Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa
File:                     679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa (raw, json)
Hash identifier:          QhuZhMTOix7OTKGht7+ojKwN29u9+1fUDKkge9aWBiU=
Subject key identifier:   41:A5:F8:AC:E8:9B:3B:C6:F5:50:39:28:B2:7D:5B:A5:BA:75:D6:39
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1F4A2D3D8826F93A9E9ACF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.214.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:2d:3d:88:26:f9:3a:9e:9a:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=c99eb647-2037-4e95-8fa8-8b985c6567a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:b6:3b:bc:a1:ea:58:67:42:1b:94:a3:af:
                    d2:4c:3e:65:19:e4:ca:5d:6d:d2:a7:78:02:30:6b:
                    1f:eb:7b:e8:86:dd:93:e3:fd:f2:bf:ed:1b:2a:64:
                    85:53:15:b9:cc:42:b9:7d:59:b1:54:36:df:93:22:
                    d5:e6:0e:b2:82:7f:a8:53:3a:6f:20:27:9d:cd:6e:
                    41:ad:34:88:e8:27:da:45:6b:7c:8c:d7:e7:ec:e0:
                    05:06:f3:af:9a:88:ca:24:e1:b9:61:ec:55:87:d2:
                    f1:2f:d0:69:78:74:a3:e0:c0:9e:77:43:8f:8b:2b:
                    7e:3e:b2:2e:0b:98:42:ed:ce:5e:7d:db:2d:2d:2b:
                    23:cc:8b:ad:6b:f1:97:0b:cc:78:d0:dd:4f:6b:ff:
                    7a:55:05:df:21:f8:31:4b:f8:37:e3:b9:cd:fd:fb:
                    90:bc:0d:81:d2:33:ce:ab:4a:b6:7a:98:be:c4:40:
                    5e:65:dd:9a:ce:60:c0:5d:fc:34:c1:69:2e:6d:3f:
                    aa:96:1a:e4:0a:80:fc:89:31:48:d0:84:12:c0:a3:
                    e0:a4:9b:c4:d5:c8:13:11:42:db:23:f5:4f:e8:f0:
                    15:d0:36:97:b8:aa:1d:54:69:32:d0:1e:1c:4f:4a:
                    fe:f3:8c:a5:11:ec:68:06:d5:95:39:cd:3e:72:fa:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:F8:AC:E8:9B:3B:C6:F5:50:39:28:B2:7D:5B:A5:BA:75:D6:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:b3:82:46:6f:23:a9:2f:2d:8c:82:ca:4d:b3:40:b5:28:
         13:2d:a3:fd:cd:c4:db:3f:ca:a6:98:f7:1a:f2:9f:e8:8d:33:
         4e:83:ef:c2:da:13:66:38:f3:f8:20:50:22:ff:81:48:86:a8:
         b6:f9:53:09:55:a9:1a:e9:48:0f:c8:e0:58:ee:fc:c6:aa:5f:
         88:cb:39:41:8c:80:c0:4e:16:73:e6:ef:6b:31:f6:1e:b3:f3:
         55:27:f7:b4:69:be:0d:7a:03:e2:e8:38:73:f9:d8:eb:63:fe:
         e5:5a:93:b7:32:ae:bb:f9:2b:d2:10:6e:3d:84:32:f7:0e:53:
         1c:7e:be:f2:38:03:f8:c9:43:e5:68:a9:68:cd:5d:f7:5f:b5:
         a7:99:ba:98:de:14:5c:9a:d9:fd:7c:eb:ae:44:60:3f:42:86:
         ce:b5:d3:ad:f9:16:ce:87:ce:74:b4:03:24:28:1d:bf:67:b5:
         a2:78:d2:41:50:69:69:56:61:c5:20:d2:1a:03:9f:73:98:14:
         f5:b2:64:a4:f1:4a:6b:49:2f:22:0c:cf:85:26:a9:e6:c8:2c:
         56:66:56:e7:08:bc:74:c2:86:b7:7a:ed:0b:52:46:07:41:30:
         d6:cb:9d:9d:4f:84:39:51:85:b0:ea:d4:51:56:af:8f:35:4e:
         b5:3c:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:36 2026 by rpki-client