Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa
File:                     409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa (raw, json)
Hash identifier:          JTEYr0GIr+WrdhPNedC03j+m6ndQrh7ojdWUDrlHres=
Subject key identifier:   82:1F:B0:91:B4:9A:67:EE:DF:75:44:63:7C:F1:11:8B:56:F0:37:FA
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E6F3A3599E79942CA00D66160
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     30238
IP address blocks:        23.90.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:35:99:e7:99:42:ca:00:d6:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=e5bf68a9-47bb-47fe-a6c2-41cdc328deaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:8c:4f:b5:43:8f:e0:7e:c8:58:10:7f:f0:
                    d8:63:3d:7c:cc:7f:24:49:c1:af:09:a3:eb:aa:e0:
                    9e:21:63:1b:43:04:a3:1e:1e:09:07:63:c9:98:45:
                    7c:c6:76:4c:66:87:e4:62:80:84:18:3f:20:96:12:
                    51:f2:b2:98:0c:15:7b:a3:d1:f0:e8:14:2a:56:11:
                    dd:98:7a:25:89:8e:12:dd:06:12:36:f0:be:ce:7f:
                    66:6b:21:dd:ff:24:1c:98:80:dd:fb:db:f5:84:0c:
                    24:c8:7b:b4:10:b6:af:a6:6b:c2:44:31:62:cf:d4:
                    18:e6:71:55:ad:a7:bc:57:2e:82:73:29:90:82:ec:
                    2f:85:ec:bd:19:cc:e1:b7:15:d1:33:ba:6e:54:bf:
                    12:56:4d:3f:0e:c3:05:20:0f:6d:a2:0d:6e:65:ed:
                    ff:7c:29:de:de:7c:dd:fa:71:52:58:94:1e:67:d8:
                    6d:02:55:c3:06:cc:57:52:ab:de:fb:6f:f3:9b:a7:
                    2f:60:0e:96:91:df:35:0d:14:88:3d:64:68:c9:62:
                    f3:c2:2e:3f:4c:52:20:b2:7b:7d:c2:43:ef:e6:9b:
                    af:fa:fb:bf:c6:48:fd:c9:e1:a2:07:c1:4c:9c:d2:
                    53:71:06:4d:91:57:4d:38:88:14:a9:57:1d:01:18:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1F:B0:91:B4:9A:67:EE:DF:75:44:63:7C:F1:11:8B:56:F0:37:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:41:4d:68:c0:d5:9e:81:61:ec:34:fe:b1:c9:08:86:fa:ea:
         ce:b1:ff:78:0c:8b:18:04:5d:17:9e:a9:5c:9b:88:3a:1c:3f:
         31:a9:15:d6:14:9c:6d:6f:58:df:26:e7:0b:e3:4f:9b:3f:df:
         7a:c7:91:a3:e7:98:2a:a1:ef:49:93:80:76:10:4e:33:c4:51:
         22:a8:23:6e:a3:cf:13:8f:c4:84:af:69:fb:9e:76:12:78:8d:
         9d:26:c8:6f:31:8b:6d:e3:b8:7d:04:bb:de:99:90:60:6c:09:
         0e:e3:1a:7e:24:0a:9a:c6:dd:ee:95:4a:e4:1b:83:a8:35:6f:
         ef:17:48:5d:18:1c:a8:4a:74:ce:4a:31:27:d1:3c:17:dd:ce:
         e2:59:d5:63:20:0f:d8:ae:4a:c2:83:b4:fa:e7:6b:28:c5:9d:
         a4:2a:05:b6:1c:fc:85:f1:8a:1e:bd:e1:31:8f:71:d3:5d:c1:
         b9:e3:d0:07:21:f7:2e:41:09:1c:f4:ac:2c:0e:b9:20:dd:6b:
         30:c9:79:90:13:13:18:e8:e4:e1:63:50:08:cb:2c:f3:c2:a2:
         5b:3c:61:9b:33:61:2f:cc:c3:28:62:68:7b:45:f9:95:96:3b:
         33:0e:a6:cb:36:c5:b5:84:60:ab:01:a7:41:8a:e2:29:67:0c:
         a2:59:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:59:15 2026 by rpki-client