Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf7f65d-8515-3ab7-bbe7-137a9e35738e.roa
File:                     6bf7f65d-8515-3ab7-bbe7-137a9e35738e.roa (raw, json)
Hash identifier:          ZShecpdAfF4hQJV8TEiN+mBWf7rp63gPZ1Pu7ui1SKo=
Subject key identifier:   F9:EF:16:F6:A0:58:FE:CD:1C:3C:C9:FB:3B:AD:49:95:C9:2E:D8:24
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7881163420CCDCD662F4C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf7f65d-8515-3ab7-bbe7-137a9e35738e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     131445
IP address blocks:        23.202.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:11:63:42:0c:cd:cd:66:2f:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fce3f80c-c5a0-45b2-89af-8ce38e2df73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:e9:e1:08:ed:0a:fb:33:bf:c3:6f:8b:a7:
                    48:86:5d:05:bf:c0:c4:0a:09:6a:2a:c5:ff:6c:c4:
                    02:d4:8b:98:b5:45:9b:84:05:bf:15:e4:9b:83:7d:
                    fa:a7:52:3d:e2:09:a2:65:0f:4b:af:64:07:b3:5f:
                    aa:43:d0:bd:6e:77:56:23:28:a9:56:03:20:97:ac:
                    b2:13:e7:f8:25:24:2d:f8:3a:f2:54:bc:8b:d0:a6:
                    fa:c4:28:4e:53:df:07:c6:6c:b7:ba:cd:8e:ff:e5:
                    bf:4b:b4:ce:65:76:b3:35:b1:c6:3c:4a:f0:70:6d:
                    a6:ec:71:f0:73:93:f0:95:ef:79:d1:c6:df:3a:09:
                    7d:6a:50:0c:48:33:2f:a8:39:ae:c8:bf:55:1d:86:
                    e9:c3:c1:8f:5e:4b:32:7f:06:0d:1c:22:85:93:ae:
                    72:f6:55:b2:00:1d:67:35:34:9d:ff:33:4d:fe:0d:
                    b6:92:32:64:05:a3:60:08:04:b4:9a:51:54:f4:ed:
                    7a:aa:e4:18:8e:52:38:fb:3b:03:f3:0e:4a:10:93:
                    7d:d4:66:10:37:43:8d:6c:47:08:1c:55:ac:95:e6:
                    47:1f:43:60:fb:b2:71:fe:3f:b2:3e:db:e0:f2:35:
                    80:bd:02:6b:a0:35:fa:35:d9:6d:9b:fa:4e:5b:1c:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EF:16:F6:A0:58:FE:CD:1C:3C:C9:FB:3B:AD:49:95:C9:2E:D8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf7f65d-8515-3ab7-bbe7-137a9e35738e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:f3:9d:68:5a:ba:7b:db:ed:4a:4c:1b:c2:4d:e4:71:4d:
         a2:36:11:f6:b8:ec:eb:f5:a0:22:75:c9:76:e5:b5:46:dd:e0:
         7d:84:6c:9c:57:86:fa:9b:95:4c:c6:ad:49:a3:64:18:0a:bd:
         63:a5:9a:d8:a2:5f:e5:64:cd:94:a3:65:71:6a:08:ff:87:d4:
         98:5a:d3:04:d1:09:ee:97:66:b4:d8:19:a4:ea:49:71:06:66:
         dd:73:99:7b:83:70:b5:72:85:b1:07:32:8f:22:d2:e1:51:73:
         a1:dd:e0:81:b0:96:50:12:72:9f:5c:9b:06:19:78:80:1a:44:
         ef:cf:db:a9:b9:34:bb:b6:ae:32:79:f4:93:53:2c:5a:9c:c8:
         38:3a:01:39:c9:4b:5e:8c:0e:f8:e9:8d:0f:ee:f8:37:53:6d:
         15:f4:4a:8e:06:a0:8d:8c:56:c7:0d:07:ea:32:73:e3:07:78:
         c9:ba:d1:43:90:a6:59:17:db:39:76:1e:68:32:88:d4:d7:70:
         8a:a4:22:be:ee:23:70:01:a5:99:58:e1:ba:88:92:cf:b1:0d:
         6c:2d:fb:0d:7f:02:f8:93:c2:d8:98:87:65:dd:ee:0d:ae:a4:
         48:bb:bd:4a:c3:fd:d1:cc:fc:32:9b:0c:0e:a3:2a:b9:47:58:
         ee:ed:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:26:58 2026 by rpki-client