Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa
File:                     3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa (raw, json)
Hash identifier:          pBKmYU/w6nqWQTPIIDosy6ZOeAHvYVHGLvwU/JdZ6ls=
Subject key identifier:   C6:62:6C:95:71:EF:F6:40:55:EC:0B:7F:C1:8E:DD:E4:1A:6D:E1:D1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA790E11E734DD5180F678000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.193.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:e1:1e:73:4d:d5:18:0f:67:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=31e2bb7b-301f-4f88-9e77-9d7fd5536bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:b5:8b:5e:40:10:c5:e8:a6:9a:1a:8c:5b:
                    ab:a5:40:7f:82:d4:a2:34:52:f0:5d:b6:0b:ff:12:
                    87:b0:64:81:2c:d1:e3:d3:8d:e3:07:22:bf:9e:eb:
                    fa:a1:2e:a8:ee:0f:e4:80:dc:18:89:80:77:5b:a0:
                    ad:d6:a7:25:71:f8:9a:aa:6e:5a:13:51:04:f6:3c:
                    35:81:37:86:3f:79:52:5b:2b:6a:5b:a0:e3:04:a4:
                    aa:77:3d:e7:eb:ec:b3:2a:77:a7:68:87:41:6b:f0:
                    78:52:9a:03:fa:e6:8b:54:de:64:01:21:c2:67:8e:
                    93:4a:4b:ef:db:b2:f3:c2:af:22:d5:17:95:d4:63:
                    52:b9:34:ab:55:88:48:d0:25:62:c0:7a:40:22:96:
                    f8:fc:f3:8a:39:f1:dc:48:74:80:fe:d5:9e:96:e0:
                    ec:82:95:2d:2d:8e:c6:b6:85:a2:db:b1:18:cc:5f:
                    29:a6:5b:c8:a4:d0:1c:8a:c8:22:7d:e9:cc:b5:20:
                    00:e4:7b:4c:b7:d4:3c:ed:53:a7:2d:ce:e2:f0:95:
                    0a:9b:f7:1c:4a:1c:3c:84:38:71:d8:31:e4:df:b5:
                    66:f5:2a:38:c3:78:b3:db:0f:ba:35:88:c4:db:52:
                    9b:a1:7a:b0:97:6b:08:0b:91:98:aa:05:ff:f9:ba:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:62:6C:95:71:EF:F6:40:55:EC:0B:7F:C1:8E:DD:E4:1A:6D:E1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:2c:7b:f2:39:61:8b:1c:5b:05:53:37:cc:cf:ec:8b:a4:
         c5:b9:21:aa:67:2a:c0:3b:69:c5:f0:60:b2:78:b5:97:3e:ab:
         e9:b7:f2:2b:47:65:fa:66:77:a7:c1:76:9f:db:d4:72:c0:23:
         ef:9c:fc:1d:c3:22:c6:13:e3:26:52:23:8d:55:6a:9a:1d:7e:
         60:7e:33:46:92:55:c3:7a:e9:3c:f0:4d:e4:dc:04:d8:5b:b5:
         a4:70:53:42:22:68:f2:2e:cc:e7:57:ad:27:5a:b8:7b:76:ca:
         fa:65:79:92:68:15:b2:75:24:e6:51:4b:b4:c8:5a:56:55:87:
         01:77:73:77:ee:b1:10:ca:fb:fa:09:7e:dc:97:11:5e:17:d5:
         d8:ab:4d:1e:93:be:c8:d2:9a:8c:fa:59:c3:1b:7d:73:f1:bc:
         e3:6c:2d:6a:6f:6b:8b:29:98:05:6d:fb:ed:64:94:fc:98:4f:
         8c:67:f3:2b:eb:35:29:f0:ca:0e:c1:75:8d:d1:a9:51:56:bd:
         d2:e8:e0:e2:e8:f0:e0:67:cf:57:f0:32:85:36:53:3d:8e:b5:
         74:ea:b1:ba:9a:11:ee:5e:c7:0a:78:3a:d5:ca:18:1a:6b:c2:
         79:f4:23:6c:9e:2d:d1:42:5d:ba:cf:70:f4:94:b9:03:3a:da:
         41:78:9a:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkOEec03VGA9ngAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzFlMmJiN2ItMzAxZi00Zjg4LTllNzctOWQ3ZmQ1NTM2YmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsC1i15AEMXoppoajFurpUB/gtSiNFLwXbYL
/xKHsGSBLNHj043jByK/nuv6oS6o7g/kgNwYiYB3W6Ct1qclcfiaqm5aE1EE9jw1
gTeGP3lSWytqW6DjBKSqdz3n6+yzKnenaIdBa/B4UpoD+uaLVN5kASHCZ46TSkvv
27Lzwq8i1ReV1GNSuTSrVYhI0CViwHpAIpb4/POKOfHcSHSA/tWeluDsgpUtLY7G
toWi27EYzF8pplvIpNAcisgifenMtSAA5HtMt9Q87VOnLc7i8JUKm/ccShw8hDhx
2DHk37Vm9So4w3iz2w+6NYjE21KboXqwl2sIC5GYqgX/+brpqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZibJVx7/ZAVewLf8GO3eQabeHRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY5MmI4YjItOTJmZS0z
OWE3LThjMDItOTYzYTlkNWFlNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8FyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEB+LHvyOWGLHFsFUzfMz+yLpMW5IapnKsA7acXwYLJ4tZc+q+m38itH
Zfpmd6fBdp/b1HLAI++c/B3DIsYT4yZSI41VapodfmB+M0aSVcN66TzwTeTcBNhb
taRwU0IiaPIuzOdXrSdauHt2yvpleZJoFbJ1JOZRS7TIWlZVhwF3c3fusRDK+/oJ
ftyXEV4X1dirTR6TvsjSmoz6WcMbfXPxvONsLWpva4spmAVt++1klPyYT4xn8yvr
NSnwyg7BdY3RqVFWvdLo4OLo8OBnz1fwMoU2Uz2OtXTqsbqaEe5exwp4OtXKGBpr
wnn0I2yeLdFCXbrPcPSUuQM62kF4miU=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:33 2026 by rpki-client