Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
File:                     5107cb12-7dcd-3137-83ab-78d947b463bc.roa (raw, json)
Hash identifier:          teNHXQy3Lj0RnfQmUVct0V4kD/FmrIYHSwW4x7eaoa0=
Subject key identifier:   9B:DE:59:68:76:9A:2B:DF:40:2D:D7:5B:25:7F:3D:17:47:66:3A:F2
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584EC7A1D67D789E52F361DA1E00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16417
IP address blocks:        23.90.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d6:7d:78:9e:52:f3:61:da:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=f9dac170-6854-4287-be21-38471ccfde14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:51:bc:0c:2f:c3:2a:ac:d3:50:e4:a9:75:
                    fd:cd:66:0d:ea:32:2f:b1:14:6b:e0:bf:7a:8c:23:
                    70:61:c6:cf:81:57:9b:3b:d8:a0:7a:74:c4:88:b9:
                    18:bc:26:d5:8c:28:9d:eb:af:6e:b3:59:c8:1c:f6:
                    d2:2f:a9:a3:bb:20:48:e4:fd:e9:e9:dd:12:e7:5f:
                    9a:b0:56:10:a9:50:46:35:96:03:53:10:cf:51:b1:
                    2d:1a:37:a5:21:fa:08:20:c4:df:b0:78:9d:b3:e8:
                    46:32:a0:87:cd:0d:13:c2:44:c5:bd:68:aa:cb:d8:
                    84:1e:0e:4f:5c:c7:6d:74:1a:85:bb:2e:32:3c:7a:
                    6a:52:61:b6:49:e6:15:ae:9d:7d:42:7d:c8:8c:8b:
                    e3:58:d4:32:fb:4c:14:70:e2:1f:aa:8e:80:d9:3f:
                    b8:d9:42:dd:c0:fa:f4:8d:3d:7d:c1:66:71:98:86:
                    d6:14:d5:f6:4c:9a:29:70:a1:47:5c:30:3c:af:f2:
                    d8:c9:55:08:bb:7c:37:3f:32:c3:cb:d5:ae:c0:08:
                    a4:0a:b2:24:56:07:5d:96:53:f4:2d:12:6c:cb:3a:
                    89:36:7c:14:a5:13:be:47:1d:e9:52:4b:96:ef:11:
                    6b:20:fd:ee:21:44:32:ab:87:75:81:47:d5:53:6f:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DE:59:68:76:9A:2B:DF:40:2D:D7:5B:25:7F:3D:17:47:66:3A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:de:2b:b4:85:11:c2:63:04:66:85:06:10:ff:6a:a1:f4:41:
         d4:0a:04:5b:ac:f0:b6:98:49:66:ee:b4:19:52:25:25:f1:60:
         65:fc:c9:88:ce:69:85:af:bf:9a:d7:fa:75:55:fa:60:b1:f6:
         84:43:16:1c:e3:e9:c4:c7:c3:75:6e:0c:cf:d5:db:d3:5d:11:
         dd:55:0e:5d:13:d0:7a:f5:17:47:d8:23:23:e6:0b:8d:52:7f:
         37:93:32:68:a3:bc:6b:28:1f:7d:91:14:4b:3e:45:e6:57:ef:
         51:03:b2:29:35:be:f0:71:8d:b4:97:75:71:f7:61:01:ba:94:
         2b:97:0b:74:5f:17:f5:82:d9:e6:c3:d1:e0:1f:31:70:16:33:
         81:a9:59:aa:6b:27:cb:e9:1c:b4:bf:dd:ea:8a:27:47:b6:e2:
         51:03:32:8f:b9:0b:66:16:ec:7f:dd:0b:e0:f5:67:1c:01:d3:
         b2:5a:89:4d:dd:36:24:b7:a7:68:aa:43:ad:43:ea:0c:29:97:
         35:0b:56:ee:79:3e:60:79:4b:9e:70:88:63:ae:01:3f:12:d4:
         99:78:9e:f0:ca:b4:6b:9c:ab:fb:df:50:93:76:ac:d1:49:2f:
         23:5b:ac:45:e6:91:86:1e:cc:96:63:25:7d:fb:d9:04:40:99:
         00:e1:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:26:24 2026 by rpki-client