Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5d7a1ea-ca50-39ab-b915-74f72a2c2edf.roa
File:                     e5d7a1ea-ca50-39ab-b915-74f72a2c2edf.roa (raw, json)
Hash identifier:          YNcZPH5lUybxVWJQFL3hUyxEMajAmU82FsbDQ5X9Fl0=
Subject key identifier:   50:6D:E7:6E:A5:26:E9:85:53:B6:C7:7B:49:48:2D:E2:85:46:41:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CF2BCFE5ED47DE303A5A84F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5d7a1ea-ca50-39ab-b915-74f72a2c2edf.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.209.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:fe:5e:d4:7d:e3:03:a5:a8:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=3c5700e6-cb9b-4696-99c7-a59dd6b5de20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:72:94:08:7a:0e:e1:bd:0f:bd:a9:08:57:
                    f3:49:0e:74:f1:53:db:b6:05:7f:4f:00:ec:c2:88:
                    cc:6e:e8:5e:39:f4:7e:49:fc:0c:47:c5:96:0c:c6:
                    d0:df:f1:c0:06:df:21:6b:9a:f5:47:07:d1:33:f8:
                    86:42:0e:5c:3b:9b:38:f8:12:45:7a:66:7e:5d:b2:
                    f0:ae:4a:a3:03:cc:63:76:87:b1:6f:fa:8c:98:21:
                    11:22:dc:02:70:d8:bd:5e:e8:08:a9:52:80:9f:18:
                    ca:67:3f:e8:a5:64:18:48:b2:90:25:c3:d1:7e:42:
                    52:92:b0:9c:dc:de:80:e5:76:35:41:b3:72:86:c0:
                    9f:a9:bc:1c:26:6f:17:8a:36:b9:a8:61:fa:e4:07:
                    aa:55:68:01:1d:80:6a:33:3a:c2:1d:ce:5d:77:6f:
                    0c:03:df:72:40:27:e5:15:ac:62:fe:61:99:5a:d7:
                    3f:3d:47:fb:26:3c:1d:12:66:46:97:47:46:4f:aa:
                    08:e0:fb:a5:a4:f0:41:63:33:3d:cc:a3:40:51:30:
                    d5:c1:6c:4c:27:ce:c1:87:70:f9:65:6b:66:43:74:
                    d8:38:6e:e4:8d:40:46:7f:a5:88:ef:25:c7:d3:49:
                    b2:7e:c2:1c:bf:fa:e4:5e:7c:15:10:0a:9d:1b:ce:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6D:E7:6E:A5:26:E9:85:53:B6:C7:7B:49:48:2D:E2:85:46:41:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5d7a1ea-ca50-39ab-b915-74f72a2c2edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:bd:5d:57:12:01:60:6e:64:45:d9:80:d9:f9:d4:95:6d:9b:
         89:42:4a:b7:e4:86:e4:2f:a8:98:7f:e1:05:ef:4a:01:08:f2:
         1e:b5:0c:47:83:99:21:51:9c:76:26:64:bf:40:81:21:c5:fc:
         ee:ff:e0:21:2e:2c:2e:74:d4:ca:4f:86:28:f3:d2:48:e5:06:
         ca:8d:f6:52:97:8d:16:b9:8b:54:12:84:43:05:ee:3c:14:50:
         d5:88:1e:f8:f3:fa:79:c7:f2:18:50:bc:8f:b0:03:6f:dd:11:
         21:9a:f7:0a:2d:3a:28:a0:88:b3:c2:86:a3:74:b7:6e:ba:15:
         e4:97:3f:d7:a9:c6:c2:be:3c:bc:e9:ac:e4:3c:30:7c:f6:5c:
         8a:13:56:de:7d:ba:f0:fc:43:07:9c:b4:cf:f2:e1:1a:13:38:
         bd:81:f7:9b:73:84:7d:b4:64:1a:f5:df:90:1a:10:57:5c:a9:
         63:aa:cc:d6:b6:80:0a:22:e1:09:78:27:7d:31:d8:44:9a:53:
         10:ff:18:1a:e8:f0:26:14:09:86:2a:3a:94:4a:31:f6:18:57:
         8f:8e:66:84:76:54:b1:66:71:73:f8:10:bc:67:47:be:9b:87:
         bc:ca:a6:bd:8d:fa:c7:0d:53:07:4e:46:45:39:19:ec:d2:ea:
         2e:dc:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:18 2026 by rpki-client