Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa
File:                     f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa (raw, json)
Hash identifier:          OodaLE+ozk0r2Zhx0A80tI92Qeowjn/5JBvvH0XR/ro=
Subject key identifier:   F1:40:46:44:B0:AE:98:22:E8:F6:15:46:5F:1D:1A:09:DE:B2:82:7E
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E5A4A027435380BBA97579580
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     30238
IP address blocks:        23.90.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:02:74:35:38:0b:ba:97:57:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=e9e645fc-c347-4c08-a219-957c9a197bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:5c:a6:d7:ef:b0:6a:f2:09:31:3b:51:d5:
                    b1:14:e1:c4:40:49:c0:98:bc:e0:4b:da:6d:7a:de:
                    a3:9a:a5:f2:8a:b9:7e:39:8f:7c:7b:5a:f5:00:c0:
                    84:1d:ec:92:a9:c7:fe:6f:4f:9c:df:6d:6c:13:1b:
                    01:45:b0:1e:1d:8d:eb:28:2d:c6:74:ca:50:54:c9:
                    a0:18:3c:5a:d3:37:69:b5:3c:b0:9c:3f:02:82:7e:
                    ab:89:e6:3a:a0:18:7f:8d:8d:a5:93:31:d6:02:76:
                    04:f4:ec:2f:a3:8e:15:9d:11:a7:6f:80:39:e5:17:
                    2c:a4:65:18:fb:43:a0:a4:f1:5a:26:c8:14:a3:79:
                    97:4e:a8:20:68:4e:52:b2:50:7d:23:7b:76:d1:13:
                    82:b1:46:e0:f8:2c:a1:83:9d:55:b8:dc:fa:f0:9c:
                    13:02:ce:3e:45:05:e3:ae:a6:9f:8a:8c:08:d0:0c:
                    fa:1d:64:99:98:a5:27:fd:59:93:57:67:e2:7c:68:
                    2b:58:92:93:32:d9:30:31:1e:36:27:6e:fa:c0:90:
                    31:d0:d5:67:3a:14:58:63:95:65:8d:b6:84:b4:32:
                    b9:06:8c:af:ef:9b:d8:17:e9:ee:47:b2:d3:29:ef:
                    ba:90:cc:18:18:d3:6d:02:92:60:35:3e:39:af:a1:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:40:46:44:B0:AE:98:22:E8:F6:15:46:5F:1D:1A:09:DE:B2:82:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:54:8e:01:b2:92:b9:72:ae:23:53:a6:45:9b:6f:52:22:c7:
         78:ef:c2:e1:33:87:f8:42:aa:56:da:9d:80:5b:0b:34:8b:4d:
         d9:d8:99:41:ff:88:d7:34:1e:a6:dd:98:5d:75:7c:d9:27:19:
         f8:85:1b:c7:f6:03:e3:fa:7e:41:74:09:ff:6f:d3:39:4d:90:
         78:2e:4b:0a:22:55:4d:a9:51:13:27:ba:0e:78:e1:dd:32:7c:
         ea:1f:9b:72:2d:7f:1b:e2:86:f0:59:89:96:60:69:f0:31:f7:
         0c:e1:2a:42:42:6e:bd:5e:bf:ed:7e:c6:c3:3f:53:87:ca:11:
         48:65:37:5c:59:0c:76:65:28:20:12:8a:6b:d3:c6:e7:77:9d:
         d9:82:3d:1d:bc:2d:00:0a:d4:91:6c:86:24:bf:15:c9:ad:ff:
         22:ff:f8:26:67:16:f6:7d:22:ef:5d:4f:c9:39:93:02:8f:d8:
         64:39:5c:b6:12:1c:5a:bb:35:aa:3c:25:12:89:8c:2d:e5:7e:
         2c:35:20:13:a1:3a:69:84:07:a5:96:9f:6f:da:a8:0c:3a:8c:
         43:98:f7:47:06:fe:89:5b:1f:d1:79:20:58:4b:fe:75:c8:50:
         8c:5a:ca:e2:7c:66:33:63:fe:23:2c:41:d5:fc:b2:f6:aa:1b:
         91:d4:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:59:30 2026 by rpki-client