Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923f5240-b169-3f29-aa3b-5549c7a1618c.roa
File:                     923f5240-b169-3f29-aa3b-5549c7a1618c.roa (raw, json)
Hash identifier:          Jtc5E6AC3buEunwxmVtS/wjY/a6NcCpN7/kiFQbcA5M=
Subject key identifier:   15:89:19:8A:CC:1F:AA:A4:29:58:E7:70:2D:F1:A1:DA:83:99:49:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D7F9A82F6F54D86154907DF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923f5240-b169-3f29-aa3b-5549c7a1618c.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     35819
IP address blocks:        23.204.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:82:f6:f5:4d:86:15:49:07:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=e5a5eab2-0680-4990-8389-47df037b3212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:92:47:cd:d6:b7:ad:ae:4d:16:93:b8:d5:
                    e8:ef:f1:d6:83:71:f1:10:f2:ce:66:17:46:a2:8e:
                    cd:ac:3c:3c:fc:50:f5:f6:80:2b:93:1c:e8:e4:33:
                    6c:30:a2:a5:7c:73:79:f5:fc:df:af:8c:35:a9:7f:
                    a5:85:8d:20:f6:a1:4a:c9:90:49:00:e2:f4:7b:16:
                    0b:66:eb:2a:5b:c1:cf:53:4d:85:ca:fc:f0:dc:4c:
                    69:be:03:94:ea:95:92:af:1b:f3:73:59:d1:17:55:
                    15:09:cd:83:96:3f:76:a4:98:2b:2f:c8:39:5d:3f:
                    b0:af:b0:9f:36:13:a1:c2:67:de:f4:06:38:b0:0a:
                    1f:e6:d5:14:36:da:c4:9e:09:1c:31:cf:82:dd:82:
                    c8:a9:ae:bc:75:5b:8d:af:c3:96:3c:35:0b:a6:a1:
                    8c:72:d8:36:27:08:6c:f5:50:38:2a:98:2a:1b:7c:
                    96:23:a0:be:af:bc:84:ae:34:2b:cf:1b:e8:b7:ae:
                    14:68:bb:0f:6f:5c:6f:fb:2e:78:99:d9:d8:d5:92:
                    21:14:93:bb:a0:2d:3f:4a:25:0c:65:62:40:a8:f3:
                    ff:00:0a:12:4f:13:71:6e:94:88:8e:97:43:52:f8:
                    c7:13:37:52:71:e9:6d:9e:9d:6e:99:31:82:b3:90:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:89:19:8A:CC:1F:AA:A4:29:58:E7:70:2D:F1:A1:DA:83:99:49:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923f5240-b169-3f29-aa3b-5549c7a1618c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:64:3a:01:55:43:71:32:5a:37:9f:56:17:0e:3b:7f:33:66:
         d1:72:ca:9a:08:d4:3a:8a:0f:e3:14:2c:a6:aa:41:43:36:b6:
         fd:b4:95:77:9c:5e:ad:b1:62:3c:10:e6:e7:dd:0c:35:df:37:
         e8:50:b6:ae:e1:fa:b9:b3:eb:56:64:00:07:d8:a4:86:d2:b0:
         74:2c:15:65:e3:e2:64:b3:4e:8b:d5:02:e4:94:41:40:9e:d6:
         98:1e:4e:5e:41:d1:39:e8:a9:bf:bf:26:6d:97:60:c3:70:30:
         46:6d:95:b4:12:fd:fb:5f:7f:34:37:89:1d:20:46:72:10:5f:
         c2:ce:4d:ae:64:f0:79:fa:4a:f8:96:9f:5f:f9:8d:0a:54:7f:
         d1:02:e1:49:f2:cf:98:1e:65:0a:14:de:66:b1:74:63:6f:4f:
         3a:fe:3f:f7:f9:19:b0:c3:f3:18:84:4d:a5:b4:d6:b2:f7:7c:
         a9:74:71:9f:8c:f2:94:27:c3:e0:5f:43:81:64:bd:e8:a5:1f:
         9f:46:d0:ad:26:a9:9e:2e:9e:cd:68:9b:15:ed:fc:d3:f6:83:
         65:c1:7f:42:fb:d1:2b:7b:a2:21:38:2b:0a:5a:00:c7:df:98:
         ff:54:7a:3b:57:ff:a6:60:0a:32:8a:42:41:ba:57:eb:6f:01:
         c5:4c:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:12 2026 by rpki-client