Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060043ca-4105-3b3b-b7e1-9d2009bd7beb.roa
File:                     060043ca-4105-3b3b-b7e1-9d2009bd7beb.roa (raw, json)
Hash identifier:          feOJUsZPCCdAKU/c+L3zGEV877J/qA+KGnHgYhPCdOg=
Subject key identifier:   C6:8C:E4:2E:0F:85:7A:2D:35:84:19:05:3D:BF:12:E4:6E:3E:21:20
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4AEF3E499F658CAF4D764AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060043ca-4105-3b3b-b7e1-9d2009bd7beb.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     35994
IP address blocks:        23.210.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:3e:49:9f:65:8c:af:4d:76:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=da3727a8-e5c0-4c8b-834f-83b6aa8f2e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:29:e0:18:c3:d0:db:08:7d:3d:3d:61:c8:
                    8e:56:a7:4d:57:f2:8c:6b:4f:ac:03:10:c8:d0:48:
                    f5:c6:b2:1c:e6:66:7e:04:ba:74:bd:d0:fe:df:29:
                    1f:62:07:85:3f:a8:6c:7b:ae:04:2a:03:18:21:4b:
                    51:1d:70:bf:8e:48:c9:78:f7:36:04:c6:0b:ce:43:
                    12:14:0a:72:e2:f7:84:71:de:ab:4c:a7:cf:e3:09:
                    e6:b6:2a:34:f9:a5:94:6b:e8:19:80:b0:cc:89:47:
                    e7:7a:6b:78:14:19:7c:9e:77:74:52:58:79:44:ff:
                    cc:0c:d7:06:64:06:74:1a:97:24:dd:fd:f6:06:a8:
                    b0:50:5d:37:c6:4b:c6:52:ec:9d:04:95:33:c4:4b:
                    3e:55:f3:e5:59:1e:e1:7b:06:87:04:e2:bc:0b:6b:
                    12:df:a5:9b:e3:f4:fc:45:97:0d:00:cd:56:38:2b:
                    10:31:86:cb:e5:b9:f0:43:75:1f:eb:bf:11:8d:91:
                    77:75:6d:0b:be:e1:a9:77:ff:51:97:00:9f:5c:b3:
                    96:5e:74:ef:a0:38:ea:c1:7a:49:31:c9:99:db:ff:
                    7b:be:9b:f2:f2:b4:dd:62:31:d7:a4:f2:1f:3a:2b:
                    04:d3:5a:25:cf:78:c6:97:50:92:35:72:a8:c5:27:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8C:E4:2E:0F:85:7A:2D:35:84:19:05:3D:BF:12:E4:6E:3E:21:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060043ca-4105-3b3b-b7e1-9d2009bd7beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:db:fb:20:e3:a4:c0:3c:fe:03:c5:9e:a1:8e:b6:c1:dc:68:
         2a:a1:84:b5:73:88:9f:46:55:20:18:ec:0d:0c:77:23:fd:dd:
         fa:02:2c:bf:4e:69:af:b1:8c:49:1b:bb:35:ac:a0:fd:a1:56:
         01:ce:c1:57:74:e7:50:61:54:4f:f7:5c:aa:41:f2:03:c3:d5:
         e3:30:d2:38:9f:cc:22:a6:8d:92:2b:4f:43:0b:4c:bc:8c:5f:
         ab:c1:4c:a6:b8:93:9a:4b:b9:89:a2:2e:f3:73:7f:05:96:f6:
         2e:1d:66:8d:82:d4:1a:48:ab:e7:3f:22:42:75:ec:5f:25:a0:
         a7:3c:25:27:50:be:d5:ed:be:d4:1a:06:be:32:c2:c8:9b:3f:
         19:c2:68:d2:dc:7b:ce:ca:0a:27:6e:c5:54:3f:55:a7:b5:a6:
         e8:8a:b0:bf:c8:80:d0:5e:b2:20:ec:d2:54:6d:d2:ed:e9:e6:
         89:d5:09:cd:5f:7b:3e:9a:0b:06:90:d5:4e:9c:bd:1a:2d:f8:
         cb:88:ff:e7:0b:99:44:30:54:be:cd:16:74:eb:68:f6:01:58:
         8e:bc:b5:c1:b6:f5:5a:02:b0:82:ee:df:f2:e2:60:b1:34:3c:
         ea:dd:85:a8:ca:82:88:f8:07:64:0c:fc:bb:a5:3f:0c:f8:e0:
         e2:10:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:35:23 2026 by rpki-client