:8C:9B:01:73:7B:F0:B3:63:33:F4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee2ff596-02fc-38ea-b913-b9f2f7ac4b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ab:b3:b1:ac:ab:03:cb:66:1f:69:4b:64:2c:ca:89:e8:86:
         89:fb:1e:79:8b:31:9d:ba:06:52:23:8f:a6:d8:2d:7f:72:c2:
         66:6f:1e:1f:e4:ad:6d:b4:1d:9e:d3:08:f0:49:8a:d6:e8:74:
         73:fc:e8:5c:3f:d1:16:5c:7a:b4:c3:27:68:97:43:27:c2:09:
         ce:24:67:c0:21:6a:fc:bb:8e:75:24:06:42:cf:c3:36:bc:20:
         df:a5:80:52:00:5b:8f:8a:5d:77:fb:44:c9:4e:5f:eb:f9:f4:
         22:c3:04:ef:a7:50:e6:aa:a1:fc:db:31:f3:6a:61:27:d4:81:
         99:dc:a1:0f:38:60:56:b3:de:b3:77:d9:ae:1a:6a:ac:98:60:
         38:c2:2a:a9:06:e8:b8:b6:45:b1:04:c9:14:e4:29:f2:84:6b:
         9b:94:b7:de:f2:e0:47:83:be:8a:5a:b8:e2:95:6d:c8:98:07:
         dd:11:d2:9f:f0:6b:65:c8:70:51:34:cc:23:b1:fa:9c:bc:0f:
         28:f0:a2:63:c9:70:fa:28:97:c6:0f:6a:13:73:59:f0:a5:fc:
         57:aa:1b:4d:8e:b7:8f:83:9a:90:8f:f5:9b:b1:3d:d3:6c:0a:
         33:03:fd:39:1f:d8:61:ae:7f:1f:84:fb:f0:f7:e1:98:21:df:
         ba:75:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:08 2026 by rpki-client