Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa
File:                     a89708f9-f6dd-39d4-b67f-98ba8899950c.roa (raw, json)
Hash identifier:          g4kuxo2Mg8T6ZoZjQRUGb3qCwZ5svupgFCgWhi0+Evg=
Subject key identifier:   83:02:74:3F:EA:D2:3E:0A:C6:FD:56:D8:B8:AE:75:32:32:ED:ED:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA242A1CD8C498F92552C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     20940
IP address blocks:        23.3.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:24:2a:1c:d8:c4:98:f9:25:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=9e8fdc88-2c67-4785-b706-e85695bb429c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:87:11:fd:0d:c3:07:87:47:4f:e0:d7:e3:
                    70:1c:4e:b5:b2:8a:dd:44:07:36:0b:a5:b7:17:9e:
                    50:ab:c6:54:8c:2e:56:7c:b9:01:f2:cb:80:90:f0:
                    13:83:a2:41:59:39:28:66:79:37:db:96:69:a9:a6:
                    06:08:71:a6:11:5d:d6:de:12:a0:b6:f8:18:ac:fc:
                    6c:25:aa:b4:56:2b:ab:c5:04:3f:2f:34:2c:a3:56:
                    44:ac:cd:e4:6d:eb:00:42:41:01:49:70:cf:a2:68:
                    d3:42:19:2f:30:2a:7a:67:68:0e:8d:36:a8:3d:37:
                    96:db:50:f1:f8:f1:a2:73:dd:70:20:06:41:97:42:
                    d0:1b:98:21:7f:0d:08:d3:7e:84:91:bd:7d:91:6a:
                    a6:c2:08:a5:5e:c6:6a:70:93:6b:e1:21:9f:11:90:
                    81:a0:8b:ec:48:91:9f:97:c6:45:eb:ec:00:49:7b:
                    d1:de:0f:49:f4:1e:e8:0c:05:23:44:0f:ad:55:32:
                    4a:6b:65:f3:73:11:e3:a6:0d:6d:b5:05:9d:f4:c9:
                    4d:8d:0d:3e:b6:48:8d:f8:9b:c6:b3:eb:e9:fa:a3:
                    a2:5d:cf:2e:48:c5:72:0f:c5:93:af:47:0c:97:c5:
                    ff:a6:e5:61:58:e5:9c:4d:bb:4a:2d:9e:7e:62:94:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:74:3F:EA:D2:3E:0A:C6:FD:56:D8:B8:AE:75:32:32:ED:ED:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.3.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:e2:83:fb:04:60:ea:60:14:60:a6:93:ce:5d:80:87:ef:
         d6:7a:97:c1:b9:51:32:70:5c:07:30:93:62:1c:eb:42:10:bc:
         a8:74:8c:ff:78:2d:2d:79:db:e6:9d:29:b5:19:81:b7:54:50:
         8d:c8:42:df:1f:ee:2b:f8:f2:ab:bd:b9:a0:76:4b:fa:08:ac:
         51:6d:f9:a7:ba:8a:b9:49:7b:df:15:09:9b:6f:8a:da:d9:32:
         3c:8a:c7:93:6a:0b:74:9c:a5:3b:3b:9a:6d:5c:93:44:ce:33:
         4c:01:5b:4d:c2:50:75:b4:73:0a:42:ac:11:be:f6:40:2c:d1:
         3c:27:ec:14:9c:5a:7a:05:29:02:9f:07:56:12:24:45:78:4c:
         96:63:ba:f1:ed:25:fc:1f:c6:db:7f:7c:89:26:13:23:69:cd:
         65:ec:6d:d4:d5:8d:86:45:81:de:6e:9b:96:d2:38:3e:c5:64:
         4b:89:bc:01:2e:b9:57:04:da:31:6d:fc:37:73:67:ce:95:1b:
         d3:e8:39:44:8f:d8:74:50:42:3e:f9:7d:7d:ff:a5:ce:d6:92:
         b0:07:c4:75:09:dd:94:58:84:48:2a:d9:34:7e:8b:f0:e7:bb:
         a8:27:5c:58:a5:83:98:7c:37:a6:bf:d2:07:bf:ea:3f:ef:d4:
         35:b7:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:38 2026 by rpki-client