Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/452f2df2-f38a-324b-8d0b-17a65b8c2856.roa
File:                     452f2df2-f38a-324b-8d0b-17a65b8c2856.roa (raw, json)
Hash identifier:          Beeopaah1FbJncWwzvZtf3tTKl8BrPo9TXzZSwKN0Lw=
Subject key identifier:   4D:CC:1F:5E:B8:52:6E:C1:6D:15:4F:3C:E1:64:5A:5C:93:F2:26:58
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7E94FC4E7A7CC2C0854C9580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/452f2df2-f38a-324b-8d0b-17a65b8c2856.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        23.43.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:fc:4e:7a:7c:c2:c0:85:4c:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=2caddc46-26a8-4e3b-afeb-cd3b2d6be9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:7d:ef:60:39:ff:74:a9:48:c2:63:9e:4d:
                    23:e5:8c:42:a3:c8:02:1d:74:6c:3d:13:05:32:97:
                    9e:a4:b9:3a:e7:96:00:cb:f8:cc:5c:42:9a:1d:46:
                    99:e6:47:5d:b9:b9:ca:83:ea:5e:ec:c1:25:e9:2e:
                    a1:e7:31:cc:53:cd:5b:df:39:a4:bb:98:91:76:ad:
                    1d:8e:1b:77:89:c4:50:04:d0:08:94:65:0f:42:6f:
                    f1:3b:bb:79:12:17:b4:c0:90:1e:59:63:68:16:22:
                    f2:03:ba:3b:ff:c4:af:d5:62:63:f7:05:b3:8c:60:
                    8a:97:ff:12:24:d8:05:29:6c:5f:d3:ba:b1:5d:6b:
                    98:15:b5:93:b4:01:80:9a:fb:1b:44:00:17:24:b9:
                    7f:60:1c:21:69:32:94:4d:f6:6e:81:2e:3c:fc:04:
                    33:3c:b7:1f:2e:50:3b:c3:de:ed:55:7c:2c:bc:a0:
                    52:c2:88:c3:ea:17:55:31:df:8e:0a:14:a2:0f:18:
                    2a:ec:8d:78:d6:70:7a:22:76:9e:e8:2e:a1:67:0d:
                    60:db:ee:52:dd:13:20:e7:32:30:8f:ef:d3:62:7c:
                    5e:01:c7:4c:c0:25:cf:16:9e:11:ba:38:5d:0c:75:
                    8e:9c:47:5a:ac:28:3e:4c:97:60:08:e1:4d:c8:c3:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CC:1F:5E:B8:52:6E:C1:6D:15:4F:3C:E1:64:5A:5C:93:F2:26:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/452f2df2-f38a-324b-8d0b-17a65b8c2856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f8:e3:fa:8e:3f:e6:74:41:49:72:e6:89:a8:92:2c:a5:f7:
         65:29:9f:34:82:ac:f7:f3:94:a2:c3:80:a3:50:2e:f1:04:16:
         b9:7e:99:62:28:4f:fd:fd:2f:5a:84:c4:75:aa:3a:4e:41:67:
         27:20:cb:04:bf:c9:1f:e7:16:62:1c:91:db:bf:5e:bf:da:a5:
         59:05:91:78:f8:6d:47:fb:84:84:5c:05:4a:d9:9b:60:46:80:
         8f:0a:46:67:10:b1:99:04:1a:31:58:4c:50:96:73:ba:36:f0:
         ae:77:c1:6e:d6:f6:bd:3e:3d:fc:9f:1c:cc:df:8b:f1:fe:21:
         1d:dc:60:53:50:00:17:73:bd:b5:bb:a1:32:34:b4:cd:73:86:
         65:b4:7b:b5:66:53:3a:ba:3a:f4:11:b2:1f:0e:cd:29:82:8b:
         d0:4c:7e:76:bd:a8:5c:a6:4a:b5:10:ee:e3:b5:de:e8:49:6c:
         4a:93:5c:e6:51:7a:09:83:07:aa:a5:01:82:28:3d:05:2c:ae:
         15:0d:c2:a6:5b:22:de:ab:e8:9a:27:97:be:24:77:30:03:c9:
         74:06:90:44:af:d3:55:80:7b:31:08:fb:31:83:73:a3:53:0b:
         d9:4e:3d:74:e7:45:bd:fc:4e:90:1b:d7:fc:3d:0a:13:ca:db:
         04:27:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:36 2026 by rpki-client