Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0014bf8-4211-3341-8daf-7326ebeb7351.roa
File:                     a0014bf8-4211-3341-8daf-7326ebeb7351.roa (raw, json)
Hash identifier:          HigP6MLYqE8p9n2ifCfQldmIL6K/fmAUd6dlZ5new7g=
Subject key identifier:   1E:4F:33:EF:B5:F6:3F:88:16:E8:6E:83:1E:D9:CA:1E:57:E3:9F:AD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D2A74D2E458B837BA16F160C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0014bf8-4211-3341-8daf-7326ebeb7351.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        23.219.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:d2:e4:58:b8:37:ba:16:f1:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=07f3f56b-7728-4c5d-8429-02793aefb867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:53:fd:ee:cb:0c:fa:c4:71:f4:9e:f6:b6:
                    57:16:62:20:14:d3:e1:f3:ca:09:fe:4e:64:2e:50:
                    6d:c6:17:46:27:76:b4:b6:2a:7d:ea:7e:9b:d9:87:
                    9a:c4:ba:6b:26:f6:b7:98:54:e4:65:d0:d2:d8:c6:
                    4f:83:10:5a:7d:3b:43:9d:7a:bb:1c:78:6e:7d:f7:
                    48:55:d4:61:78:44:ca:c3:33:77:ee:57:6e:04:40:
                    7c:f2:db:44:d0:9a:b3:07:41:44:22:10:a5:25:f5:
                    f7:84:0c:1f:24:8d:27:fa:ef:11:e3:4c:63:9b:f1:
                    89:b5:48:c9:e0:1e:5d:f0:ea:18:de:1c:69:05:54:
                    ce:b9:75:8e:a5:75:6c:e0:bf:a5:9e:2b:8d:7c:47:
                    ff:10:64:b4:ce:81:80:68:93:cb:c5:30:ad:11:3f:
                    f4:63:00:f1:92:01:30:43:89:da:e7:07:76:78:1b:
                    b2:00:78:0e:3c:e7:9e:81:52:9b:91:70:a5:b4:ce:
                    63:1f:eb:07:24:eb:48:af:bc:48:2a:c1:ff:3b:82:
                    05:76:85:1d:ee:6d:6a:24:aa:d9:2f:1d:ee:0e:e0:
                    2b:00:6d:2a:29:8d:f5:60:b4:69:b0:d6:8c:be:87:
                    99:74:93:96:be:4b:13:27:94:d2:51:99:83:46:4b:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4F:33:EF:B5:F6:3F:88:16:E8:6E:83:1E:D9:CA:1E:57:E3:9F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0014bf8-4211-3341-8daf-7326ebeb7351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:22:75:0c:86:56:4a:5a:2e:04:29:81:d7:41:fb:ef:f9:
         da:40:75:52:a7:ff:74:99:84:c9:11:4e:7f:bf:37:ea:3b:80:
         cb:91:34:4a:0e:80:48:d4:d3:2c:fd:78:02:43:13:25:d8:e9:
         59:4a:7a:62:ec:5d:2b:ee:e1:99:a4:8b:a8:59:ba:d3:e0:39:
         3d:f3:82:72:7b:d0:3c:b6:2b:2d:a6:ad:ee:22:4d:59:9b:db:
         18:e3:40:66:82:8e:aa:c1:95:75:20:61:7d:b7:e7:ef:fa:b6:
         af:0e:77:e4:aa:48:cb:13:b3:ee:d7:96:92:71:a4:00:c1:1c:
         11:73:87:41:f9:2b:0c:78:57:24:dd:56:5b:b2:78:5b:27:33:
         bb:27:cb:0c:68:0b:ab:f5:10:94:8e:51:bb:5f:31:00:fd:13:
         ed:92:ec:a1:6b:7a:09:c8:ac:98:29:46:27:cf:be:03:6c:72:
         79:fd:1a:71:2b:e7:23:6e:17:06:3a:ea:2a:f1:a4:c1:64:fc:
         64:a6:2c:7d:b7:84:a0:19:7a:51:5b:62:c6:e0:19:75:17:eb:
         70:1a:e3:de:44:5d:65:3b:be:ed:32:eb:0a:63:3d:6c:5f:94:
         b3:31:e8:aa:2f:6e:6e:62:74:55:b3:df:e2:c4:77:0f:22:f4:
         ce:aa:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:19 2026 by rpki-client