Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0210c7ef-8b31-336c-867c-3f3aaa002553.roa
File:                     0210c7ef-8b31-336c-867c-3f3aaa002553.roa (raw, json)
Hash identifier:          J0/D4QuTKxgcGmyMHYC35rqyzuGCEZ8IymaGTvPPUeI=
Subject key identifier:   E8:EA:54:00:30:A3:67:58:99:9B:92:52:12:D8:9A:53:4C:7E:5F:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CED27A881798146603AAD7080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0210c7ef-8b31-336c-867c-3f3aaa002553.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.54.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:a8:81:79:81:46:60:3a:ad:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=41d19f46-2385-47ed-8f1d-76c47ab456f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:73:0b:27:51:1b:e9:16:1d:e2:f7:84:25:8a:
                    e3:88:0e:93:ac:04:d9:90:d4:09:76:3c:2e:d9:50:
                    cc:07:89:7b:31:3a:e2:e3:c5:06:4d:eb:7d:67:73:
                    98:a8:01:b4:78:bd:78:d0:f2:e6:22:8d:8c:84:8e:
                    e1:c4:23:d0:c0:04:f7:fb:ce:a8:1d:f7:d7:ca:ca:
                    71:51:5d:04:84:cd:f6:c4:3d:7d:76:6c:ed:18:7d:
                    29:8f:38:a6:5e:d5:47:3e:c2:2e:54:e8:84:b7:f6:
                    26:95:de:62:0c:37:6b:e7:47:a1:12:f1:d3:d1:88:
                    44:7b:17:36:19:1b:87:6c:32:73:88:47:d0:43:33:
                    14:80:2f:30:35:31:08:c4:24:74:a0:ae:7c:45:f9:
                    02:88:0a:0e:c0:d9:8b:5d:e0:0e:9f:d9:2d:33:aa:
                    fe:3a:f6:9b:e0:cc:bf:5f:50:5b:ff:94:f9:fd:71:
                    79:d9:ec:23:66:9a:3d:dc:a4:35:ef:ac:58:30:5c:
                    36:30:bb:1b:73:7f:f5:e3:ca:20:37:0d:d5:d2:ed:
                    cd:ee:49:f9:5e:b9:33:82:c8:d2:f4:af:d3:10:11:
                    c8:ec:e8:4f:ec:cd:b6:15:ee:c4:ee:07:e3:bb:29:
                    75:f2:45:e0:d1:c6:a6:d4:04:1e:fe:cd:68:43:95:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EA:54:00:30:A3:67:58:99:9B:92:52:12:D8:9A:53:4C:7E:5F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0210c7ef-8b31-336c-867c-3f3aaa002553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:20:4c:ca:85:0e:cf:f8:02:9d:d7:3a:99:1e:a0:2b:20:82:
         b4:6c:7c:0f:17:54:c2:21:70:8d:d0:53:54:81:65:40:cf:e5:
         f1:0f:0b:d1:8d:8c:14:28:30:14:2a:41:83:6a:3a:b8:9f:26:
         cd:46:c3:13:1c:b6:de:8b:8c:98:a4:f5:a0:8b:2b:ed:31:ef:
         dc:e4:82:0c:ce:8c:eb:e1:76:90:2f:53:8a:85:a0:ae:60:c5:
         7f:b1:00:4b:d9:eb:c6:71:a6:7a:90:46:93:66:d8:7a:45:a2:
         14:dc:56:a1:2e:98:14:cd:36:6e:c0:74:fd:1e:40:79:e0:ed:
         99:91:c9:ed:e2:b7:d1:9e:41:4c:2d:ef:57:4f:d9:1b:4a:99:
         d3:35:99:1c:a5:4a:6d:2c:ee:a9:f3:97:48:2a:c0:c4:95:62:
         cf:41:fc:45:a7:77:4c:b5:3f:b2:d5:ac:90:e5:9b:8d:27:72:
         80:56:e3:54:18:44:ab:c0:e5:60:b7:7f:6d:d4:0b:3b:1a:c7:
         fb:27:e0:6f:6e:76:f5:6d:a1:26:9e:7c:73:74:1f:57:ae:b5:
         8b:11:c7:b6:b4:d3:26:c1:05:cc:50:05:36:ae:c8:b5:7d:15:
         70:82:b5:51:7f:ea:e3:61:f7:db:f5:d3:de:2f:51:3a:8c:15:
         f7:88:bf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:20 2026 by rpki-client