Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb9859b-05df-3a2b-ac4f-10cf6ff52624.roa
File:                     5eb9859b-05df-3a2b-ac4f-10cf6ff52624.roa (raw, json)
Hash identifier:          JbNJB32lfBEUUwJclVWMjuVdYEf5nHfdEj94itsavBw=
Subject key identifier:   B7:A5:B0:50:3F:BE:54:41:92:4E:7C:F5:11:42:D3:5B:06:F0:66:CB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EF44CB5C850BA7AE4BC3CE8A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb9859b-05df-3a2b-ac4f-10cf6ff52624.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     4788
IP address blocks:        173.223.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:b5:c8:50:ba:7a:e4:bc:3c:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=74ed28bd-c857-4c8a-9229-cdfc8ce3e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:f6:14:d3:1f:f5:44:a0:8d:8b:9a:9b:28:
                    eb:fa:e9:f1:4d:12:a6:d6:fb:de:10:09:2c:12:d5:
                    5c:14:39:fc:b6:4f:2f:e2:ef:8b:5e:1d:bf:92:c0:
                    5c:ec:39:bd:74:15:e2:7a:61:9c:22:76:7b:24:92:
                    9a:de:b4:a8:59:a9:45:ad:49:f9:41:db:9e:b0:69:
                    4f:c3:f7:03:40:e1:ee:29:4c:ac:8e:b9:8f:ab:c1:
                    07:e9:30:6d:47:81:5a:a8:9a:f6:93:44:46:84:f2:
                    d9:45:63:4f:d9:93:fe:e6:83:42:42:4c:f0:5c:5d:
                    3e:3c:90:c0:45:ec:4c:09:5e:49:53:be:e2:2b:57:
                    12:70:57:18:42:c8:7d:ac:9d:c2:e5:aa:a3:1c:a8:
                    3c:25:55:6d:60:75:79:aa:09:9e:08:ec:cb:38:24:
                    5a:f1:4d:26:bf:df:63:ff:7e:22:ae:3f:c9:a3:46:
                    db:c3:f9:87:29:d4:47:d8:2f:10:09:68:ec:f3:2d:
                    ed:56:f8:c6:05:ca:ae:88:68:39:01:10:c0:7c:37:
                    16:2c:aa:df:41:8a:4e:3f:31:c4:3a:45:e8:cb:51:
                    b2:64:94:47:af:08:49:b6:e6:6f:6f:44:8d:6f:16:
                    bf:1f:a9:b3:0f:0c:0c:a6:a2:f6:51:4c:e3:f5:02:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A5:B0:50:3F:BE:54:41:92:4E:7C:F5:11:42:D3:5B:06:F0:66:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb9859b-05df-3a2b-ac4f-10cf6ff52624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:2c:2f:16:53:a1:d2:ba:1e:26:dd:04:30:2c:3f:84:d8:
         ad:e9:dd:c1:c8:5d:0d:7d:d0:6e:5f:43:99:b7:db:99:5f:67:
         06:7e:8f:d7:b7:58:df:e1:37:8d:dc:9c:1e:c4:f3:3c:d6:34:
         e2:23:c9:85:b5:6b:49:78:88:d2:ef:5b:01:05:ca:17:f3:08:
         3e:6c:49:46:c4:40:4e:38:61:4d:cd:85:2d:3e:9f:67:17:8d:
         07:54:3b:d3:91:5c:87:12:a4:49:d1:d9:c5:f9:fe:0a:5f:d6:
         60:2f:ce:de:d0:95:c6:b5:9a:27:5a:38:bb:f8:0e:9d:88:b4:
         f0:d3:43:70:f9:8a:ef:d7:50:9d:88:a3:56:53:7a:57:25:d8:
         21:37:66:12:e7:63:e9:79:15:6b:bd:ce:50:c7:6f:49:6c:96:
         5d:48:b3:60:bb:95:28:05:32:ba:6b:5a:a9:de:be:c4:96:2c:
         f0:59:86:7f:a7:85:9f:d3:b6:c6:a3:2e:0d:97:b9:a7:07:e2:
         79:9d:79:25:3a:62:39:55:24:9a:25:83:9b:a6:5c:a8:74:80:
         0a:22:90:7a:27:1c:6e:66:50:44:21:de:16:5d:cd:10:6e:42:
         a7:be:aa:69:69:bd:0b:83:c8:dd:8d:63:2a:a9:d6:ea:64:19:
         be:16:0d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:29 2026 by rpki-client