Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0050d8fa-5b67-3f08-9be0-31858125185c.roa
File:                     0050d8fa-5b67-3f08-9be0-31858125185c.roa (raw, json)
Hash identifier:          23IeqO3N4KAtD+TkJeOU6HRhDnqBEsDEDlWHY7B/rlc=
Subject key identifier:   0A:FA:72:B9:9D:BB:A5:F5:87:D3:29:D5:46:D8:D9:31:AE:4D:95:08
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE9B0B26FD8102E6A823A5A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0050d8fa-5b67-3f08-9be0-31858125185c.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.202.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:b2:6f:d8:10:2e:6a:82:3a:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=b6dd790b-03d9-42ba-ab1a-ba8ec5fa26e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:47:ca:a9:c9:03:4a:cc:03:ea:77:fc:39:
                    b7:95:c2:b0:98:b0:47:91:09:ef:ef:01:8e:98:d0:
                    fc:7a:94:6c:e3:33:db:bd:86:98:ff:d5:6d:f6:3c:
                    34:7c:b5:94:dd:14:12:70:7f:38:7b:82:c1:f9:07:
                    f8:c3:64:dc:8f:20:64:27:9e:61:60:63:4c:60:5c:
                    e8:b0:2d:15:fc:5e:25:81:bb:b8:8e:97:e0:c7:e5:
                    3e:7b:f7:1d:fc:e9:a7:31:1d:06:b1:ce:26:f1:b5:
                    91:13:9c:a6:05:8e:bb:de:43:b7:49:35:d7:42:51:
                    c5:7a:ae:01:63:d3:83:16:6f:76:25:dd:cc:83:c7:
                    2f:b8:2b:3e:6c:2f:2b:67:de:c6:ad:43:de:6c:eb:
                    ee:bb:d9:3d:a7:16:2b:3a:9d:a8:e6:77:d9:0c:db:
                    12:a7:95:6b:76:84:8d:07:43:ba:3c:df:15:b8:2b:
                    a5:ed:ac:dd:17:e3:48:09:15:c5:5a:5d:ed:3b:cf:
                    4c:cb:ed:4d:73:2f:e3:37:02:4c:1f:72:95:d5:74:
                    11:17:a8:09:61:b9:81:6d:14:36:40:93:d3:b1:07:
                    11:01:62:61:6c:a9:ac:3a:ca:c2:1b:ce:f4:f8:26:
                    19:c5:fb:95:a0:2a:fd:8e:d5:8d:2b:65:14:78:d7:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FA:72:B9:9D:BB:A5:F5:87:D3:29:D5:46:D8:D9:31:AE:4D:95:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0050d8fa-5b67-3f08-9be0-31858125185c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3e:b8:e9:d8:e9:64:4f:c6:f8:52:22:79:c2:02:74:fa:fe:
         30:df:7b:76:e0:37:f0:01:88:de:38:98:a2:b0:50:77:64:d2:
         00:43:ea:5e:c5:d0:5e:1a:40:3b:d8:b8:5a:8a:0d:bf:7b:ce:
         e0:7c:4c:bc:ad:32:02:be:74:27:a8:a7:7f:60:10:05:83:19:
         2d:7d:59:d3:4d:24:24:8f:39:03:bd:c2:d3:d7:47:04:1c:37:
         f9:dd:d7:41:7d:58:bd:c6:7a:ef:4f:f4:6c:ad:17:1f:3b:29:
         ec:db:f6:4b:2d:6b:bf:e2:20:53:9a:49:f8:e8:33:b6:15:e0:
         43:27:29:a1:7d:6d:c7:b7:e1:9c:91:18:fb:aa:3c:a0:9f:7a:
         28:ba:bd:f1:6e:48:af:29:4d:e0:b2:f4:1c:97:0e:4e:9d:68:
         d1:09:2b:36:85:1f:d1:f1:57:85:c8:7a:1b:f7:ec:73:f0:40:
         c1:af:08:f1:46:d4:df:7d:19:8e:68:d2:1b:82:f6:36:bf:60:
         7d:da:56:59:f0:40:37:9a:01:4b:a2:08:92:90:d6:a2:3c:1f:
         7f:57:3b:dc:68:6a:d9:a0:97:4d:21:9e:ef:bc:f8:c6:21:05:
         ba:5e:1e:99:fb:50:55:f0:bb:aa:77:d7:5f:41:ba:34:df:46:
         83:4f:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:13:37 2026 by rpki-client