Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f48aaac8-b2c4-364b-8a41-4ffc2139d0aa.roa
File:                     f48aaac8-b2c4-364b-8a41-4ffc2139d0aa.roa (raw, json)
Hash identifier:          j1wCZYQKPlIRdGTCp2SUhGE82sWK/qKogCr68O0V19E=
Subject key identifier:   24:8F:29:3B:47:A8:63:D4:04:EE:64:12:23:DE:15:BA:43:58:43:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F23C27B977D422A7EBCB11700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f48aaac8-b2c4-364b-8a41-4ffc2139d0aa.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        23.60.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:7b:97:7d:42:2a:7e:bc:b1:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=f6d0a261-9da2-4c5e-a960-1eff1998d0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:7b:c0:11:ca:bc:e0:c6:a3:b3:66:75:d5:
                    ad:f7:58:1b:55:08:d9:f7:f6:74:4f:1d:79:3a:3e:
                    8d:c2:26:34:9b:7a:82:03:1a:dc:8b:99:3c:9b:a8:
                    23:91:c2:b3:3c:4e:4a:85:e4:62:3c:93:69:8a:fc:
                    f5:fe:ff:17:97:fa:ab:bf:83:ec:77:ad:bc:e8:cb:
                    e3:a6:99:93:f5:90:88:b5:84:cd:21:b5:70:a3:93:
                    b0:9e:51:93:58:65:55:44:d5:dd:db:51:2b:ba:f7:
                    6e:56:d5:b3:46:d7:91:21:85:c9:a5:af:f6:c5:f1:
                    27:c0:6a:7e:7d:08:6c:0f:22:08:5c:95:5e:1a:71:
                    ac:e9:07:7c:4c:97:42:27:00:1a:0c:de:62:1c:5a:
                    be:3c:46:bc:a3:2c:f6:ac:8c:e7:cf:6f:d7:2e:0c:
                    71:08:30:98:85:95:24:7e:75:fc:78:50:e2:24:4a:
                    23:0f:ad:37:68:14:5d:f7:a7:67:da:81:76:2c:fc:
                    31:1c:5f:1a:26:7e:61:36:11:1c:10:4c:e9:fd:64:
                    63:22:4a:8c:76:37:b5:fd:1e:66:b7:ef:3d:e6:7c:
                    68:46:8a:88:61:03:f1:4e:00:ae:52:22:a5:e8:3a:
                    3b:69:36:4c:de:61:9d:ad:22:64:58:d7:c7:8b:ee:
                    52:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8F:29:3B:47:A8:63:D4:04:EE:64:12:23:DE:15:BA:43:58:43:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f48aaac8-b2c4-364b-8a41-4ffc2139d0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.60.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b0:f6:17:82:6c:3c:36:fa:47:75:ba:9a:14:e2:e3:23:21:
         4e:75:85:a7:8b:3e:7f:c7:da:b6:38:63:f0:75:fb:9e:d7:9a:
         37:d8:52:a2:2f:b5:1f:75:3e:27:1c:42:78:55:da:6a:50:17:
         ce:bf:b8:79:ce:a7:79:03:c7:17:6c:56:a5:48:22:25:e5:10:
         fd:e8:86:c3:08:2b:a8:c0:55:3a:3a:3a:c7:f4:04:5c:dd:31:
         c2:3a:8c:6b:06:8c:c5:5a:1c:ed:32:ce:e1:eb:c5:b7:08:d9:
         3b:c5:ed:4f:70:f2:0e:ba:3e:a6:58:3e:38:4b:c3:03:eb:22:
         30:98:90:88:04:ce:46:9a:15:ac:28:b0:64:81:c8:08:0a:f4:
         74:24:ce:06:be:08:1a:d6:01:0e:80:0c:28:ce:f6:e2:69:8a:
         40:56:ac:ef:b5:bc:a7:1b:5f:d6:a7:1b:5d:ed:de:8b:48:d3:
         5e:2f:05:e8:81:97:cb:48:5c:dc:34:86:00:58:c2:84:2c:de:
         c2:db:d7:bc:ff:63:4c:5e:cb:5a:ff:d3:7e:4a:65:21:84:33:
         c9:73:d1:0b:d1:5e:a0:52:d2:dc:2b:50:33:5f:89:9a:31:ee:
         30:e1:18:b2:18:fc:da:b3:7a:5f:d3:ec:5f:ad:e4:f5:89:b1:
         7b:f1:84:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:05:47 2026 by rpki-client