Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa
File:                     68b55580-32ed-3f8d-a758-b42d0f07b627.roa (raw, json)
Hash identifier:          MIRugTIYvpzUoqWqNUCbZCUGGQcPhLjjFiULLmO9VuA=
Subject key identifier:   14:A3:F7:3A:C3:C2:18:1E:A0:23:C2:D4:4B:5B:67:C9:0D:29:1B:88
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584DD625B691C71AA9ADF7C01A80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     16417
IP address blocks:        23.90.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:b6:91:c7:1a:a9:ad:f7:c0:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=beb44d2d-5859-4848-9acd-c673e799524f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:3b:87:68:8e:a5:69:1c:7b:52:c7:9d:92:
                    43:10:56:c4:f2:1e:a0:da:3c:26:6f:71:0d:1d:be:
                    9d:51:1b:8a:23:e7:16:a6:11:be:82:a3:da:d1:ed:
                    80:ab:66:1d:16:e6:31:87:96:99:1a:ae:c0:c8:26:
                    15:db:be:d7:58:71:e9:85:de:0f:94:9a:1a:bf:ca:
                    f7:26:28:bf:82:d0:7e:6c:f3:b1:89:cf:d5:ee:33:
                    dc:f0:c9:c3:29:75:d5:1d:60:2a:51:20:c4:9c:3a:
                    c5:11:30:b7:ec:b3:7b:08:d4:29:25:78:7c:bf:73:
                    ce:04:e9:d0:27:64:69:c2:2d:db:fc:97:a9:8b:67:
                    ab:7a:d3:95:8f:7c:42:00:d2:7c:50:22:9c:32:c0:
                    f1:45:74:5d:46:8b:3d:3b:eb:69:6d:4e:5d:5c:d0:
                    0b:32:3c:fc:12:ec:e2:ab:a3:25:6d:85:58:a0:03:
                    ed:23:e6:b0:be:d3:e3:4d:83:f6:a4:53:b0:9d:6c:
                    f7:79:53:c5:81:f6:00:12:b4:92:cf:53:84:c1:4c:
                    bf:74:5a:96:f6:a0:20:98:bb:22:95:7e:67:92:67:
                    43:92:bb:cc:3d:c6:58:69:9a:e9:65:b2:18:d1:d5:
                    f7:14:ce:8e:fc:f4:83:36:68:9c:c3:0d:2c:b5:a3:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A3:F7:3A:C3:C2:18:1E:A0:23:C2:D4:4B:5B:67:C9:0D:29:1B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:4b:39:e6:f8:96:79:46:73:1b:ac:1d:f6:df:28:58:1a:85:
         6d:b2:b3:eb:c1:a3:f1:63:39:84:6e:c0:9c:49:a4:37:c4:96:
         28:06:14:cd:44:a5:6f:f3:ca:74:2d:c2:a9:ee:35:9c:3d:5e:
         00:5d:0f:09:8f:50:37:27:b9:91:34:31:e7:bf:16:65:2c:17:
         08:1f:72:d9:bb:4c:15:ab:de:22:14:2d:73:eb:e9:83:9b:10:
         67:dc:7c:f6:1d:5d:7d:6c:ca:ed:75:36:a2:57:71:67:85:29:
         07:6a:d8:05:a1:58:70:03:cb:e3:24:6f:8b:ce:35:78:b6:c4:
         97:92:e1:5e:a6:02:57:b6:71:17:bd:24:a3:e4:aa:f4:dc:ea:
         cf:00:44:1a:24:0b:6f:d7:1e:cb:1d:61:26:50:ec:e9:fa:bf:
         38:42:15:9b:58:0d:4d:e4:30:21:f8:43:d7:77:92:8e:43:32:
         4e:3f:69:a7:26:36:bb:20:af:cf:37:14:6a:57:13:38:15:13:
         0a:ba:7d:aa:d0:51:2b:c8:28:fb:04:d2:56:0a:03:b3:20:c1:
         b6:d4:d5:bb:c4:d3:be:ac:35:a5:e7:c3:9b:eb:38:0b:55:7d:
         27:4f:75:b3:59:e2:e7:8f:8a:55:8f:e7:2a:03:32:62:63:e7:
         fd:ce:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:15:02 2026 by rpki-client