Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa
File:                     54993026-2414-3974-a921-0ee2a6a9a213.roa (raw, json)
Hash identifier:          v0LkXM1TqWT2ja7YJm023xC2usamvGK/vJxNKd5rFOM=
Subject key identifier:   87:BE:1C:78:93:03:18:76:97:E3:5A:72:FD:C7:D6:25:DC:89:AF:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DFBD5F3439FC1B2E870A3C000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     20940
IP address blocks:        23.211.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:f3:43:9f:c1:b2:e8:70:a3:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=8a462689-5acc-42f4-afbc-b13ff5354fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:a8:b2:80:e9:35:96:93:f8:39:00:b4:bf:
                    95:e0:70:59:c4:3c:79:f4:20:c6:6c:8c:11:ef:88:
                    00:81:87:8c:fb:0d:de:74:4e:b2:de:06:5c:68:26:
                    dc:dd:aa:2e:19:e0:35:e7:fc:9d:13:dc:29:cd:63:
                    61:09:db:75:1b:32:3d:38:61:9d:b3:2b:17:2b:99:
                    3b:74:c9:4b:e6:e3:26:f7:1a:d5:c5:6c:5f:a3:3e:
                    6d:83:6f:d5:0b:de:b9:e3:ec:b1:cf:ae:cc:fe:a9:
                    34:89:5b:a8:3c:f6:ee:50:e3:ed:34:2e:98:07:cd:
                    2a:29:0e:f1:74:75:5b:9d:01:6d:8d:9c:d1:e3:f8:
                    27:f3:f9:0d:d6:00:27:93:09:7b:1a:a8:dc:c4:1b:
                    a9:8b:21:72:ec:cb:58:ff:e8:1f:7b:bb:b4:67:56:
                    35:d3:97:5a:00:ea:4c:c4:6b:09:85:10:e1:59:c8:
                    fa:83:cc:ae:30:84:0a:95:70:be:e3:a3:20:02:f6:
                    55:74:3e:60:c9:ec:1f:a1:77:46:28:5b:72:0c:d1:
                    60:6a:cb:54:2c:cc:7a:df:9c:51:b7:27:a0:f7:9b:
                    79:2a:01:bf:43:70:ab:30:b3:66:ec:55:73:7c:ae:
                    e3:66:6a:02:5e:22:d7:3c:58:24:79:6b:33:b9:5e:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BE:1C:78:93:03:18:76:97:E3:5A:72:FD:C7:D6:25:DC:89:AF:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:96:56:36:75:ac:cc:91:98:2e:ae:2d:c8:ae:de:65:62:b1:
         c0:1a:db:ea:b8:26:a1:1f:2c:e5:32:e9:65:99:8a:58:1e:f1:
         30:48:ae:d6:ca:8a:39:6c:e4:19:8d:f2:46:9a:54:e3:64:ce:
         6b:80:12:26:22:44:ed:3b:92:c3:0f:e6:b3:93:97:c3:3a:81:
         c1:c9:92:73:3c:50:20:8e:8e:27:b1:e8:a7:53:a7:33:8b:e1:
         3a:aa:28:d8:fe:12:39:87:8b:8c:47:8f:7e:b0:02:f0:ec:f2:
         b2:24:69:48:5e:59:4d:d0:2f:c3:6b:08:12:8a:28:bf:78:8a:
         76:aa:bd:6d:9b:e2:35:3f:28:87:80:31:d9:76:7b:ba:72:b3:
         43:98:c8:4c:8d:5e:06:5d:4e:67:5d:fa:da:93:e4:62:01:b9:
         74:48:e2:95:c6:1a:75:d5:60:92:b9:d5:32:b5:aa:9c:27:0d:
         da:72:20:4f:75:66:52:f5:ce:ec:88:5e:00:4d:4a:b7:cc:d4:
         bf:db:79:10:4a:da:a6:3f:3b:92:6f:04:59:e5:a8:7d:74:32:
         74:31:d2:a7:71:07:dc:72:33:4a:87:87:1a:ce:1a:65:dc:41:
         ec:29:e7:06:22:71:0e:ae:01:ee:cb:3e:95:2c:50:62:95:f6:
         eb:83:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:33:14 2026 by rpki-client