Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbdd238-b90c-341b-933f-17017a2c76c2.roa
File:                     5fbdd238-b90c-341b-933f-17017a2c76c2.roa (raw, json)
Hash identifier:          gJKgt51TGNrLXOzsaHs0UGgxUtZ3kIRYUdswi5Rr7wU=
Subject key identifier:   3B:94:40:52:84:B0:BC:4D:33:1C:86:E0:FA:9E:01:51:AF:09:74:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EF87CDB546B058BE92BBFC380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbdd238-b90c-341b-933f-17017a2c76c2.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.65.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:db:54:6b:05:8b:e9:2b:bf:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=d4cc7279-ab02-4a21-8a0d-b96613782ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:eb:38:12:36:df:f2:64:d3:06:78:3e:20:
                    67:3c:64:3b:55:72:6b:a6:1d:3f:13:2f:4b:75:a5:
                    e6:38:56:50:bf:f7:a8:d1:18:d6:8d:e2:83:52:8d:
                    fc:d0:c0:ed:fe:d4:37:d3:c5:61:41:20:c2:d7:5a:
                    b1:fa:9b:f4:ca:b7:ab:32:a1:7a:ab:eb:18:0e:bc:
                    91:6b:75:af:e2:f1:4c:7e:8c:88:73:06:c3:a5:b8:
                    f1:e8:bc:ea:a8:2c:d4:97:0a:80:da:e0:2c:ff:01:
                    22:5e:1e:0a:e5:7c:05:0c:87:d4:46:ba:23:91:06:
                    4b:e1:6d:09:f0:39:13:51:af:4a:7d:1b:3f:ef:b0:
                    04:ba:bf:00:d2:f7:d7:38:d3:6d:37:dd:36:25:26:
                    70:e5:c1:6f:d4:26:b2:56:a4:4d:d2:fe:88:ce:5a:
                    1a:09:02:24:7e:4d:c4:df:07:15:2c:57:dd:fd:b1:
                    42:03:cc:91:49:86:85:43:54:8d:d7:7c:e7:7e:8c:
                    cb:f1:7e:1b:56:b6:bf:0a:25:46:93:6e:87:37:a0:
                    eb:09:2c:ff:94:54:9c:b2:37:41:33:88:e3:3f:95:
                    42:ef:92:e7:8f:4c:e1:39:4f:49:ee:e5:64:3a:fc:
                    5b:bf:4b:6c:61:04:fb:26:2a:90:a0:77:82:6a:f4:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:94:40:52:84:B0:BC:4D:33:1C:86:E0:FA:9E:01:51:AF:09:74:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbdd238-b90c-341b-933f-17017a2c76c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.65.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:cf:d0:4f:8f:28:69:dc:a9:85:18:0c:d3:fe:f8:8b:df:
         1b:24:e3:47:6d:64:f2:e8:3f:18:d1:d5:99:07:76:d8:1a:18:
         4c:2e:09:08:e7:d4:36:81:07:bc:6f:8d:81:af:e1:5c:eb:16:
         c3:e7:22:e7:98:67:9e:8d:46:10:86:cc:b6:f9:2b:ef:75:b9:
         90:6f:9e:e9:ff:5a:a8:47:d6:c8:0c:2c:dc:4f:81:ca:56:d5:
         ce:22:ef:2d:55:05:4e:1c:dd:82:42:04:9d:61:1f:1f:10:6e:
         8d:83:cb:ca:a8:22:65:e6:bc:70:3a:aa:10:9d:c0:04:c3:75:
         97:95:e5:da:91:d2:14:61:df:6d:c2:c1:eb:9d:4a:a0:94:76:
         a7:86:0b:bf:df:34:db:b1:b4:0d:33:a3:10:e5:fa:ac:dc:d5:
         22:dd:c7:b8:3a:08:3c:0f:c4:69:c9:e1:a5:61:2d:da:ef:f0:
         d3:14:be:c7:14:73:1a:a4:10:f9:e7:ec:67:09:09:91:63:d9:
         9b:cc:db:ce:ce:07:86:50:1e:4d:a6:f1:52:53:df:62:e2:68:
         d3:c4:d5:18:b6:21:47:11:58:69:37:8b:b6:74:2c:ee:d4:67:
         62:ac:22:63:8a:d9:a3:17:0b:45:2d:b4:7f:9e:f6:ea:7e:c7:
         2e:03:c2:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fNtUawWL6Su/w4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZDRjYzcyNzktYWIwMi00YTIxLThhMGQtYjk2NjEzNzgyY2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz/rOBI23/Jk0wZ4PiBnPGQ7VXJrph0/Ey9L
daXmOFZQv/eo0RjWjeKDUo380MDt/tQ308VhQSDC11qx+pv0yrerMqF6q+sYDryR
a3Wv4vFMfoyIcwbDpbjx6LzqqCzUlwqA2uAs/wEiXh4K5XwFDIfURrojkQZL4W0J
8DkTUa9KfRs/77AEur8A0vfXONNtN902JSZw5cFv1CayVqRN0v6IzloaCQIkfk3E
3wcVLFfd/bFCA8yRSYaFQ1SN13znfozL8X4bVra/CiVGk26HN6DrCSz/lFScsjdB
M4jjP5VC75Lnj0zhOU9J7uVkOvxbv0tsYQT7JiqQoHeCavR4cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDuUQFKEsLxNMxyG4PqeAVGvCXR2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZiZGQyMzgtYjkwYy0z
NDFiLTkzM2YtMTcwMTdhMmM3NmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0HAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0Rz9BPjyhp3KmFGAzT/viL3xsk40dtZPLoPxjR1ZkHdtgaGEwuCQjn
1DaBB7xvjYGv4VzrFsPnIueYZ56NRhCGzLb5K+91uZBvnun/WqhH1sgMLNxPgcpW
1c4i7y1VBU4c3YJCBJ1hHx8Qbo2Dy8qoImXmvHA6qhCdwATDdZeV5dqR0hRh323C
weudSqCUdqeGC7/fNNuxtA0zoxDl+qzc1SLdx7g6CDwPxGnJ4aVhLdrv8NMUvscU
cxqkEPnn7GcJCZFj2ZvM287OB4ZQHk2m8VJT32LiaNPE1Ri2IUcRWGk3i7Z0LO7U
Z2KsImOK2aMXC0UttH+e9up+xy4DwgQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:48:27 2026 by rpki-client