Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72a4512d-e139-3913-8331-290047d0b71b.roa
File:                     72a4512d-e139-3913-8331-290047d0b71b.roa (raw, json)
Hash identifier:          pJ383rvfcYxWMHVKd2mOmMOpQSft7ELIxNIs2+thPvM=
Subject key identifier:   45:6A:AC:19:F1:D4:65:40:5B:22:3E:B6:0B:1F:D6:F1:80:18:83:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E561A083C8FF223D092D48868
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72a4512d-e139-3913-8331-290047d0b71b.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     16625
IP address blocks:        23.66.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:08:3c:8f:f2:23:d0:92:d4:88:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=88c500aa-c484-4479-86f1-1eeeb11ae06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:89:50:d3:cc:f5:bf:4d:ed:6c:03:8b:76:
                    26:3a:e5:60:e9:e5:1d:88:7e:c0:6f:27:c6:f5:62:
                    71:ea:30:d4:fe:b0:32:13:db:52:8a:b8:d5:2f:e0:
                    60:48:e1:cc:b9:8b:56:7a:39:0e:8a:fc:6c:9e:1d:
                    09:b9:f7:68:28:78:4b:25:8f:52:55:d7:a3:6f:ac:
                    5d:1e:82:e1:54:7e:c4:49:90:6d:4f:35:38:3d:8c:
                    da:14:67:43:fd:04:3a:ac:c5:86:2d:4b:7b:fb:52:
                    a1:cb:57:11:80:ab:72:a8:23:30:76:2e:6d:2a:5d:
                    dd:6d:f6:f0:a8:94:ee:91:5e:90:96:cb:c1:d2:ab:
                    4f:6f:10:83:98:6e:ae:67:4f:db:eb:19:ba:d5:3e:
                    39:0c:27:09:62:63:25:7a:6d:93:b7:9b:1b:ef:4b:
                    2f:96:60:52:9f:08:2a:48:6a:a5:b6:b6:2e:31:c2:
                    ce:b4:95:8d:69:0e:16:ff:40:0f:f1:33:de:bd:8f:
                    d0:39:34:bb:b3:77:e9:b0:8d:57:4e:a7:70:66:d4:
                    bc:fb:11:59:ad:6c:42:c5:40:f3:e6:e2:a4:c7:c1:
                    61:c6:dc:27:06:d0:bb:4c:0d:a7:55:2a:d7:e1:be:
                    62:1e:7d:08:3a:40:ba:29:fc:d9:a4:09:80:7c:f6:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6A:AC:19:F1:D4:65:40:5B:22:3E:B6:0B:1F:D6:F1:80:18:83:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72a4512d-e139-3913-8331-290047d0b71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.66.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:90:40:8e:ad:81:98:b2:4d:82:10:01:bf:98:7a:c3:81:2a:
         60:0a:dd:65:9c:8b:4a:80:ff:35:57:9e:84:eb:40:d8:e7:cf:
         32:e0:48:a1:28:87:ef:dc:9e:3f:8f:4a:91:df:c6:93:d7:cc:
         2b:ac:56:f8:38:d2:a7:05:5e:f7:16:e9:3a:8e:a8:c6:06:1a:
         bf:a6:c6:0e:07:d8:2d:72:c5:4e:9d:ea:d0:ce:2b:bf:ee:c2:
         47:da:b0:66:62:e5:45:a6:ad:75:ba:24:bc:73:65:ec:b0:ce:
         7c:69:40:4a:bf:2f:d7:7a:3a:25:3d:af:4b:34:71:5f:f5:70:
         57:6c:47:73:9b:fd:7e:8c:d2:cf:b8:a3:8f:f6:63:22:3f:df:
         2d:1c:e8:cc:a9:4a:00:ed:49:bc:7d:38:db:93:14:65:55:96:
         80:94:39:f9:94:47:43:e4:e0:8b:48:fb:a5:31:73:8b:21:97:
         25:9e:4a:29:85:2e:2e:d8:bf:1d:c4:b7:91:e9:62:44:95:ac:
         eb:ea:d2:1a:16:74:8d:29:21:95:0f:35:e7:d8:16:b1:41:8e:
         a9:25:fd:43:50:1f:16:d0:4c:66:50:f2:e0:fa:12:e5:55:3d:
         6c:aa:09:54:89:74:d2:81:f4:3a:5d:10:0e:21:87:89:a8:d4:
         8f:06:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:45:03 2026 by rpki-client