Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
File:                     5107cb12-7dcd-3137-83ab-78d947b463bc.roa (raw, json)
Hash identifier:          eyQbTwksmuBXgC9RQDfP2vV6tmtjvLubbc6LtoLucMI=
Subject key identifier:   5D:78:A5:85:7F:F7:02:4F:5D:0C:F7:BE:61:71:D3:DD:94:A6:17:22
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E253F09F7C745A212D7EEE9A8
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16417
IP address blocks:        23.90.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:09:f7:c7:45:a2:12:d7:ee:e9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=4804489f-bee9-4ba4-b0ae-62abfd83db84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:73:56:b3:a5:66:36:f2:83:f3:b8:3c:ae:
                    86:02:aa:a5:04:b1:d9:ea:63:d2:b3:a8:8d:35:7f:
                    13:c4:b0:21:b2:df:c7:13:0e:93:9c:d8:28:4e:02:
                    a7:20:e9:a5:52:fd:7a:e6:a1:b5:06:45:c0:f6:8a:
                    ce:2e:07:f1:2f:67:6a:7e:9f:36:d6:47:e1:11:15:
                    ac:43:03:20:6e:4a:a0:ab:d0:0f:d9:ba:b4:6b:fc:
                    c6:fe:95:83:c8:a2:c2:ba:0f:3d:30:6c:27:b2:4b:
                    99:00:6a:6f:10:dc:f6:23:13:82:98:36:3f:66:9b:
                    5c:6a:d9:3f:8a:68:f4:7c:4e:28:69:ab:49:2d:a2:
                    25:f9:b1:7d:29:87:7c:46:1b:c3:eb:05:cf:8e:a7:
                    32:b2:f9:a7:a4:77:45:13:35:78:b9:75:6a:91:13:
                    8d:10:07:7a:1e:a1:73:91:8a:5b:93:02:64:27:08:
                    47:3b:5f:29:ef:8d:b8:94:83:46:ef:21:d5:3c:fd:
                    bb:ed:82:e2:31:92:1f:9f:08:bf:ac:ae:4b:bf:c4:
                    18:cc:d4:57:37:b8:32:b2:5c:37:ec:6a:51:06:87:
                    ae:37:3e:a7:e8:84:b1:8a:c6:5d:62:68:65:84:20:
                    71:37:c9:2d:18:ea:f5:23:74:64:a0:b7:f8:86:13:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:78:A5:85:7F:F7:02:4F:5D:0C:F7:BE:61:71:D3:DD:94:A6:17:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:31:d9:31:e5:77:6f:a3:60:e2:7a:64:76:7f:4e:d9:5b:f1:
         94:a4:22:ba:ff:3e:71:cd:29:44:ae:4b:02:8b:8d:51:3c:0e:
         e8:5b:45:7d:be:ba:1f:2f:c3:7d:f5:b3:f4:2d:8c:c7:6c:06:
         37:5c:8c:55:c7:7f:8b:ba:d8:67:7d:31:8b:51:c7:a0:65:1f:
         17:f3:1d:94:ed:4f:dd:31:31:e0:c0:5d:d5:de:32:d3:d0:ce:
         fb:dd:64:60:9b:e6:05:ca:c0:bb:8d:ce:c2:bd:ab:3e:c1:77:
         9a:a5:f1:7d:06:e5:bb:94:42:1b:1b:11:4c:5f:3b:fe:0f:a5:
         40:b1:f3:56:44:c7:ee:1b:03:6b:cd:f5:6e:e3:5d:ec:40:c2:
         97:4e:8a:4d:a3:12:a4:94:5d:48:8f:d3:e0:4e:f4:4f:9a:86:
         d9:93:b4:b9:e3:25:80:bb:5a:73:a1:e8:23:bf:11:05:2a:f9:
         f1:19:c7:e5:4d:6f:b1:31:39:2d:ab:87:49:92:9b:bc:00:9a:
         3f:05:62:d4:f7:2b:72:99:f9:6f:f8:96:a9:54:37:12:e6:92:
         c4:66:2f:e4:0f:b2:29:50:d5:f8:d1:ab:06:8f:95:a5:2d:21:
         d3:cf:39:85:07:b2:ab:a2:63:8a:81:62:f1:bd:ea:e5:b0:c5:
         88:09:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:58 2026 by rpki-client