Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daab1f0f-f1e4-3670-9337-a48d9a648d86.roa
File:                     daab1f0f-f1e4-3670-9337-a48d9a648d86.roa (raw, json)
Hash identifier:          NYIm2QqYl0exXLtSZoByGlLnvUQMYld8el4V2N0ZsG8=
Subject key identifier:   13:34:80:12:31:3A:9A:AF:06:39:41:9E:64:41:4C:95:2E:4E:4D:08
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E51E9E918F119B65A0EF1AE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daab1f0f-f1e4-3670-9337-a48d9a648d86.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     16625
IP address blocks:        173.223.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e9:18:f1:19:b6:5a:0e:f1:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=e4209eb3-5457-45ce-b0e4-21efb2b0a79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:56:26:96:0a:93:3f:f2:a8:4e:65:77:3a:
                    52:97:1d:1a:d8:7a:b8:0e:42:53:e6:dd:05:bf:4b:
                    f4:3b:a5:3c:6f:13:ca:c0:ac:ea:10:d4:81:85:11:
                    03:4b:84:06:3b:35:d1:d2:5c:07:f4:3e:2e:dc:4d:
                    93:f0:c0:d8:7b:57:ed:e5:68:df:c3:7b:5f:5c:2d:
                    9e:fc:30:a8:b7:97:6a:02:0a:be:46:50:98:06:68:
                    d7:9b:13:c4:a2:2d:3e:7d:32:1c:76:aa:97:10:d6:
                    ec:20:fd:a3:be:80:a4:d4:7e:6f:54:e4:01:0e:f5:
                    b1:fa:5e:a2:cc:1b:35:c3:33:d4:fc:85:f4:eb:b4:
                    b9:09:d2:a4:6b:4b:9d:67:d8:3f:70:32:aa:06:33:
                    37:e5:80:66:e9:c0:c6:35:db:b7:4d:3b:00:20:01:
                    09:08:dd:25:ed:46:0d:cf:34:f6:ac:a8:4a:c7:c3:
                    f6:3f:a3:cf:a1:64:f2:70:ba:3c:e5:53:65:33:16:
                    42:70:a5:67:e9:f2:ce:d2:db:7a:ad:2d:a2:fc:1a:
                    78:a4:1f:d6:07:a4:74:4d:11:d8:f3:78:b9:85:1c:
                    79:f9:43:a2:4c:52:48:e2:ba:3b:cd:e8:ad:a8:ed:
                    6f:cd:ad:c3:0f:09:40:bd:cd:ce:5d:0b:7f:73:91:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:80:12:31:3A:9A:AF:06:39:41:9E:64:41:4C:95:2E:4E:4D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daab1f0f-f1e4-3670-9337-a48d9a648d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:10:e9:c3:5f:b8:1e:0a:73:7d:07:1c:da:1d:96:4f:db:9f:
         05:92:b2:3a:21:26:18:8d:2e:fc:33:98:c4:11:54:02:07:ae:
         b2:8f:0c:67:0b:f4:29:51:2c:db:ce:8c:61:4c:7d:5e:6d:04:
         77:bb:88:8d:de:42:ea:53:de:11:db:b7:7d:1c:c7:87:de:58:
         e0:45:4b:95:77:7a:be:f5:a8:95:71:a1:56:e3:d7:b5:be:37:
         97:ee:2d:81:d9:42:c6:bf:ff:f9:36:21:de:af:3c:e9:39:93:
         c5:f4:5a:d4:02:00:70:33:df:62:81:0a:ec:cb:61:d7:99:65:
         41:2a:77:4d:1e:46:10:8c:b5:a8:99:f1:b1:49:5d:73:43:4e:
         3e:f6:7b:93:a9:cb:33:fd:d1:93:99:eb:9a:26:ec:54:f9:a1:
         b2:32:e5:ff:4c:49:84:3e:aa:51:5b:8f:43:97:94:1e:97:77:
         2a:20:ed:60:a8:e9:b5:12:fd:62:03:a1:b2:e2:fc:e7:f0:77:
         73:05:00:f4:e6:fc:b1:91:92:87:d4:65:9b:8e:52:4a:e5:cb:
         76:cd:32:d8:cf:09:8d:0f:b0:35:25:11:1e:ac:44:88:c7:09:
         3c:53:ee:04:d3:ec:09:2c:76:ce:33:3e:aa:02:43:7a:7e:eb:
         fb:b2:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:24:11 2026 by rpki-client