Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10dee905-c136-3ede-b0da-afc6d21e768d.roa
File:                     10dee905-c136-3ede-b0da-afc6d21e768d.roa (raw, json)
Hash identifier:          4uzJVgwzqYFex8qE3SFcfOzV0N4A6rm/CrTT0YZN5+U=
Subject key identifier:   A1:4E:91:85:32:32:B1:D0:A8:4F:0F:E0:ED:88:55:53:74:E1:7F:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EAD1C63993A7ED7A15492FB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10dee905-c136-3ede-b0da-afc6d21e768d.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     20940
IP address blocks:        23.219.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:63:99:3a:7e:d7:a1:54:92:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=d3df01c6-f048-4bef-b9b1-533c3982df5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:dc:d2:f9:e2:0a:76:0b:9d:86:5e:ef:99:
                    e8:b6:fb:2b:14:77:4f:a5:83:bc:ae:4c:1d:77:41:
                    06:29:17:e6:09:3c:e3:28:03:82:eb:3c:99:1b:38:
                    76:3a:09:26:ef:51:59:bd:10:a4:96:9d:60:3b:65:
                    75:59:30:c0:4e:83:04:23:ab:fb:c8:d3:c8:b1:94:
                    df:02:21:91:7a:4c:4b:43:51:93:ba:92:17:fe:98:
                    92:9c:c3:76:10:f7:5c:19:ef:32:33:75:91:2b:ef:
                    6b:97:38:44:35:9d:04:f9:da:8f:ea:40:68:31:d8:
                    3d:8d:f6:22:00:1f:ff:14:0d:12:5b:0f:93:d4:ff:
                    46:34:04:5e:a7:63:d2:09:36:37:37:f7:7e:01:06:
                    95:76:cb:71:2e:8f:22:1b:f9:41:ed:d7:89:79:5a:
                    1d:b9:73:0b:f2:f5:c8:4d:1d:82:c9:df:26:ed:87:
                    f0:a6:27:ed:dd:1e:fa:f9:7c:78:12:d5:53:3f:5e:
                    8e:a6:04:1e:dc:43:1d:86:f9:46:f9:be:78:81:25:
                    c9:27:a9:be:bd:1f:a9:11:d3:05:e8:43:59:6f:61:
                    b6:2e:e8:44:15:f8:cf:1a:2d:8a:a6:d6:ca:c6:f8:
                    ad:bb:95:75:c5:65:17:34:54:f3:64:ef:3e:8a:16:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:91:85:32:32:B1:D0:A8:4F:0F:E0:ED:88:55:53:74:E1:7F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10dee905-c136-3ede-b0da-afc6d21e768d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:86:60:30:d6:6d:d1:91:90:32:d1:e5:a9:f8:bf:8e:90:34:
         d7:68:6a:bb:0f:ee:96:99:1f:d0:83:a5:6d:92:d3:30:75:4c:
         71:fc:06:0d:e9:43:a0:03:c0:74:9e:04:42:b8:68:51:9c:9a:
         7c:3b:4f:d3:15:89:a0:ac:e7:8b:d8:0d:f8:e2:f8:f0:87:36:
         2f:9f:b8:f6:61:41:79:09:ba:41:c4:55:a0:91:12:18:65:9d:
         a7:41:9c:7f:fc:ea:68:6e:6e:d4:a3:8b:0c:fd:5f:0b:99:43:
         25:65:79:64:62:49:6d:f5:6c:e9:49:cb:66:81:97:43:8f:85:
         dd:f4:5f:83:f6:6d:8f:55:91:44:9d:c2:1e:06:2c:41:72:05:
         f9:99:b8:9c:27:0a:a3:8d:73:da:3e:b2:bd:c6:80:99:76:0b:
         63:65:07:06:d9:7e:8c:e8:c4:a9:2c:0f:88:d4:5d:58:c7:be:
         12:cc:77:8d:9e:ab:d3:cd:50:81:a3:c7:b8:b9:ac:0f:6d:64:
         f3:4c:b0:44:4e:35:c3:fc:c7:ab:93:a9:f5:66:56:e3:b0:fd:
         27:05:c9:5c:bd:30:f3:91:8f:cd:5a:86:e5:a3:01:22:ab:09:
         64:c4:fb:a4:31:8b:25:92:4e:18:4a:92:e7:25:d9:f2:a9:94:
         46:c9:12:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHGOZOn7XoVSS+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
ZDNkZjAxYzYtZjA0OC00YmVmLWI5YjEtNTMzYzM5ODJkZjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R/c0vniCnYLnYZe75notvsrFHdPpYO8rkwd
d0EGKRfmCTzjKAOC6zyZGzh2Ogkm71FZvRCklp1gO2V1WTDAToMEI6v7yNPIsZTf
AiGRekxLQ1GTupIX/piSnMN2EPdcGe8yM3WRK+9rlzhENZ0E+dqP6kBoMdg9jfYi
AB//FA0SWw+T1P9GNARep2PSCTY3N/d+AQaVdstxLo8iG/lB7deJeVoduXML8vXI
TR2Cyd8m7Yfwpift3R76+Xx4EtVTP16OpgQe3EMdhvlG+b54gSXJJ6m+vR+pEdMF
6ENZb2G2LuhEFfjPGi2KptbKxvitu5V1xWUXNFTzZO8+ihaE1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFOkYUyMrHQqE8P4O2IVVN04X9TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTBkZWU5MDUtYzEzNi0z
ZWRlLWIwZGEtYWZjNmQyMWU3NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9u2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaGYDDWbdGRkDLR5an4v46QNNdoarsP7paZH9CDpW2S0zB1THH8Bg3p
Q6ADwHSeBEK4aFGcmnw7T9MViaCs54vYDfji+PCHNi+fuPZhQXkJukHEVaCREhhl
nadBnH/86mhubtSjiwz9XwuZQyVleWRiSW31bOlJy2aBl0OPhd30X4P2bY9VkUSd
wh4GLEFyBfmZuJwnCqONc9o+sr3GgJl2C2NlBwbZfozoxKksD4jUXVjHvhLMd42e
q9PNUIGjx7i5rA9tZPNMsERONcP8x6uTqfVmVuOw/ScFyVy9MPORj81ahuWjASKr
CWTE+6QxiyWSThhKkucl2fKplEbJEkQ=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:33:54 2026 by rpki-client