Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f855e0d-1755-35ab-9c91-26767df188f1.roa
File:                     2f855e0d-1755-35ab-9c91-26767df188f1.roa (raw, json)
Hash identifier:          qL+NF14O1mmmVMvmgLWh8l3grW59rebjYLR4FiQGvzk=
Subject key identifier:   8B:68:89:91:C8:E3:66:DD:3E:80:21:EB:A6:69:92:9E:BA:16:04:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497D746A3592DA45985FD1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f855e0d-1755-35ab-9c91-26767df188f1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     35994
IP address blocks:        23.194.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:74:6a:35:92:da:45:98:5f:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=84e84411-2b05-449d-8155-e4326c5d950b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:5f:8d:8d:e7:c8:37:c5:7d:15:43:02:62:
                    86:bc:a8:69:3a:52:58:2a:fa:11:d7:a2:59:00:95:
                    07:c1:9b:78:0c:e8:47:79:b0:8f:65:06:67:2b:48:
                    d6:5d:16:61:76:0f:56:10:75:e7:cf:e5:96:0f:b6:
                    a6:f8:16:b5:3e:39:e5:9d:b9:33:4e:63:bc:4d:df:
                    2c:0c:5f:69:84:da:b8:50:ff:85:34:61:c6:42:30:
                    c0:0b:7d:59:bd:2b:4c:c5:64:c6:fa:7f:11:e0:f5:
                    c4:78:c2:83:b7:1e:bd:c7:5e:d4:91:d5:47:11:53:
                    2e:72:38:8a:f7:b4:9b:57:ac:01:5e:23:d2:4c:c0:
                    1e:9a:f1:8f:61:1e:a7:4c:ef:37:97:51:e8:bd:02:
                    4c:62:82:bc:b2:b6:79:bb:1d:5d:ad:c1:dd:07:11:
                    37:81:84:81:61:f1:ea:d2:fb:47:76:e2:4b:4b:b9:
                    f9:a8:88:62:65:66:3f:0c:ce:19:03:cd:32:dc:bd:
                    d1:74:22:29:13:26:0d:d1:7c:a7:43:3e:80:c3:ee:
                    c2:db:5e:5b:d8:c3:1a:cc:0b:c1:fa:36:80:b7:73:
                    57:4e:01:13:35:14:b9:e6:b0:00:ec:d0:91:52:64:
                    aa:b2:49:f3:8e:52:8a:15:19:ee:6f:01:e4:90:e7:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:68:89:91:C8:E3:66:DD:3E:80:21:EB:A6:69:92:9E:BA:16:04:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f855e0d-1755-35ab-9c91-26767df188f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:3b:f2:43:eb:4e:d5:4e:de:c4:db:ac:ec:36:ae:51:3c:
         4f:cd:e0:d2:87:f4:3a:79:7e:fd:6d:a0:d6:5a:66:9a:18:81:
         c2:ba:fe:a9:50:1e:75:f9:81:32:05:c1:5d:26:d6:c8:09:bc:
         eb:7f:90:83:ce:cd:12:56:26:a7:26:bc:6b:0c:f9:3d:20:c8:
         31:f8:2e:7d:88:f9:81:2c:7b:c2:32:5a:eb:d4:34:ac:36:6a:
         56:9e:ad:a6:e0:06:d7:bd:5c:fb:0a:ac:f2:c8:89:57:6d:62:
         39:15:79:ba:4c:53:ea:d5:e1:97:79:ef:08:02:25:fd:c6:a2:
         11:91:cc:c3:f8:ca:51:31:6f:4d:61:3b:01:52:d0:70:bc:fe:
         ff:d0:03:9a:d7:2c:fe:80:d9:be:78:cc:70:e1:d5:ab:74:93:
         5e:07:08:43:7b:16:2c:e7:5c:be:30:d6:eb:14:90:57:c7:6f:
         07:a7:cf:b3:0b:68:35:79:eb:34:6b:09:0e:f0:df:94:be:1e:
         26:88:95:eb:0d:c1:05:ce:78:48:cc:e9:83:99:a6:48:4d:5b:
         f6:5a:43:24:93:62:d3:99:79:4b:eb:95:73:1d:0d:b3:d1:dd:
         8c:60:00:29:fa:77:48:2d:c8:c1:5b:9a:b7:95:5a:44:1e:a0:
         73:e0:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:40:11 2026 by rpki-client