Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb126723-a680-3112-9c26-c2ef77785e2d.roa
File:                     cb126723-a680-3112-9c26-c2ef77785e2d.roa (raw, json)
Hash identifier:          6Rx/+53SQmsx+KLjCIMwhiM4NPpLcSBN2wSy+VGBUvw=
Subject key identifier:   15:75:BA:EB:59:C7:23:76:F2:C9:0E:CC:98:C9:9D:3C:82:DF:FE:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED001CFF6568C575AE4B1BE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb126723-a680-3112-9c26-c2ef77785e2d.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        23.49.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:cf:f6:56:8c:57:5a:e4:b1:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=39b96400-993c-4d4f-9b42-a9abc9b5f0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:eb:2d:ae:0e:d1:fb:85:58:1c:4c:c6:73:
                    11:73:5a:4f:79:67:a6:05:d8:8d:3d:c5:4c:84:8b:
                    ac:4f:ea:73:4a:a4:3e:63:66:f4:ff:e0:60:60:8c:
                    25:a0:bd:40:6d:61:89:3c:e3:d2:0b:3d:6f:e9:89:
                    29:a3:01:df:b3:40:e4:19:84:bf:45:b5:cd:8e:34:
                    48:3b:c5:9b:c4:c0:55:7c:b7:9e:99:51:0e:ea:cb:
                    94:cf:5a:a7:e1:74:07:24:c0:7f:53:c8:06:a6:89:
                    68:9a:3e:4a:66:49:4c:16:f5:c7:57:cf:20:62:6b:
                    8b:eb:d4:fe:7d:de:ad:f1:dc:11:94:a3:8f:7b:19:
                    79:4b:0f:93:ca:21:61:a7:25:a6:be:7f:70:b7:26:
                    c5:f7:95:6f:d8:8b:e3:cb:86:20:46:c1:c8:23:b3:
                    38:7d:3b:08:7d:a2:3b:f9:d2:80:0c:51:ac:35:43:
                    74:0a:87:18:40:0c:20:54:f3:6d:9b:5c:ef:0c:22:
                    4d:5b:ba:ca:a6:87:9f:89:92:40:08:75:78:f9:d2:
                    87:32:9b:cd:24:9d:0b:cf:59:57:a3:92:6e:c5:e3:
                    7d:a7:3d:2a:6a:d5:33:31:9e:55:f2:3b:ef:09:a8:
                    94:e8:cd:b8:0d:96:6e:ed:a8:9b:d7:0e:f8:1e:d1:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:75:BA:EB:59:C7:23:76:F2:C9:0E:CC:98:C9:9D:3C:82:DF:FE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb126723-a680-3112-9c26-c2ef77785e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b3:bc:9a:b5:06:67:62:25:0a:5c:a9:3c:70:ca:08:e8:ee:
         e4:22:9b:bb:a5:48:97:6d:4e:3c:4d:3d:c3:ce:41:80:fe:b7:
         76:7b:aa:ae:e8:77:7c:e9:17:af:b6:4e:69:ab:59:c3:8d:a1:
         b8:83:5b:2d:ac:5d:56:e6:4f:07:fd:ab:d7:a0:e3:eb:f3:21:
         30:bb:99:62:97:87:71:29:7b:b2:a8:90:d0:22:4b:b8:1a:07:
         9a:9e:7f:21:df:5a:e0:a6:fc:66:5e:3e:b6:07:ac:72:b0:ff:
         61:ec:e4:a1:cd:6f:87:6b:fc:02:d2:a5:4d:ea:97:c3:fb:c8:
         06:c0:c3:d1:0d:9a:64:52:5e:a1:93:a4:e2:21:2d:1e:f4:f9:
         af:e1:eb:8e:f2:2a:e5:57:08:7c:a7:26:4e:b0:60:85:4d:27:
         72:cc:2f:3e:8b:16:ee:a2:f6:9c:18:7f:a7:87:bd:90:a8:b1:
         b3:fd:32:c1:28:a9:2b:78:73:80:1f:55:9c:f3:e4:b2:8b:c7:
         de:1e:5b:5a:8a:64:72:d2:ac:47:39:f2:49:67:0a:77:d8:35:
         dc:56:bf:b6:3d:d4:5f:c8:7b:6a:e9:00:17:32:db:ff:db:61:
         23:c0:18:0a:f7:5a:ef:f5:78:e3:82:51:73:c5:c3:12:32:ae:
         03:04:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:45:09 2026 by rpki-client