Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04a47e47-b956-3483-b407-419c3afa48df.roa
File:                     04a47e47-b956-3483-b407-419c3afa48df.roa (raw, json)
Hash identifier:          LsLYH3wuGiXvf2iSmeNRbRNdRxt9hAPcyCMFu7iQoN8=
Subject key identifier:   02:19:D2:47:33:D2:6A:7C:CA:49:FB:05:62:48:FD:90:F8:87:FB:59
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E61455F36EBB8BE3572340C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04a47e47-b956-3483-b407-419c3afa48df.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        23.46.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:5f:36:eb:b8:be:35:72:34:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=72c634da-efca-43c8-b998-ed35c29c1702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a7:c7:a4:5d:ef:76:e1:2e:70:69:a1:49:3d:
                    8d:f9:c0:9e:a5:f8:a3:1b:b1:77:13:a7:dd:5d:65:
                    53:f9:c2:07:f8:0e:00:c2:6d:9e:15:e7:93:23:5f:
                    dc:0d:8d:96:79:00:99:20:a8:dd:51:87:ae:87:b1:
                    15:6c:bc:d5:26:34:10:e8:8c:c3:02:db:77:25:d1:
                    c6:b6:9f:9d:b2:13:78:2d:f4:88:a8:03:b2:85:48:
                    0c:c0:f7:f4:b4:8d:80:cc:cc:ea:58:1f:ac:84:ed:
                    47:10:9b:f7:6d:8a:85:fd:18:ba:f6:95:81:fa:30:
                    7b:ea:9b:a8:df:a8:95:85:e0:b3:cc:c1:b6:d2:6b:
                    a1:af:92:b8:85:76:4f:19:c0:9d:cb:3f:00:2c:40:
                    e5:0c:5f:fb:96:79:11:8a:b7:9c:75:ba:92:aa:65:
                    01:2d:2d:fc:ef:5d:c8:99:9e:89:05:ed:47:74:f7:
                    55:f3:66:70:be:f4:e5:f4:3f:bc:42:83:c2:ea:e4:
                    42:8b:bb:7a:c3:45:e0:f4:f7:23:f1:b0:4e:04:f4:
                    43:1b:4a:27:46:97:4e:fc:f2:bf:cd:a9:23:4c:ba:
                    b8:cb:c6:7c:89:ea:df:2c:e2:99:65:c0:db:4a:75:
                    2d:bb:41:1e:65:2d:56:75:be:04:42:53:a1:f9:68:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:D2:47:33:D2:6A:7C:CA:49:FB:05:62:48:FD:90:F8:87:FB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04a47e47-b956-3483-b407-419c3afa48df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8a:a4:b8:a8:3d:01:5d:a9:34:05:53:1a:30:dd:90:b3:04:
         be:ad:f7:55:a6:01:47:b1:67:d6:8f:e0:f7:35:50:6f:f3:28:
         d1:0b:da:35:56:9d:40:be:aa:db:d4:b4:79:f4:0d:3f:d1:b1:
         d1:ba:65:15:af:f9:a2:19:88:81:0a:62:4e:20:26:fa:20:28:
         07:48:83:32:5c:7f:e8:6b:2c:87:a1:df:0b:54:65:f2:02:74:
         1d:3e:ab:87:a4:f4:e5:d8:11:c2:64:d6:58:af:bf:d7:50:a1:
         dd:38:e3:00:5e:1a:a3:81:c3:e7:72:62:f1:ad:1e:84:0d:3b:
         eb:48:b5:f0:d5:b4:a8:7e:80:9c:01:d8:cc:91:f1:0d:b2:44:
         39:8b:8a:f6:f8:58:5c:2d:e3:e5:04:ed:85:8b:24:f6:e3:48:
         20:68:49:66:c7:38:7d:90:19:83:3a:47:f2:51:c3:39:62:19:
         f0:0f:01:82:ed:33:15:0f:7d:b0:82:f9:03:d9:a3:84:e3:f8:
         29:3d:cc:58:70:8d:ef:c9:40:ea:ac:56:ac:57:35:5e:bd:95:
         eb:3b:68:ab:26:22:04:b8:99:45:cd:41:c9:5e:67:29:46:f1:
         f4:ce:5b:04:2a:16:5a:cf:26:b7:28:14:e0:cb:77:0e:52:42:
         7a:e5:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:00:23 2026 by rpki-client