Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/799b7816-31c0-3319-a36e-164dfae117aa.roa
File:                     799b7816-31c0-3319-a36e-164dfae117aa.roa (raw, json)
Hash identifier:          cTPtaCLAfklwMlxVhrYO0N6og7z+mzQizn/mjy0Lh9E=
Subject key identifier:   6F:B2:2C:99:9F:96:C2:78:34:17:B6:11:C6:D0:66:69:EA:A7:70:8D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E86F506B92E37FA661080A4B8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/799b7816-31c0-3319-a36e-164dfae117aa.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     16625
IP address blocks:        23.46.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:06:b9:2e:37:fa:66:10:80:a4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=bfaaf094-3f09-459a-8f66-8cf4eb46e9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:61:bb:63:9e:7f:fa:2b:27:47:ab:c9:68:
                    00:4a:11:20:0a:41:98:94:37:e8:30:1d:15:95:1c:
                    45:02:77:ad:f3:0e:73:1a:86:52:1a:dd:6a:bc:81:
                    9b:c3:29:a1:63:05:b6:d4:77:4a:d6:a9:09:f1:b0:
                    90:93:dc:4c:31:3e:92:22:56:6c:15:43:68:af:3a:
                    f5:1c:f5:01:94:b6:44:ed:e6:65:db:79:59:3b:5c:
                    48:90:d9:87:ae:36:2d:9c:ba:10:70:f1:5c:26:3d:
                    08:e7:71:a0:1c:6c:bb:fc:ab:a9:ef:77:9d:f9:05:
                    58:23:7a:0c:12:49:be:2c:e2:07:11:8c:fd:28:31:
                    3b:c7:20:6d:87:12:85:77:62:e0:f4:9d:d6:07:38:
                    7e:b3:40:1d:8f:41:a1:b7:b9:15:c0:fd:8c:ce:20:
                    6b:36:02:8c:38:ac:86:f5:8e:53:44:14:97:58:8e:
                    3e:d5:03:63:6d:fc:c9:93:b6:c1:aa:b4:57:97:c3:
                    12:31:1d:69:fb:2a:37:b4:a5:08:f5:e4:12:a0:d3:
                    3e:60:8c:a9:65:99:ef:9d:84:1e:5d:57:94:43:92:
                    5d:64:c5:bf:29:31:8a:5a:39:1d:2f:ba:e9:59:22:
                    31:be:ef:b3:85:46:02:34:be:82:07:62:05:12:e0:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B2:2C:99:9F:96:C2:78:34:17:B6:11:C6:D0:66:69:EA:A7:70:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/799b7816-31c0-3319-a36e-164dfae117aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:31:34:55:61:ca:07:8c:b7:86:b5:30:84:3e:ec:e1:c8:07:
         18:4c:54:74:50:c7:f6:6c:48:9e:63:21:2c:fd:3f:d9:64:d4:
         67:c2:18:fb:49:9c:fb:2c:4c:f2:99:2f:ec:15:e1:62:77:8b:
         0a:e1:a4:3a:dd:9e:49:10:a4:f6:fb:13:2d:a5:fd:4e:4f:d1:
         76:61:4c:71:c2:1c:4f:b4:16:ac:38:97:1d:4b:4a:b2:af:69:
         30:cb:b3:f1:5f:f0:8e:ee:9e:ad:1a:64:0f:87:fc:85:d2:4e:
         b5:a0:3e:9c:f5:85:7e:7a:8d:98:0a:5b:a8:5a:29:08:0e:d9:
         a0:4d:5d:9c:4d:60:5b:18:8f:78:80:6e:30:88:fb:a7:d0:15:
         64:a5:c0:a5:0c:fd:e8:60:4d:30:00:10:a6:dd:af:df:b5:39:
         86:27:16:60:12:92:90:38:a9:39:ff:ec:1f:76:23:0d:65:c9:
         82:0d:4a:fb:b9:d4:7a:89:f2:d2:e2:84:5c:d4:a8:e5:e2:90:
         7c:17:90:ae:7c:bf:32:ff:83:78:cd:64:1a:2b:a9:a6:9c:20:
         eb:d4:7e:f4:61:5f:d1:54:e3:27:34:33:f6:d1:17:24:00:8d:
         a7:39:43:77:77:67:de:8a:2f:bb:b9:f2:07:d7:cf:8e:ab:50:
         d1:de:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:46:18 2026 by rpki-client