Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60c1782f-b4dd-3f10-9967-45ae6cff76c0.roa
File:                     60c1782f-b4dd-3f10-9967-45ae6cff76c0.roa (raw, json)
Hash identifier:          EOVUiDh62ZEiW5TwEa/Kn8Pvj257SI/V4kRw7duTULk=
Subject key identifier:   7C:C9:7E:1B:6C:63:92:C3:28:DF:CD:17:F0:16:E5:AA:E2:C2:34:C7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA793177D5CC0AC1C45BD6280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60c1782f-b4dd-3f10-9967-45ae6cff76c0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.202.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:17:7d:5c:c0:ac:1c:45:bd:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ad962f15-9158-4422-bb0a-1cea7a52294d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:d2:a3:3b:75:7f:ec:60:87:76:d6:c4:7f:
                    f4:3a:66:af:21:69:c4:0b:c3:89:01:22:f4:4f:aa:
                    e5:4c:85:cb:64:ab:83:d8:2f:5c:23:75:1d:e0:bd:
                    3c:06:78:03:b6:6a:55:44:6d:fa:f2:ae:e8:c6:87:
                    e9:b5:b1:3d:9c:16:ae:f8:1e:74:13:25:ad:84:a9:
                    89:7b:6b:3e:f1:16:c8:51:09:25:51:70:1e:1c:0b:
                    2d:64:34:70:e0:93:bd:d6:23:1f:96:ea:21:b9:83:
                    02:5f:7f:f0:a7:15:7a:cc:a6:b4:9f:50:d3:08:18:
                    96:71:ef:37:d2:04:67:ad:c1:c0:14:91:53:6d:ba:
                    91:bb:1f:ee:4d:1b:d1:98:23:45:df:fc:10:cd:8f:
                    f4:3a:c5:1b:aa:0d:c5:6b:93:d7:2e:ad:bd:29:b7:
                    2c:81:e5:41:ad:57:bf:f4:d3:9c:db:39:c1:99:4d:
                    d4:19:8c:4a:88:94:f1:2b:c0:e9:2a:91:12:e2:a6:
                    5c:88:96:61:bf:4e:bb:7c:90:51:f9:4c:da:2c:a4:
                    45:80:9d:65:47:38:83:f2:c9:59:ad:6f:c9:67:93:
                    d8:fa:1c:45:14:86:30:7d:0c:91:e7:a4:33:b8:28:
                    79:dd:0e:2d:98:2b:0f:f8:0e:af:4f:fe:06:d0:00:
                    13:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C9:7E:1B:6C:63:92:C3:28:DF:CD:17:F0:16:E5:AA:E2:C2:34:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60c1782f-b4dd-3f10-9967-45ae6cff76c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:02:6d:bd:0b:00:db:43:c2:19:30:ab:89:a2:5b:67:46:de:
         bc:eb:76:37:a1:18:12:d5:c2:1f:41:32:e8:cb:97:19:5d:b1:
         fc:50:f7:1b:16:6e:43:2c:43:38:53:35:83:53:0e:db:32:f0:
         c0:c3:88:08:11:c8:d1:0a:4b:29:52:db:16:de:13:cc:f7:fb:
         87:48:ce:41:9a:f9:3c:46:5f:15:09:ba:4a:d9:22:3c:ab:f1:
         65:66:5e:a8:7b:e1:b5:b2:61:f2:ed:a4:9a:f7:78:2f:48:02:
         88:52:a8:31:10:53:f8:22:20:7b:12:ff:90:2f:5e:02:83:37:
         64:2f:eb:c2:83:94:88:94:04:8b:5c:b8:e0:fb:8e:63:e9:c2:
         72:8d:3c:54:69:a1:6c:2c:f0:0e:d5:bf:9b:3b:dd:b7:13:6e:
         a9:d7:6b:0f:43:04:60:ff:22:be:8a:56:ce:2a:39:28:f3:d4:
         e3:da:c1:85:c9:6f:6e:7d:70:94:55:3a:c7:7e:ba:70:76:19:
         cc:ef:37:1f:00:3d:df:b8:3c:63:8d:b9:21:ff:2f:be:89:48:
         15:f1:28:9e:5b:b6:a3:2f:ab:29:50:f9:51:7f:28:d8:71:c5:
         4e:70:55:60:26:5e:1f:c2:7e:09:56:a3:8f:76:c2:ba:38:d9:
         19:23:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:28:06 2026 by rpki-client