Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb65790-d762-3e90-80f1-907f00703a71.roa
File:                     acb65790-d762-3e90-80f1-907f00703a71.roa (raw, json)
Hash identifier:          Bz0D0abOTbOX2EM8idlc1XnX5eA8w2y14fo5Xe/Bjz4=
Subject key identifier:   F8:AC:87:04:1A:27:0E:63:BA:96:69:79:70:54:86:40:FB:F9:F3:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA79978EA9D24C4B33FF14700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb65790-d762-3e90-80f1-907f00703a71.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.212.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:78:ea:9d:24:c4:b3:3f:f1:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8da15b34-dd95-45c7-b11e-e3a3a8a4eb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:9c:16:fb:9f:f1:a2:77:ba:3c:b3:07:71:
                    3e:18:fe:d9:27:55:d2:ef:96:c1:c8:dc:d0:ec:af:
                    6f:cf:26:dd:39:5c:bd:1d:b1:6e:b0:75:6c:eb:82:
                    9d:2a:b6:ba:48:32:62:72:a1:8f:d7:7b:c4:1a:da:
                    d5:6d:1c:b4:c5:42:29:6f:0d:63:57:3f:9c:ee:27:
                    29:c8:9b:6c:f9:42:72:6c:ef:be:a2:c8:43:cc:d4:
                    25:bc:86:cd:bd:55:03:a0:8e:54:19:d5:91:a4:40:
                    74:96:43:d4:01:4c:24:78:e7:94:dc:1e:b9:e3:1c:
                    08:e3:18:bc:5c:56:a6:ac:bd:05:85:e7:f5:80:44:
                    62:46:44:ab:c4:1e:31:5a:9c:bb:cc:b3:c6:7b:2a:
                    d4:d4:e2:70:13:fd:67:01:0a:b9:06:11:3c:1f:d3:
                    56:63:31:4e:18:23:9b:b8:56:dc:53:fd:02:e7:ac:
                    0f:fe:0c:6d:b4:e5:53:64:c9:e0:00:2b:38:86:a0:
                    dc:b4:6c:45:1a:40:a9:19:f5:24:7c:e3:8f:ea:3b:
                    83:31:38:d6:21:7c:48:5a:96:f3:c6:94:6c:d1:d2:
                    c1:d9:b4:7f:8c:24:a6:fc:e5:88:ba:93:97:14:b3:
                    15:80:1a:59:dc:58:43:e9:2a:55:7b:ad:55:77:12:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AC:87:04:1A:27:0E:63:BA:96:69:79:70:54:86:40:FB:F9:F3:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb65790-d762-3e90-80f1-907f00703a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:49:fd:28:b2:de:53:0b:be:db:33:c1:f3:cc:c9:d3:28:
         53:b5:88:00:ce:3d:1a:2b:2f:89:1f:b1:04:77:82:98:32:82:
         1e:e4:dc:f0:f7:c0:3e:f6:be:61:ac:b8:e5:a0:a5:b2:8a:8c:
         92:d8:fc:97:76:cc:2d:f2:97:66:8e:cb:a7:15:e9:95:0e:93:
         46:3a:9e:fb:70:0e:f1:e8:98:b2:10:54:c2:2a:19:96:bb:54:
         c8:5e:66:28:86:94:0c:d0:9a:f0:c0:5f:7a:19:da:f7:30:07:
         93:13:c5:64:74:ec:0d:b5:e3:90:63:fd:a6:3e:da:ad:21:c7:
         54:f5:be:a8:df:2d:b5:c2:21:d3:9c:44:c9:2e:96:d7:7a:9f:
         7a:7e:ba:4f:25:eb:70:42:a5:0f:bc:a4:e4:5a:ae:c5:ee:91:
         00:c0:09:90:70:3f:57:19:f7:a8:58:2e:a1:d8:fc:77:cc:ce:
         b0:09:1b:e5:f6:c0:95:5b:c4:f0:7c:ec:c6:d9:b4:0f:23:fc:
         9a:15:12:bf:78:0c:69:d7:a1:5a:29:16:fa:93:ad:32:39:90:
         da:06:00:6f:da:83:1d:69:0b:91:02:76:0b:0d:c2:17:2c:57:
         d8:6f:31:1a:5c:e5:1a:d8:41:3a:df:7f:a6:db:8d:48:cb:3c:
         06:f0:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:48:00 2026 by rpki-client