Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa
File:                     caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa (raw, json)
Hash identifier:          IEd/PqkNWWm/HCWVcHnEv5jdereD9yakrQJKj799TjY=
Subject key identifier:   50:73:9B:61:0B:63:CA:70:EA:B6:7E:89:57:A3:46:4C:87:C3:34:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4559FC068561E76FE22B1DA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16625
IP address blocks:        96.7.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:fc:06:85:61:e7:6f:e2:2b:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=859531b9-26dc-4599-948e-f51cff1bb1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:b4:18:5e:97:d4:06:89:9c:ec:15:e7:6c:
                    e3:08:4b:13:90:70:9b:a9:e8:bb:38:4f:00:c2:83:
                    86:3c:d3:a7:8d:a3:cf:2e:28:4c:8c:20:48:20:35:
                    68:c4:6f:31:18:01:ab:7d:30:83:d9:bb:ab:9b:dd:
                    02:cb:d3:2b:62:5f:e9:d5:80:4c:1a:06:bb:20:3a:
                    45:41:d6:4d:52:24:3a:a1:bc:1c:8a:26:64:58:fc:
                    ad:f0:ac:0c:63:cc:05:e0:35:0a:ee:ee:1f:4c:3f:
                    47:aa:8a:3a:6c:ef:7d:83:b8:2b:2f:81:e5:39:28:
                    e5:53:06:af:6b:6c:7e:78:5a:78:18:0e:a9:96:82:
                    b9:cb:b0:fe:24:fb:03:57:84:62:20:ce:a8:49:41:
                    60:e0:3c:45:a7:29:04:44:70:5b:01:f5:81:38:f7:
                    62:c2:00:19:c6:c9:4e:74:f3:08:47:6d:6a:48:65:
                    0a:57:aa:15:dc:96:35:01:1d:cf:5e:d6:2c:8e:97:
                    0c:5b:29:74:05:fe:06:59:2d:e8:31:f9:17:94:89:
                    1f:85:2a:2d:74:06:1f:25:5f:d6:33:f0:2e:f6:fc:
                    9e:58:e2:53:c3:d9:71:1f:4d:60:03:54:f2:69:87:
                    5a:a6:8d:56:2c:b5:76:0e:4e:de:0e:36:1f:10:3b:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:73:9B:61:0B:63:CA:70:EA:B6:7E:89:57:A3:46:4C:87:C3:34:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:08:f7:5c:81:1d:d6:b4:f6:97:21:fc:21:d8:f3:c1:bd:68:
         c0:ae:88:f9:3a:9c:22:6a:d0:ea:7c:6c:eb:53:95:8a:68:0e:
         b5:cd:f9:09:9c:f2:55:f9:74:b1:04:57:4b:75:20:5c:13:5d:
         60:6c:b6:a9:fa:d7:ca:d3:7f:b4:3a:57:ca:af:24:15:f3:9f:
         69:d8:eb:55:d8:59:91:90:5e:5d:ef:db:01:99:d1:5f:1e:dd:
         7c:98:51:af:8d:8b:f6:e1:55:4c:1a:9c:14:1d:02:1a:c1:18:
         d7:f8:c2:79:ea:7e:a8:19:9e:4b:a3:e9:db:16:4a:09:8b:e1:
         46:6b:09:25:61:46:4f:5e:e0:49:b4:10:81:34:fd:b1:bb:7f:
         35:89:c3:7e:ae:30:70:f0:31:85:08:e2:58:2f:1e:82:ed:2d:
         a8:fa:e6:27:db:cc:c6:fd:ff:aa:6f:c3:6d:88:23:95:a7:c6:
         2f:ec:26:e7:62:ce:72:58:ad:19:31:ad:ca:8e:f4:c9:b2:57:
         4e:7d:3a:ea:7b:f0:53:d5:a1:71:0d:2c:5e:0f:11:32:b3:ad:
         c5:e1:8e:86:d0:3c:27:e9:a7:92:76:04:68:f8:8b:71:cf:8e:
         cb:88:ca:52:1b:c8:f9:f3:6f:21:03:fa:f0:f0:64:29:e3:f6:
         33:90:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:23:36 2026 by rpki-client