Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3383f0-9de7-3038-b87f-5107245fe767.roa
File:                     3d3383f0-9de7-3038-b87f-5107245fe767.roa (raw, json)
Hash identifier:          ep9r39Ryp61oFKDZiMmhbPmQqf+vR3/nqHfudTVEkZM=
Subject key identifier:   24:42:7F:36:3A:91:31:6D:AF:2B:DD:81:6C:5E:CC:03:56:F4:9A:D2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D2A74CB46F6860DC69020BD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3383f0-9de7-3038-b87f-5107245fe767.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        23.218.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:cb:46:f6:86:0d:c6:90:20:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=810f9de8-8ad6-4299-9710-c4e860f737de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8c:ba:48:56:0a:ec:84:fe:8c:ca:49:78:82:
                    b2:6e:68:f7:95:b6:fd:98:af:30:94:b4:ac:7d:ec:
                    6d:77:21:47:54:16:07:4f:c1:b5:ea:1a:26:1d:cf:
                    ca:08:01:76:64:cd:8a:07:ad:68:26:47:20:3e:cd:
                    7f:41:92:4a:60:61:32:6d:74:ea:01:42:22:2a:50:
                    e8:23:ad:c2:09:e7:c9:07:f2:90:1f:0b:c4:3d:c9:
                    6f:35:f1:62:b9:38:9a:f8:b4:04:89:e7:c5:50:c2:
                    7c:c9:e8:e9:dd:c3:05:89:2b:d4:2f:32:8a:54:68:
                    c0:9e:9f:c3:15:30:6e:3d:4e:c0:29:63:8c:fa:73:
                    93:da:3a:23:77:92:2a:73:bb:41:f0:30:ad:af:14:
                    dd:5f:35:e5:d9:92:26:3a:c5:89:24:3e:b7:3d:fa:
                    05:80:a2:d8:96:ff:0a:15:0e:20:03:24:83:1d:68:
                    45:80:e9:df:26:77:c2:97:f6:74:4d:e8:35:d7:04:
                    42:7f:17:99:a2:33:e6:06:1a:07:08:55:b9:00:c6:
                    ea:1a:fb:03:01:8d:c0:5e:c6:bd:8c:c0:a5:5f:5d:
                    d0:ae:c3:53:60:d8:82:8f:97:f4:34:5a:b2:2b:c3:
                    ed:19:62:ca:13:8d:79:1d:9d:57:96:68:29:2e:86:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:42:7F:36:3A:91:31:6D:AF:2B:DD:81:6C:5E:CC:03:56:F4:9A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3383f0-9de7-3038-b87f-5107245fe767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:97:96:e5:f8:94:54:9b:ad:ef:de:0f:fc:f2:7f:8d:5e:37:
         eb:4d:2f:d0:67:83:aa:09:4e:89:02:71:fa:27:36:93:a9:f8:
         25:2a:ce:b2:65:b8:8a:bc:17:d6:16:24:2b:54:ef:aa:7d:76:
         f7:f6:29:1e:44:c8:22:c6:53:47:60:be:68:e4:78:ab:c8:bc:
         a4:44:ed:2f:85:cf:d9:19:11:f2:cc:da:59:b9:46:d4:5b:b9:
         7a:ca:02:31:87:4e:aa:23:d0:b6:b4:38:d5:cb:81:09:c7:19:
         c3:e1:6f:bb:12:9f:81:97:72:b7:27:2f:33:5c:c7:30:d4:9f:
         cc:ac:69:dd:60:0e:7f:ea:69:bb:04:5b:d7:97:b4:91:c6:58:
         a6:d0:49:d3:f7:6a:95:19:fd:1b:84:64:12:96:5f:8b:55:75:
         81:2b:24:80:dc:5e:56:39:aa:85:a1:de:dc:6e:78:2a:35:9c:
         9b:51:92:9f:8a:0a:9e:bd:4d:8a:21:59:90:8f:16:e3:20:8c:
         95:09:28:8a:f5:c2:01:d8:3d:57:20:9c:af:70:cd:b3:68:24:
         08:d6:e8:3d:c2:43:b8:28:38:1b:a4:a2:18:bd:ba:3a:ed:a5:
         42:a3:5c:fa:8d:1f:95:52:04:5e:10:e1:b6:91:42:38:27:38:
         7e:f5:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:53 2026 by rpki-client