Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18986991-32b1-3968-b554-31bf3c3477e0.roa
File:                     18986991-32b1-3968-b554-31bf3c3477e0.roa (raw, json)
Hash identifier:          +61MjL8q0ga5AMd8BkSQ7kZp7aPNofP20oP6iKlFP7s=
Subject key identifier:   56:B2:44:A5:AD:F3:C0:95:7C:E5:49:5C:3A:14:D2:83:B9:EE:0B:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7996C86C9300FCA5575BA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18986991-32b1-3968-b554-31bf3c3477e0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.209.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:6c:86:c9:30:0f:ca:55:75:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1ea6aa93-4936-4cc3-85c0-1e124ef019d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:0c:ce:01:40:e5:5f:02:a7:96:1e:fa:56:
                    7f:dc:37:d8:a2:f7:ca:a0:43:a2:f7:9a:d3:d7:13:
                    0b:35:0b:7d:07:a1:55:73:b3:cb:88:02:f7:e2:91:
                    0b:39:22:34:9f:83:e4:35:f4:c7:71:f4:7e:40:99:
                    85:f4:3f:73:a8:d7:d8:cb:b2:d4:24:99:c1:e8:dc:
                    bd:40:7e:f8:97:fe:46:d4:c1:c4:88:62:7a:c6:23:
                    f6:8c:55:55:dd:6f:b8:61:c5:08:72:91:45:12:9e:
                    58:4b:50:10:b8:a4:0e:80:1e:99:80:33:48:20:f7:
                    1e:2d:7f:23:05:07:71:d2:9d:4d:96:3b:ea:f3:a4:
                    f5:5e:54:e2:9e:cd:13:0c:43:b2:17:1f:de:97:66:
                    b8:69:98:ae:14:d6:be:18:24:76:ac:ea:71:06:09:
                    49:46:64:80:27:d1:5e:27:aa:c1:80:e0:d5:19:43:
                    ab:73:02:83:7e:2e:e8:96:3f:66:33:87:43:84:a5:
                    18:45:a6:27:f9:06:b8:fb:43:68:39:b3:f4:fa:c0:
                    70:cd:a1:5a:9a:c9:95:d1:ee:57:17:c5:6b:7a:21:
                    7b:40:76:12:89:32:a4:76:eb:9d:56:0f:f3:c5:fb:
                    2e:7a:76:ec:9f:d9:2b:0c:ca:3e:02:df:60:95:5f:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:44:A5:AD:F3:C0:95:7C:E5:49:5C:3A:14:D2:83:B9:EE:0B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18986991-32b1-3968-b554-31bf3c3477e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:81:70:a5:1f:ae:ad:78:9c:0d:4c:ef:34:8d:8a:62:65:8e:
         17:45:90:2c:dd:1b:e7:07:a5:ea:d7:e5:2c:f5:2a:ca:82:58:
         58:54:08:67:26:ac:18:2c:d6:6f:79:2a:9a:72:38:67:12:29:
         6f:1a:17:01:3e:b4:a1:b7:e9:a3:97:a9:d9:ea:49:cf:ff:4e:
         eb:35:d3:85:75:6a:70:a3:ed:fd:5f:61:98:89:5a:13:33:d3:
         5a:a8:00:73:53:76:7f:1e:10:24:b4:15:ca:2c:3a:62:71:3a:
         49:63:92:d8:8c:8e:e3:10:da:9c:4d:4a:0c:8e:51:af:9f:bc:
         59:e2:ca:23:a2:e0:15:24:30:b3:ae:bb:ad:e8:88:d1:43:ae:
         89:8a:32:16:bc:e8:fd:1b:f1:5e:ca:b6:12:2f:25:6c:fd:b3:
         2a:80:85:f4:05:fd:d2:7d:09:e5:54:47:52:19:cd:ea:18:99:
         e8:84:ca:5b:d1:24:97:37:3c:ba:13:64:71:a6:2d:f5:5f:13:
         e3:76:96:37:68:12:4c:6d:8e:26:ed:5d:13:0b:1d:ff:9d:1f:
         d0:11:5d:4b:75:22:7d:eb:2e:ef:f0:50:80:e7:f9:80:09:4a:
         ed:4d:4d:12:81:b3:6d:a8:d8:a2:1d:3f:84:49:bc:43:3e:de:
         b4:9c:52:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmWyGyTAPylV1uoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWVhNmFhOTMtNDkzNi00Y2MzLTg1YzAtMWUxMjRlZjAxOWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgkMzgFA5V8Cp5Ye+lZ/3DfYovfKoEOi95rT
1xMLNQt9B6FVc7PLiAL34pELOSI0n4PkNfTHcfR+QJmF9D9zqNfYy7LUJJnB6Ny9
QH74l/5G1MHEiGJ6xiP2jFVV3W+4YcUIcpFFEp5YS1AQuKQOgB6ZgDNIIPceLX8j
BQdx0p1Nljvq86T1XlTins0TDEOyFx/el2a4aZiuFNa+GCR2rOpxBglJRmSAJ9Fe
J6rBgODVGUOrcwKDfi7olj9mM4dDhKUYRaYn+Qa4+0NoObP0+sBwzaFamsmV0e5X
F8VreiF7QHYSiTKkduudVg/zxfsuenbsn9krDMo+At9glV+swwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFayRKWt88CVfOVJXDoU0oO57gvOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTg5ODY5OTEtMzJiMS0z
OTY4LWI1NTQtMzFiZjNjMzQ3N2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9EkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACmBcKUfrq14nA1M7zSNimJljhdFkCzdG+cHperX5Sz1KsqCWFhUCGcm
rBgs1m95KppyOGcSKW8aFwE+tKG36aOXqdnqSc//Tus104V1anCj7f1fYZiJWhMz
01qoAHNTdn8eECS0FcosOmJxOkljktiMjuMQ2pxNSgyOUa+fvFniyiOi4BUkMLOu
u63oiNFDromKMha86P0b8V7KthIvJWz9syqAhfQF/dJ9CeVUR1IZzeoYmeiEylvR
JJc3PLoTZHGmLfVfE+N2ljdoEkxtjibtXRMLHf+dH9ARXUt1In3rLu/wUIDn+YAJ
Su1NTRKBs22o2KIdP4RJvEM+3rScUrU=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:54 2026 by rpki-client