Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa
File:                     975b2e17-f15b-3eda-aa6f-40d437f71e08.roa (raw, json)
Hash identifier:          SNWT7Lv9T1ck+3i/K53xIeN5gPLk/OHHvsuWVLUQEf0=
Subject key identifier:   DF:1C:68:05:83:18:12:54:84:A2:DB:F3:57:0B:55:25:1E:61:D3:AB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6AAA78DDD2C68160E2F20B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     24319
IP address blocks:        23.214.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:78:dd:d2:c6:81:60:e2:f2:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=b9890836-2302-4ae2-adc7-d74ffedf5ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:ca:ba:99:35:71:17:f2:60:fb:2f:5b:01:
                    f2:3f:d9:4c:11:80:5a:a2:c1:16:d3:74:04:e6:3d:
                    0f:4f:da:6d:62:f8:cf:1f:4b:ed:96:e1:65:d5:af:
                    12:94:33:45:44:9e:ca:ee:e8:96:75:c7:0a:76:b2:
                    c5:04:3b:b4:87:2c:e7:4a:4a:d3:ba:8e:2d:7e:fa:
                    94:3f:93:68:31:1b:22:4c:0c:85:af:60:18:de:84:
                    3c:47:2f:4b:8d:0b:a7:12:41:39:c1:80:2c:82:dc:
                    b8:cd:58:3e:85:a0:bf:54:0d:5a:a5:58:b4:7a:21:
                    6b:e6:fe:9c:0a:d8:19:6f:40:96:0d:0e:56:2a:52:
                    3e:88:ab:b6:98:01:b4:3a:35:02:4a:b3:8d:5a:c9:
                    a9:6f:cb:8d:38:e3:7c:b2:dd:af:83:20:b6:07:d2:
                    cd:d3:5d:c1:28:64:79:e9:0a:17:10:1a:1a:2f:f6:
                    58:1a:49:16:27:c0:67:be:84:e5:64:d2:8c:3d:8d:
                    f8:80:d2:5d:47:0d:82:63:85:a7:dd:f2:12:20:cd:
                    d0:92:40:b7:1f:b0:d1:c9:9e:10:bb:52:6a:41:ff:
                    98:49:af:72:b8:0f:ba:77:10:2d:1d:2c:1e:d4:c2:
                    84:2f:36:24:67:46:40:3f:2c:8f:76:32:71:9b:c5:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:68:05:83:18:12:54:84:A2:DB:F3:57:0B:55:25:1E:61:D3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:5a:d5:ce:e6:f2:94:c1:84:c3:6f:03:0c:e1:93:ad:e3:22:
         f3:90:bc:ab:2e:16:c1:e0:5a:b4:9d:17:a2:1d:da:1b:f1:66:
         1b:85:0d:9f:5a:06:1c:d0:10:38:c7:01:02:bf:65:ad:b4:7b:
         a7:4a:30:68:58:d0:69:04:45:9c:6e:d2:a5:ee:eb:d5:8c:0e:
         5c:46:b6:7a:bc:15:6a:71:2f:14:28:b7:31:2a:48:42:24:85:
         11:13:4a:41:63:3c:f8:95:c2:c8:9d:de:21:f3:bc:99:6d:c6:
         bb:91:de:89:fe:06:4d:fd:a1:fd:b1:fc:4e:9c:e2:df:fe:1b:
         0e:51:6f:df:bd:47:65:ba:90:f3:f1:b3:f5:5b:2a:ba:c9:20:
         73:76:71:70:11:99:4a:34:b2:50:67:f9:80:58:9e:d0:c4:19:
         b9:00:78:b8:42:33:8f:e1:3b:cb:4c:7e:6c:72:a9:df:62:28:
         8b:93:b1:31:f9:f1:03:d9:8f:c7:4b:b8:5b:10:94:0c:89:8b:
         a8:08:a1:63:54:8a:8e:57:3d:d4:9f:f1:bf:73:9f:f5:a0:94:
         c3:53:39:b8:66:dc:0a:2b:eb:af:55:de:99:c2:1c:e4:b2:6e:
         ab:26:e0:8c:08:a9:41:62:2d:6c:25:d9:76:f2:95:dd:e3:15:
         42:cd:6c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:15 2026 by rpki-client