Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccce7687-2b17-3871-b5a1-2484973f56c8.roa
File:                     ccce7687-2b17-3871-b5a1-2484973f56c8.roa (raw, json)
Hash identifier:          l3um+6MMVbCn0pAjl1tf34nrZC8oCVC5BXs3LjjesDI=
Subject key identifier:   85:45:E2:FD:D8:E7:8A:FC:42:FE:C1:AA:E0:60:FE:FC:18:0D:E9:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA8EC4DB569525551896D58E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccce7687-2b17-3871-b5a1-2484973f56c8.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     16625
IP address blocks:        23.47.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:4d:b5:69:52:55:51:89:6d:58:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=86dc2b76-2e17-499f-8779-f17d61baf38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:32:ad:c6:39:a9:6d:b4:8d:b9:37:74:45:
                    59:ca:9c:f7:44:b3:8b:ff:2b:26:ae:e6:3a:70:48:
                    5e:47:b5:22:05:d1:35:f7:f6:1d:b5:f4:00:33:2d:
                    c9:0f:04:a0:8a:4c:38:24:31:61:14:b8:37:ac:30:
                    4d:cc:19:c0:0f:eb:99:e2:41:c7:04:8d:bb:7e:26:
                    c3:6b:61:89:13:23:bb:bb:0c:9c:d5:2c:0d:f1:7a:
                    aa:1c:e6:14:31:7a:98:28:7d:e9:53:8b:ec:50:31:
                    30:7c:79:a8:8f:e6:fb:6d:67:89:33:91:f7:ae:69:
                    54:7c:63:08:cd:d5:9a:ab:21:17:b7:f1:a0:99:dd:
                    c7:b9:11:c1:c1:8d:75:0d:f2:b1:55:67:f8:cc:68:
                    6c:20:e8:a7:c4:0a:6c:a0:da:08:e2:66:d3:02:42:
                    30:75:5c:ca:ee:f1:3e:50:33:78:e9:d0:2b:8e:c3:
                    e4:dc:7d:b7:4c:ec:81:bb:61:2b:11:35:49:c0:1c:
                    8c:9c:54:6d:8a:8d:dd:ed:34:f7:ff:e5:d2:9c:a5:
                    9f:9f:fa:36:ec:5a:79:66:4f:d8:fc:3b:79:11:16:
                    97:12:ba:af:81:9c:c8:72:2f:19:35:63:5d:2f:14:
                    25:85:be:53:90:ca:2e:17:b3:a3:22:c6:00:dc:39:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:45:E2:FD:D8:E7:8A:FC:42:FE:C1:AA:E0:60:FE:FC:18:0D:E9:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccce7687-2b17-3871-b5a1-2484973f56c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b1:27:ff:a5:d9:77:7d:3b:1a:6e:d0:9d:71:72:40:59:b2:
         a8:f2:7a:99:4d:dd:b1:70:f6:2c:f7:0c:67:3b:aa:0a:e3:55:
         bc:6a:20:2d:c6:ed:42:53:ea:00:4b:8e:0a:1d:dd:08:6c:72:
         d9:bb:99:d9:83:a9:c0:04:3c:ef:7e:88:cc:72:25:04:a8:cb:
         41:6d:d1:72:ce:24:3b:dc:3a:1e:f0:1e:58:b0:31:53:4f:84:
         98:a1:cd:90:05:8e:91:f0:6b:b7:78:ef:24:70:cd:07:a0:76:
         77:90:36:15:7a:1e:5e:b0:bd:95:bb:4c:cf:a2:bc:59:97:ec:
         52:98:4f:eb:38:7f:d7:e0:2e:4d:5c:d6:26:0c:23:01:be:f5:
         5a:58:8e:00:3d:90:13:1c:ff:97:fe:2a:b6:7a:b6:2b:70:4f:
         9f:0a:25:c3:97:52:b1:74:97:66:fa:27:4d:b2:f3:01:f3:d6:
         da:1d:60:62:38:ef:4a:24:4d:0d:e8:6f:29:3b:7c:2b:15:de:
         aa:8f:36:90:99:ec:0d:65:1d:7b:7e:c0:ad:38:69:f2:0b:48:
         37:bb:ae:a2:7e:70:94:df:41:bb:4d:89:88:21:d0:f6:51:02:
         1e:12:b8:93:70:bc:de:37:50:db:70:99:c4:52:4f:c2:db:6a:
         5f:41:03:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:45:21 2026 by rpki-client