Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18a1c6e3-da5f-3c1e-b394-832cf2743f9f.roa
File:                     18a1c6e3-da5f-3c1e-b394-832cf2743f9f.roa (raw, json)
Hash identifier:          fSkKmlM5tKnMQ6e1zg5FxfgcJ6JErXMvB7Wg4fLsDvc=
Subject key identifier:   B9:5E:7D:CA:BD:B8:21:0F:52:95:F1:6E:02:02:53:38:E8:0F:D8:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EC0A755CDAAF6AF97B8A02580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18a1c6e3-da5f-3c1e-b394-832cf2743f9f.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.15.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:55:cd:aa:f6:af:97:b8:a0:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=2015fad2-3b91-40d1-b90c-8985e9250314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:96:c1:19:2a:a4:12:e9:36:b9:07:65:71:
                    0f:e6:78:1a:8d:c4:20:a9:9b:f8:c5:ea:4e:69:ab:
                    2e:96:61:27:b4:8d:47:e3:c8:88:2c:da:7e:a8:5f:
                    66:d7:fa:73:ff:84:9f:a8:68:66:13:a4:3c:e5:41:
                    fd:6c:3f:82:e1:84:a6:54:f6:be:41:f7:77:c0:69:
                    9d:2c:bb:1f:04:ee:3d:34:09:1e:ca:5c:bd:8d:69:
                    f7:04:5b:5a:44:07:ba:b6:4c:ed:1a:8b:94:c4:eb:
                    22:b6:be:54:9e:21:c5:ea:33:da:c3:90:34:10:6f:
                    0f:0b:67:71:f3:8c:ae:a0:e6:d7:ad:7a:5b:af:33:
                    04:4a:6f:2a:2b:c7:94:f3:6e:0f:72:80:e9:ab:18:
                    24:99:6e:86:d1:95:8b:3c:8b:df:6e:d3:b0:a2:43:
                    81:2f:e6:5b:37:e4:2e:e7:b4:94:f5:40:dc:7d:9f:
                    d3:c2:00:eb:77:b6:ce:76:0a:2b:b2:17:29:0b:93:
                    d2:39:3c:47:d6:4a:80:51:6c:14:84:25:80:f0:8a:
                    54:10:68:3f:fa:fd:c3:a8:56:0f:fc:e9:7f:0d:f2:
                    3d:87:fe:ae:41:a1:91:fa:2f:9e:ad:ec:e7:ef:61:
                    bd:9b:30:af:60:cd:99:b0:81:08:25:c5:91:d5:b3:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5E:7D:CA:BD:B8:21:0F:52:95:F1:6E:02:02:53:38:E8:0F:D8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18a1c6e3-da5f-3c1e-b394-832cf2743f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a0:5e:90:96:7b:9c:20:52:02:5e:f5:64:91:e3:ee:a6:a6:
         e3:fb:f8:e0:dd:ef:5c:2e:56:48:db:ee:8f:40:af:b3:1b:9a:
         70:75:29:57:bf:f1:bf:9a:e2:8b:5e:57:90:b2:24:38:6c:bf:
         69:39:a1:7d:3a:ff:04:5c:b0:d3:cc:9e:d7:d2:f2:a3:56:f3:
         33:08:b5:88:1d:96:9c:cf:28:39:13:4b:3c:b6:64:6c:61:b0:
         f8:6f:e5:d5:31:b1:06:d6:28:a2:a9:11:cf:04:75:90:be:11:
         04:8e:79:64:f2:1a:cc:30:36:94:02:28:d8:cc:80:7f:94:bb:
         b4:bb:3b:0f:d7:7f:59:13:6f:c6:9a:08:97:d5:9d:74:f3:eb:
         29:bc:1a:94:dd:ae:e7:61:46:9e:a8:37:e8:3e:b4:bf:d6:fe:
         81:51:a9:89:28:c7:1e:49:37:54:85:ba:56:41:2b:c1:6e:07:
         95:71:7d:16:61:73:07:03:ef:b5:84:30:76:2e:25:6b:c8:33:
         91:bc:f3:65:09:d6:dc:3b:4b:84:e2:25:4a:ec:39:51:35:d2:
         17:b9:f0:ed:89:83:0d:7f:34:cd:d9:18:21:62:27:a7:b3:e3:
         1a:5c:da:68:03:69:88:4d:c3:49:c6:a6:7d:65:a5:24:0d:77:
         f5:c3:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:55:06 2026 by rpki-client