Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20beb614-4346-3184-a84d-70a502d99dbe.roa
File:                     20beb614-4346-3184-a84d-70a502d99dbe.roa (raw, json)
Hash identifier:          R0lC0zpdoxOKTNp0kdtbUD8WHuxEPL/IjVK0xgu9Sds=
Subject key identifier:   0E:AC:EA:F3:B7:4C:A7:2D:28:D9:F7:C1:8E:F9:29:6E:F4:F3:16:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F9638738D5979D9E92AF5E080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20beb614-4346-3184-a84d-70a502d99dbe.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     16625
IP address blocks:        173.222.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:73:8d:59:79:d9:e9:2a:f5:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=f3bdf8c5-f53b-4f75-882a-d5c6cafefeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:b5:ba:8d:83:d9:1a:e8:cf:a9:6f:de:8d:
                    28:b0:09:6b:3f:34:f7:4c:bc:36:b9:6e:89:ff:32:
                    0a:89:fc:04:41:15:ab:50:f8:bb:69:c9:92:dc:92:
                    1a:6a:aa:52:54:23:ea:9f:df:38:9b:fd:6a:4a:4c:
                    f6:f8:b2:ee:a3:b4:55:0b:b2:f9:6f:d0:f6:4f:0e:
                    64:71:7d:14:fa:2c:34:a9:47:0d:19:9b:cd:78:52:
                    00:72:11:3d:2c:db:9f:dd:3b:3a:35:9e:d3:33:df:
                    cb:68:84:d5:21:f2:9c:6e:10:16:3b:78:4f:bb:9b:
                    63:9f:c0:5e:c7:53:15:66:61:64:cf:cc:44:01:91:
                    3f:dc:50:9c:b0:72:99:8d:9b:a7:6c:db:68:50:98:
                    cc:8b:ec:a1:14:5e:be:30:0e:4f:5c:ad:b3:59:62:
                    e9:18:09:8f:e2:6b:6d:7b:75:f2:90:62:96:35:ac:
                    a0:f3:da:44:ab:f3:b0:39:1c:de:16:74:4a:95:b1:
                    25:88:04:2a:10:d6:96:93:f8:55:94:a3:6a:94:0a:
                    54:1f:de:ef:6c:95:68:a4:95:57:4d:8a:f7:88:d7:
                    97:e8:8d:a6:23:95:48:56:32:af:fb:a8:39:b4:c4:
                    ef:00:9d:bb:97:47:ef:e5:68:82:d7:24:34:af:37:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AC:EA:F3:B7:4C:A7:2D:28:D9:F7:C1:8E:F9:29:6E:F4:F3:16:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20beb614-4346-3184-a84d-70a502d99dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:7c:88:56:67:c6:44:9c:62:2e:94:e5:ae:fe:fc:14:a4:
         ce:be:cb:50:69:2b:5f:70:14:12:2e:62:aa:32:43:e3:b9:bc:
         46:7d:aa:0a:15:d7:9d:4b:32:de:0c:40:4d:7f:ce:89:d1:06:
         44:0b:22:12:3b:2e:15:07:e8:25:06:6e:d3:4a:d4:23:a1:91:
         73:d4:3a:06:41:ff:3c:75:6e:0f:84:df:b3:33:9e:03:7e:a5:
         e6:bd:8a:a7:37:de:21:3d:94:de:62:19:e9:eb:0a:03:1b:4c:
         24:fa:cd:b2:4f:42:a3:a2:f7:04:2e:2d:cf:a5:8b:eb:7e:9d:
         fe:f7:02:2d:1d:f5:4e:7d:1d:4e:12:8b:dc:09:be:cf:04:f6:
         49:9d:58:d8:f0:7b:4a:d3:29:39:f4:b6:fe:86:d2:33:08:3c:
         ec:f8:9f:94:3c:e7:9c:23:31:d6:1f:7c:d3:66:77:3f:90:0a:
         09:1f:3c:5a:28:68:ed:18:3d:92:35:6b:7c:39:63:0c:cc:19:
         30:06:2c:82:38:e9:9e:c6:67:39:a5:87:90:89:3f:f0:e1:bd:
         09:16:cb:02:94:88:e7:2a:76:79:73:3d:3f:15:48:5d:37:68:
         ab:da:d0:65:45:58:6f:13:ed:92:7c:ae:1a:03:68:98:47:c1:
         47:74:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 17:23:54 2026 by rpki-client