Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70a8059d-ccff-39d4-8f2a-53ab3b4badb3.roa
File:                     70a8059d-ccff-39d4-8f2a-53ab3b4badb3.roa (raw, json)
Hash identifier:          zBUrcp0D8n5vTr9S7emCQ3tkr+Fkl+12SHcxaS6w3rw=
Subject key identifier:   6E:97:37:94:59:5C:51:55:B3:69:17:CC:84:80:28:5A:2B:63:8F:00
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F093D018463E77CDD06C10B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70a8059d-ccff-39d4-8f2a-53ab3b4badb3.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.0.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:01:84:63:e7:7c:dd:06:c1:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=27dfec50-5227-44b3-81f3-62935708e521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:3f:c8:ba:ca:0d:36:3f:8a:53:d4:2d:c5:
                    15:98:e0:ae:01:78:28:bf:e0:df:e6:5e:62:48:46:
                    07:3e:23:2f:86:21:af:74:a3:3a:01:60:96:57:c8:
                    7d:1e:bf:15:4d:a7:18:0f:9f:e3:e1:29:43:e9:21:
                    0d:3f:bc:f4:e4:59:2b:81:16:85:a3:50:d2:dc:9b:
                    7f:14:da:95:3b:f5:23:d3:48:5b:66:df:c5:d4:3d:
                    5d:7c:3b:17:0a:c8:71:f6:05:33:c5:5b:1f:1d:70:
                    0f:f0:4d:7e:73:a1:f0:4b:be:e6:a9:17:2a:04:ea:
                    ec:c0:01:0a:6f:bb:88:5c:31:1b:21:ec:30:47:5e:
                    e4:c1:ad:d7:17:c5:13:f5:1c:a8:9d:ed:ea:14:8c:
                    6a:69:1a:9a:e6:b1:2d:f5:4e:ef:f1:51:4f:b5:fb:
                    00:49:66:7f:9b:6b:d4:38:7a:ea:77:c1:a8:8f:76:
                    60:70:47:fc:a2:1a:7a:b2:ec:a7:35:72:bd:fe:f3:
                    3b:a4:d8:df:ad:d0:24:66:3a:34:bd:41:e9:4f:90:
                    48:53:d7:c0:2c:30:60:65:5d:60:8f:20:b8:e2:e4:
                    f2:1a:56:99:a8:37:12:71:dc:07:2b:46:48:74:e3:
                    2a:a1:c4:1e:9c:06:07:27:ca:18:3c:5e:72:1a:1e:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:37:94:59:5C:51:55:B3:69:17:CC:84:80:28:5A:2B:63:8F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70a8059d-ccff-39d4-8f2a-53ab3b4badb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.0.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:8f:4b:8c:ec:06:a5:d5:aa:a6:05:f2:3c:04:c3:50:4a:
         2b:40:52:34:d3:21:a4:e7:64:5a:56:39:30:ae:a2:10:7c:24:
         5b:bb:02:c5:e7:bd:12:84:34:59:1d:7e:9e:5e:3a:91:3c:9c:
         33:b0:49:8a:f3:9e:95:6a:78:83:3f:60:08:27:6b:d5:61:5a:
         ba:32:60:d2:8b:c8:71:ad:41:f4:3d:ae:7c:2c:03:e4:30:96:
         a0:1a:9f:25:19:88:b0:ad:ba:b1:dc:b9:27:93:66:be:1a:ba:
         00:18:e7:88:f7:67:f0:86:93:10:a0:1c:e5:e9:9a:46:73:d0:
         08:18:a5:d5:cd:fc:ee:b6:1a:d3:20:f5:bd:31:5b:63:9c:af:
         5a:78:93:52:fb:cd:f6:66:a0:66:ef:88:2b:b0:c7:b6:f7:4f:
         14:47:dd:70:b2:a4:ea:cf:48:2c:6b:f0:55:09:5e:e3:8b:c1:
         33:82:6c:ff:67:fb:1f:65:04:b3:42:17:e2:80:bb:14:0c:d7:
         a8:35:88:5b:06:2a:59:91:96:9e:bf:58:79:8a:eb:57:94:42:
         75:42:aa:1e:b2:fe:a0:f2:51:f6:8c:1c:d1:7d:12:9f:55:b0:
         d7:ef:4d:cb:9f:42:8d:82:42:bf:80:1a:19:aa:dc:f5:98:2e:
         e9:5d:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:27:46 2026 by rpki-client