Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68c68fe7-f159-39c0-aa8b-22c9125473ad.roa
File:                     68c68fe7-f159-39c0-aa8b-22c9125473ad.roa (raw, json)
Hash identifier:          N/sdTVft8cbFHJ/SW8WWuzAqUQaU6AcYyhzsG2qkbgk=
Subject key identifier:   BF:F0:79:B1:B5:AC:3D:BF:07:A7:E0:C3:3D:CE:F6:A0:E0:A9:55:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D59EA4580DD8CDC32E5D94D88
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68c68fe7-f159-39c0-aa8b-22c9125473ad.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     20940
IP address blocks:        23.210.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:45:80:dd:8c:dc:32:e5:d9:4d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5690e498-5cab-43f9-92ef-1778b6993947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:51:5d:c5:be:84:59:d6:8f:dc:2e:3a:6f:
                    a3:2a:c1:fc:4d:95:ee:a3:e2:1d:61:1f:43:f1:0e:
                    ad:c5:c9:8e:68:c9:18:b9:9f:e4:44:e7:6d:99:e8:
                    a9:7e:7e:f7:e6:41:ac:10:fb:4f:da:b6:63:e6:6e:
                    e4:fc:d6:16:70:80:19:2c:d0:bd:90:63:e1:27:93:
                    de:67:0c:bb:aa:da:03:72:bd:72:22:e0:49:06:7e:
                    c6:fb:e3:dc:72:ad:1a:9d:a7:31:1b:6d:24:4b:04:
                    c6:31:bc:b6:24:e4:c6:6f:8d:bb:17:85:94:6a:0f:
                    1f:e4:8a:23:f8:90:1f:33:94:2b:e9:1c:eb:27:50:
                    9d:60:85:59:c0:ff:ce:78:5b:1a:08:97:04:21:ac:
                    0a:6e:23:c0:c2:c2:41:b6:36:4d:75:d5:ba:cf:c4:
                    d4:5f:be:0c:91:1e:74:d4:d6:cd:d3:6d:4e:b2:cf:
                    5b:ef:d9:01:d7:29:e4:eb:c1:2a:00:78:da:83:19:
                    bd:c3:5a:f7:48:40:e4:d2:3d:b2:37:e7:74:b0:5f:
                    3f:61:0a:80:d8:25:d0:84:3c:ca:07:91:33:34:4a:
                    6d:e9:b6:62:81:5f:08:36:36:2a:b0:50:c2:3c:5c:
                    9c:eb:5b:c6:06:3a:8c:1b:ce:7f:26:8a:96:27:47:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F0:79:B1:B5:AC:3D:BF:07:A7:E0:C3:3D:CE:F6:A0:E0:A9:55:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68c68fe7-f159-39c0-aa8b-22c9125473ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:f4:49:97:ff:0e:ee:87:97:b9:00:00:69:34:92:a5:c3:
         a0:85:04:d4:cc:e2:a0:17:47:ac:4e:ed:75:e7:d8:5f:09:e6:
         03:6d:62:b9:f9:6b:a4:da:b8:9b:47:68:d6:50:f9:fe:1d:b8:
         f7:74:ea:79:73:80:b6:7e:6a:cf:60:41:6d:28:72:97:d7:26:
         e4:97:a4:ce:43:fe:89:8f:83:ec:7e:79:91:82:5e:00:c1:62:
         d3:a6:ba:21:33:44:bd:78:3a:7b:d9:ca:fd:db:9d:90:3a:b8:
         a2:72:2a:36:32:a8:77:9b:d5:e1:d1:cc:00:38:48:79:b4:af:
         ad:f3:04:10:e5:51:07:4f:86:4a:ee:c4:20:2f:08:92:6b:3f:
         67:ad:fd:22:2f:bc:f7:f1:ab:96:88:89:59:aa:aa:37:72:49:
         10:33:24:61:de:34:2f:9f:1e:01:fa:05:9f:a5:d1:29:53:4a:
         c4:5d:09:4a:6b:d3:b6:45:65:a3:c1:ca:d7:61:05:37:db:4e:
         23:62:77:92:56:2f:a8:f8:78:04:15:c2:57:9d:f6:eb:39:aa:
         04:ac:08:50:59:44:e1:2c:41:0d:82:a5:31:ad:c6:89:da:86:
         8e:66:95:94:05:cb:cc:32:56:f3:ea:6d:de:87:57:a8:84:5a:
         35:c2:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:07 2026 by rpki-client