Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ba9b90-ac06-3347-be59-7d48092c0fe1.roa
File:                     f8ba9b90-ac06-3347-be59-7d48092c0fe1.roa (raw, json)
Hash identifier:          siiMo0ked3ui7r4TuadX7Kl8exNWaOPSSCfomwJtlzo=
Subject key identifier:   1D:2C:F7:5E:10:5F:B2:28:7D:13:C3:36:03:68:5D:9B:09:51:B3:48
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA79AA77385C2EF39A2C55780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ba9b90-ac06-3347-be59-7d48092c0fe1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.214.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:a7:73:85:c2:ef:39:a2:c5:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6fefc910-68f0-4251-9670-8c12813a1333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:bc:97:46:9d:ca:86:10:f6:7a:be:78:af:
                    dc:09:8a:cd:5a:a7:43:6f:33:3b:8a:0f:73:36:40:
                    c6:5a:a6:ef:01:5a:2a:f4:0b:75:3d:09:70:8f:23:
                    e4:81:60:50:5d:9e:69:7d:1c:c4:fc:2c:93:95:91:
                    0c:e9:ed:9c:a7:8b:71:83:e8:36:be:38:7c:11:b9:
                    7e:52:0d:4a:1a:5d:7e:df:04:ef:27:61:cb:9a:a1:
                    1a:7a:fd:13:d8:35:bd:67:7f:74:32:cf:1a:78:1a:
                    52:73:24:63:fb:17:5c:61:a5:41:0f:dd:3f:20:cc:
                    f4:4e:43:c5:0c:00:e4:a1:54:6f:bd:b1:b6:1c:5b:
                    8d:53:7e:fb:20:26:14:7d:8c:69:b5:ae:4d:ce:69:
                    2d:f2:b5:b4:42:42:1c:ba:19:81:4b:f7:bf:0c:0b:
                    6d:51:f7:15:67:c2:55:cf:31:fa:36:26:6b:d1:79:
                    5b:f3:96:74:84:8a:3f:a2:60:3c:f5:b3:9b:de:fa:
                    c2:b5:84:d0:b0:49:4e:ee:5d:69:7d:d4:53:92:60:
                    c3:59:ec:08:f4:f2:22:00:9b:d3:21:34:d6:b2:01:
                    2f:8c:72:6f:91:e0:64:49:3c:7e:09:e2:28:6a:cf:
                    ea:8a:20:b3:3e:79:74:43:1d:67:66:4d:8e:aa:c1:
                    9e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2C:F7:5E:10:5F:B2:28:7D:13:C3:36:03:68:5D:9B:09:51:B3:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ba9b90-ac06-3347-be59-7d48092c0fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:21:59:ee:43:44:bf:f6:07:71:64:09:e9:fd:f4:ba:46:
         fc:00:fb:9f:4d:44:31:7a:07:0f:42:96:b6:07:69:c2:da:6c:
         e5:d0:ef:b7:2f:ea:62:18:be:a1:30:65:d6:26:1e:b6:a2:63:
         e8:f7:dc:13:84:ca:4a:95:ff:62:82:37:24:7b:2e:b7:4b:2f:
         1c:4f:1d:2f:42:1a:c7:aa:4b:0a:8e:91:72:4c:ae:f1:40:16:
         c6:9e:b8:1f:d4:58:ef:f0:e4:c4:86:a5:11:69:e0:0f:7f:b1:
         3f:04:b2:f3:70:9a:1e:42:d3:1a:ee:1a:b3:64:81:0d:fa:c2:
         69:c3:63:46:40:8a:7b:5e:93:cf:27:6b:68:b6:a0:f5:9f:51:
         76:e5:8a:eb:21:39:d2:f5:e9:3c:ea:52:3a:c2:f7:a2:fe:24:
         6e:13:78:ef:9a:f0:17:15:17:1a:0d:b0:01:ab:68:e5:bc:9c:
         73:c5:be:ba:7c:4f:20:88:9d:63:71:d3:bd:65:53:5f:cc:47:
         c2:43:86:0c:a9:34:67:0b:54:19:34:39:bb:a5:02:8d:f4:58:
         5a:dc:1b:d2:78:94:cd:eb:26:92:45:22:90:32:7d:f3:ae:3e:
         3c:e5:36:ce:51:c6:9f:86:86:c6:6f:26:c3:2c:4d:f0:43:29:
         7e:71:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:30:00 2026 by rpki-client