Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/563a3c83-085a-3d83-99e9-efd7f1997a48.roa
File:                     563a3c83-085a-3d83-99e9-efd7f1997a48.roa (raw, json)
Hash identifier:          yrL1v6J9170kH6kRELHed2bMwPNa38Q8KG30SbMLCxc=
Subject key identifier:   9B:53:F4:25:B7:21:F7:A5:C7:A1:E9:01:36:D4:1C:68:78:5F:A8:3C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA2FE4CED9561459589880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/563a3c83-085a-3d83-99e9-efd7f1997a48.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        23.2.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:2f:e4:ce:d9:56:14:59:58:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=9795772a-a1de-481f-a302-c19a3887b4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:2a:96:2c:a2:7d:0e:6e:85:01:89:8d:85:
                    ed:5f:37:6a:67:2e:57:d2:b6:b6:17:bf:cb:42:b4:
                    30:02:0a:b1:ac:3a:19:5b:da:de:fa:76:8a:79:81:
                    dc:3c:60:e9:01:49:50:e9:f4:4f:2d:53:5c:cd:ec:
                    fd:de:b1:f9:bb:d5:88:db:d1:1e:69:73:62:d2:cf:
                    24:0f:de:98:ec:ad:f8:bb:07:bf:df:00:05:c3:65:
                    62:4f:70:f5:77:44:93:c8:eb:f9:90:28:37:95:55:
                    91:d3:5f:81:61:3d:c4:ae:3d:f0:03:e1:84:6d:bf:
                    2e:dd:af:b0:63:c8:78:3d:c9:0a:2c:08:56:31:9d:
                    a0:e7:d0:40:33:52:ff:a6:d5:6b:b2:bc:8c:0c:a5:
                    5e:8e:55:b2:a8:73:fb:87:1c:c7:53:c6:d7:ef:37:
                    17:38:dd:b9:d8:e3:ff:4c:71:ba:36:14:a6:f4:09:
                    85:e1:fc:72:77:73:7b:e0:7d:e4:d6:76:b8:70:26:
                    82:ec:12:fa:12:19:9c:32:b0:2e:e4:e2:7b:b0:da:
                    71:f7:b4:2c:c5:4c:ad:2d:4f:57:9b:a4:3e:3f:dd:
                    c9:01:f8:ba:fc:63:b9:8c:97:e6:e8:77:af:5a:7d:
                    1f:92:6b:32:6e:03:f3:a5:c6:28:c8:b7:88:48:bf:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:F4:25:B7:21:F7:A5:C7:A1:E9:01:36:D4:1C:68:78:5F:A8:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/563a3c83-085a-3d83-99e9-efd7f1997a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.2.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8b:18:b5:c7:53:db:9e:e9:cd:fd:06:13:c1:ba:d2:d9:d2:
         e2:d5:53:3f:97:15:2c:50:5e:83:bf:61:2a:83:04:a0:f6:8f:
         bb:5c:4f:21:03:a6:a1:5b:1d:21:fd:c8:b3:e0:16:84:13:b9:
         f7:88:e0:55:61:f4:5d:ac:39:fe:89:e9:a6:05:f9:76:5b:bf:
         46:50:8f:f8:ec:74:1b:82:a5:a3:39:19:1c:99:fd:46:6c:86:
         c7:c2:a4:aa:3d:55:75:4c:5a:20:30:de:9d:85:00:1f:66:9d:
         f4:28:39:62:f8:4f:f0:d1:cc:6e:33:56:e4:e2:09:88:15:65:
         8b:26:a5:63:99:f8:6c:b1:8d:d9:09:f8:6d:56:fe:f2:72:81:
         43:ad:9a:6d:95:8c:99:9e:38:14:0b:e8:3f:6c:f6:7c:a1:ca:
         89:3e:f5:24:17:42:46:96:36:ec:0f:2a:75:6c:5d:75:16:97:
         4f:f7:2e:fc:c8:db:50:1b:1c:7a:85:20:8b:25:4e:16:1e:6d:
         74:85:59:1c:cd:44:65:26:5f:79:b8:1e:ee:55:99:b4:7b:77:
         f6:10:07:ea:ec:a7:75:82:a1:2d:26:bd:d1:bc:5b:dd:e1:32:
         9a:92:49:68:64:2f:f0:d3:e5:08:1d:d9:15:63:dc:98:f1:b4:
         a3:ea:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:42:28 2026 by rpki-client