Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b92735-3732-3951-9fe3-db367b3bb7ac.roa
File:                     90b92735-3732-3951-9fe3-db367b3bb7ac.roa (raw, json)
Hash identifier:          kS3GV4lDvdIplk71xQV73v+VGlHLvp8ayidhM2oBvQQ=
Subject key identifier:   21:80:DD:BD:A3:A9:3B:54:7D:7E:17:7B:08:BA:55:26:86:45:00:09
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F89A86BF3863B97A5B4F77600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b92735-3732-3951-9fe3-db367b3bb7ac.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     35994
IP address blocks:        23.214.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:6b:f3:86:3b:97:a5:b4:f7:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=da9fb75e-cf8e-4ad6-8060-5d19200ba841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:d2:63:f7:33:52:b3:03:a6:42:f5:6a:98:
                    45:4c:4d:d9:e7:4b:c7:8a:85:c5:c8:0c:7f:07:63:
                    3a:6e:8c:03:f0:4f:c2:88:00:40:1b:0b:95:6d:a0:
                    34:ed:38:aa:19:55:2a:09:cb:0b:b3:05:55:a5:10:
                    7a:c4:46:e9:36:d2:fe:55:82:b9:c4:48:ed:ef:65:
                    ea:ca:51:9f:38:73:b4:6f:69:f8:e4:b4:75:12:12:
                    a4:e7:39:6f:1d:51:55:4d:91:a0:c4:51:c0:d9:fb:
                    18:2f:6f:4b:e1:b9:88:63:50:5e:9b:74:ed:82:42:
                    f5:a4:0b:1a:be:3c:91:45:a1:87:56:a6:13:b6:cb:
                    cf:c9:3c:15:44:ca:fe:50:d2:15:5a:b3:6c:a7:65:
                    67:cc:5c:8c:76:6e:5e:c7:c4:ac:45:51:9e:ea:d0:
                    f1:32:16:c8:c9:77:18:9c:7e:73:1f:a1:59:48:5e:
                    c3:5e:ed:09:06:ef:a6:38:6d:b7:ce:c1:47:59:98:
                    64:29:a4:2f:d6:e7:c6:ee:ae:6c:74:29:d8:c3:0c:
                    67:4f:8c:57:35:56:d2:05:9c:33:e7:1d:60:f4:a7:
                    c5:d0:42:da:0d:8e:6f:65:11:14:91:ab:6b:01:71:
                    e7:59:f1:f5:43:a4:f7:bb:c9:28:08:52:e6:45:56:
                    26:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:DD:BD:A3:A9:3B:54:7D:7E:17:7B:08:BA:55:26:86:45:00:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b92735-3732-3951-9fe3-db367b3bb7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:2c:f8:63:0d:29:2f:9d:ca:a6:56:c8:41:99:f9:08:7f:
         d7:3c:9a:ae:bf:90:0b:8b:ff:75:0d:ba:6f:4d:e7:89:c3:b3:
         af:5a:ce:e8:7a:28:e8:7e:dc:cd:82:e7:e2:67:2c:91:cd:d5:
         36:9a:a4:23:e0:57:8c:e2:31:43:13:cd:f3:a8:da:a0:13:a6:
         32:bd:d7:00:58:e4:7c:1f:81:11:28:91:b6:ab:12:30:08:f5:
         ae:7d:f9:e8:2e:19:97:82:33:b9:0c:27:c9:e7:74:90:53:85:
         a2:6c:b1:b0:30:49:cd:69:c3:3b:57:8d:ee:48:cb:5d:a0:fb:
         f3:b1:1e:93:4e:80:0d:b4:7c:0c:e8:4d:f5:66:87:2e:05:33:
         01:ee:ab:15:77:60:7a:3e:af:0a:22:de:fc:66:be:96:90:a3:
         f7:35:63:48:c3:08:c9:dc:22:5c:2e:93:d0:07:1f:6d:0f:09:
         ca:7f:b2:7e:53:3b:02:40:ee:9a:72:d6:9e:e9:e3:4d:26:f6:
         b2:70:29:02:53:ae:05:b9:25:74:0f:1d:95:73:92:5e:e0:9b:
         d5:e5:de:b3:11:84:4e:d9:8c:98:b0:68:84:0b:1e:ef:c1:9e:
         c4:88:8d:1f:da:65:e7:f1:f9:69:91:92:34:82:58:1a:f1:64:
         44:aa:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:04:34 2026 by rpki-client