Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d693c3f3-4492-39e7-90ca-748c349709a5.roa
File:                     d693c3f3-4492-39e7-90ca-748c349709a5.roa (raw, json)
Hash identifier:          bBsKYQCO/zDHP9KFq3oU9dIAZIhnTA4VfHfYKdKokQY=
Subject key identifier:   26:FD:E4:D4:F9:E4:69:2F:1A:CA:E6:0F:59:97:89:8F:14:B3:F1:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1F4A26DB176CA4170E26D3C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d693c3f3-4492-39e7-90ca-748c349709a5.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.214.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:26:db:17:6c:a4:17:0e:26:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=f3e95359-6ae7-4d51-80a1-d954392e81d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:af:d8:df:d6:a4:87:32:73:9c:b1:99:59:
                    0b:1d:9f:56:85:72:45:6a:39:01:a2:ad:20:87:78:
                    29:f0:f5:20:ff:4c:7f:31:13:29:3a:2e:87:28:11:
                    2b:43:67:1e:11:fc:74:48:8b:bd:e4:f5:cd:7b:42:
                    3c:f3:55:59:64:a6:51:4f:74:96:44:e9:56:d0:2d:
                    f4:20:a7:b5:8f:23:8b:bc:df:db:35:ff:c3:d5:16:
                    c3:af:c9:16:c7:29:b4:80:d3:a3:3e:39:36:d4:b2:
                    57:4a:22:12:93:b9:08:b9:8c:58:07:20:e5:c0:d4:
                    53:9a:6d:0f:00:0a:8c:e7:a8:cf:d7:f2:4c:00:56:
                    c4:4f:6e:4e:21:9d:66:48:c9:bb:69:be:1f:e0:41:
                    ff:50:0e:c8:6c:cf:b9:b4:bd:15:f1:42:2e:1e:d0:
                    ba:3a:44:37:88:85:be:01:d8:b0:f2:a3:35:79:b8:
                    5b:3c:dd:98:05:7c:01:7a:02:a8:eb:7e:b2:5b:da:
                    c9:04:3d:56:09:21:a7:23:76:1b:eb:0b:4f:8d:6a:
                    8b:b7:bc:79:31:88:a9:86:b1:84:4b:47:4b:56:29:
                    f9:cc:d8:63:5f:9e:4b:25:23:ba:5d:3c:bd:e7:ce:
                    a1:33:6b:09:7f:24:fd:24:18:cf:c5:44:80:14:bb:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FD:E4:D4:F9:E4:69:2F:1A:CA:E6:0F:59:97:89:8F:14:B3:F1:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d693c3f3-4492-39e7-90ca-748c349709a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:88:5e:f4:02:ac:f0:3d:16:7b:09:11:6d:76:c4:a3:00:b2:
         38:6c:9b:2c:e5:dc:68:22:22:dd:d1:26:41:33:ea:63:8c:d6:
         7b:76:2b:e1:08:d5:99:f6:99:1f:82:b3:72:f6:f6:22:b4:64:
         1b:76:59:58:62:7c:33:fb:9f:b3:23:8f:ea:cf:98:59:cb:5c:
         f2:c9:10:50:4b:fb:a8:ca:b1:6c:db:eb:e7:71:c2:25:64:8e:
         cd:87:7f:00:e4:3c:aa:12:c6:dc:e0:4c:dd:11:de:6f:90:b1:
         c5:48:f3:ca:02:dc:14:ea:46:c0:f8:da:72:73:bd:52:22:a8:
         ce:e8:a5:d2:0c:35:e7:af:9c:33:35:40:d0:a3:f8:0b:74:84:
         f9:51:ee:3f:c7:9c:6d:fd:49:98:d2:c2:51:90:53:f2:44:57:
         e5:22:24:06:1e:8a:02:36:8e:4d:1a:63:e0:a5:61:3a:f4:d1:
         3a:c3:d3:a5:9b:b6:69:cd:04:e0:0d:ac:76:c3:6f:48:b0:d0:
         e9:ea:a1:9f:de:cb:06:84:e7:c8:98:27:02:71:33:c2:f4:7d:
         f4:b3:0c:e2:46:06:a8:bd:42:70:22:3c:6c:59:70:27:9e:52:
         f0:0f:e0:bd:c8:ef:f7:41:58:4b:5e:b3:05:ad:aa:67:cb:16:
         52:df:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:49 2026 by rpki-client