Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efab1456-43d5-3bfe-8a0a-a44ff5176dd5.roa
File:                     efab1456-43d5-3bfe-8a0a-a44ff5176dd5.roa (raw, json)
Hash identifier:          hirreFVtOqEQyCjlqgRbhHSKR3rovY4i3QwoMNLie7M=
Subject key identifier:   B3:D8:63:B2:97:62:50:81:1F:0E:EE:D4:EC:88:EE:30:85:DD:01:FB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CEE8CD3796BD0DC19EE378680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efab1456-43d5-3bfe-8a0a-a44ff5176dd5.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     16625
IP address blocks:        23.62.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:d3:79:6b:d0:dc:19:ee:37:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=f4962e70-7678-486a-b3d2-b3deb621ad04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:ea:0b:2f:14:4e:41:49:da:73:e2:75:11:
                    c7:4b:23:07:f3:d6:8b:85:65:6a:a0:0d:df:92:f7:
                    a0:fe:a5:35:19:32:ce:77:bb:2d:8a:c4:af:5b:5f:
                    bc:29:e2:03:da:d5:97:a6:94:0e:e8:84:f3:b7:e1:
                    57:e6:16:ed:4c:c3:72:7a:80:44:48:82:90:74:af:
                    1a:76:fa:4b:4e:ca:5e:d6:aa:63:a4:b1:b3:a5:05:
                    2b:7b:ff:25:85:98:28:d7:f7:2b:5f:4a:77:97:bb:
                    1f:bf:ad:8f:62:68:0c:7a:4f:a5:0e:d2:bd:3d:d2:
                    ef:a6:c6:28:48:80:2b:c8:3a:49:1e:22:a4:61:31:
                    1e:89:b3:6f:b1:e0:1b:2e:a9:99:71:53:ba:87:19:
                    a1:63:e8:57:fe:54:6b:2e:9f:b7:75:4a:25:67:b0:
                    8e:c4:03:cb:65:b1:5d:26:b8:d0:a6:89:08:92:b9:
                    8b:95:b5:f8:74:38:93:26:3a:2c:2d:49:65:66:90:
                    de:a4:75:d7:8d:65:8a:4d:5c:e5:dc:db:52:be:d8:
                    62:75:91:81:63:50:09:8f:5e:28:be:4f:df:62:ca:
                    a8:6d:ce:32:98:4b:a7:04:ff:ca:e3:ed:5a:d6:4a:
                    00:c4:5e:53:36:5d:50:f5:d3:ac:e3:96:16:3e:e3:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:63:B2:97:62:50:81:1F:0E:EE:D4:EC:88:EE:30:85:DD:01:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efab1456-43d5-3bfe-8a0a-a44ff5176dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:dc:fe:ec:79:06:c4:8e:74:07:3f:1c:5b:4e:06:db:5d:ab:
         f6:79:8b:bc:7f:03:0c:31:37:d0:24:83:6b:05:b4:d1:06:8c:
         50:86:d9:3f:45:4d:7c:3f:5f:3a:ae:e0:c3:d3:d7:d7:be:d2:
         5e:21:e9:41:64:60:0b:10:b8:39:3c:21:ff:28:f9:46:e8:78:
         30:87:c7:ad:33:7a:4e:98:f4:85:42:7d:61:88:15:98:6d:e3:
         e7:ef:0f:4c:fd:8d:d3:84:46:51:3b:05:7a:bb:0b:b0:fb:2f:
         43:09:ca:8f:e3:64:15:5d:d8:6d:2a:c7:7b:74:dc:76:ea:fb:
         2a:da:ac:e8:71:d2:70:2e:fc:1b:15:64:85:b1:45:7e:e1:c3:
         39:a3:43:9a:38:ce:3d:88:3b:a8:5f:5a:eb:14:57:1d:21:d7:
         19:fa:86:e7:8b:0c:60:88:ee:e6:b0:56:14:e9:0a:78:3c:a9:
         d1:a8:ae:4c:18:30:f5:17:c3:09:72:c2:8b:a9:ad:35:15:34:
         29:92:46:4a:6c:f5:78:2d:3d:65:04:66:9c:95:44:d5:36:16:
         4b:d2:72:79:fd:d1:c3:82:96:61:0d:b5:f7:6e:6e:56:70:6f:
         d4:f5:3d:18:46:9c:d5:8f:d9:eb:49:5e:6c:0a:34:ec:59:f7:
         c9:26:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:47 2026 by rpki-client