Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e282d90-335d-320b-ab2b-9379e56499ab.roa
File:                     4e282d90-335d-320b-ab2b-9379e56499ab.roa (raw, json)
Hash identifier:          DWSz158Cmu+pkmmK6KG60LhdVssYssg4ADXmCFVf5cM=
Subject key identifier:   C8:3B:48:00:8B:FC:15:E2:76:72:14:BD:B5:AB:7E:4F:A6:11:AE:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA79AAE332CA67BB4B995B560
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e282d90-335d-320b-ab2b-9379e56499ab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.216.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:ae:33:2c:a6:7b:b4:b9:95:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=545102f6-88bd-4a1e-b4a1-76a6a6eee546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:71:d1:83:77:b4:b5:47:91:bf:68:4b:cf:
                    dd:05:d8:3f:25:36:a9:2e:e1:5f:f4:6c:16:7c:bd:
                    e5:2a:b9:8f:01:36:cd:ac:20:0c:b3:ba:b2:b2:d6:
                    fd:97:85:ca:a9:88:e1:28:9e:b9:00:9d:57:0d:bb:
                    16:f4:49:09:dc:d1:d7:25:f6:7d:aa:cf:1a:58:4a:
                    8a:6b:d7:f9:95:9c:56:d8:e2:e4:c8:74:c3:9b:06:
                    71:b4:57:d0:91:d9:02:68:4e:0b:f0:97:07:7d:3b:
                    8b:cb:73:60:f0:24:a0:8e:03:5e:f5:47:8e:1a:c8:
                    1a:60:13:db:06:4a:60:5c:09:e8:e6:c5:72:dc:f7:
                    a9:63:3d:2f:f0:29:93:94:69:c7:0d:d6:e6:81:7d:
                    e7:2a:d8:0d:86:af:87:d6:ad:69:c1:44:5b:61:22:
                    57:45:b6:70:a5:66:1a:05:de:cd:10:76:e8:4c:f9:
                    3d:4d:9c:53:ce:9b:07:35:91:71:32:ea:23:28:d3:
                    01:68:a6:99:8d:14:71:b8:63:b6:b2:3b:8a:c0:e0:
                    bd:16:16:2f:c3:79:ce:0c:45:2b:af:c0:80:0e:be:
                    b1:cc:2f:a1:1f:68:58:dd:96:eb:d2:ba:aa:c5:a0:
                    82:37:c5:5d:a6:0d:06:c0:67:89:4a:6e:24:d7:eb:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3B:48:00:8B:FC:15:E2:76:72:14:BD:B5:AB:7E:4F:A6:11:AE:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e282d90-335d-320b-ab2b-9379e56499ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:76:f3:88:ea:d3:fd:a7:c8:1f:df:f1:4e:d7:af:ee:1e:
         f2:cd:2e:4c:91:7c:bd:d0:af:8f:65:1e:76:53:aa:aa:5c:19:
         54:31:25:ac:92:0a:72:c6:eb:ca:76:06:1d:d7:b0:7e:80:1d:
         2c:3e:81:8b:38:1f:d2:24:8e:82:a9:95:e6:33:92:c5:85:a3:
         48:b0:6e:7f:89:2a:ea:8f:95:58:0b:aa:0c:96:31:a3:a4:5a:
         2b:59:a3:16:90:e2:65:bb:9b:44:46:0e:c5:60:48:5c:c4:21:
         6d:1c:3a:b3:bf:00:84:df:7a:32:59:a2:8f:70:30:f3:14:78:
         3e:40:97:30:f9:64:75:0a:d2:ed:83:d7:09:5d:db:44:60:23:
         d3:ac:ff:ad:79:31:db:e6:63:75:c0:c6:ed:82:ad:bc:22:4c:
         0f:3b:07:a1:70:2a:92:a9:0a:f7:d1:81:30:a6:bd:d6:27:da:
         4d:84:a2:27:32:11:28:05:85:14:0f:53:e2:6f:69:79:0d:a1:
         86:10:5d:37:d3:29:f0:06:04:5c:72:77:e8:8e:20:d4:40:9e:
         87:55:89:c2:d2:e8:58:e7:10:f8:e9:0d:83:c7:e9:91:3e:c3:
         bc:7b:8b:cc:4a:e2:f6:81:93:6a:78:b2:84:e3:1d:61:c2:39:
         98:96:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:45:00 2026 by rpki-client