Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa3e78f-ff56-3f7d-9898-9ea7f71b555b.roa
File:                     7aa3e78f-ff56-3f7d-9898-9ea7f71b555b.roa (raw, json)
Hash identifier:          KGLYqEArvEZqmXxgNWZ9p2XEIK6sLWbX/xI876IgsXA=
Subject key identifier:   63:65:FA:F9:4A:E4:4F:B7:CF:5F:B9:F1:44:DF:6E:A8:9A:CC:82:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA79307AD80E8BC364731B100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa3e78f-ff56-3f7d-9898-9ea7f71b555b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.202.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:07:ad:80:e8:bc:36:47:31:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9a8845dc-4d73-4f09-b5cf-949c22b2586a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:b6:a0:99:83:ab:3a:cd:6e:0a:1e:db:87:
                    aa:ab:14:c3:de:13:9c:5b:fe:6b:37:9b:97:2c:15:
                    ae:8e:e1:ea:c5:8e:cb:2a:91:32:7a:c2:b6:c7:50:
                    6c:44:e8:15:e6:c3:c6:5f:a0:2b:37:81:07:58:6b:
                    67:08:ee:31:86:bc:7b:ee:8b:7f:9c:87:9e:03:4c:
                    c5:e6:16:62:85:79:26:62:0d:46:39:e6:ff:9e:f5:
                    66:79:96:3a:66:9c:a2:e2:7b:0a:42:f4:9c:28:14:
                    ee:d7:d9:8c:3b:49:d5:54:2f:b1:15:4e:10:65:d9:
                    13:45:8c:bb:08:08:90:17:59:34:a6:c6:9c:29:98:
                    f1:38:f3:3d:24:77:33:b7:37:76:f4:b2:67:cd:c2:
                    9d:64:e8:d7:5b:8e:5c:23:66:8b:91:a6:f5:5f:a4:
                    b6:1d:0d:97:3c:32:8d:c8:b1:15:b9:d1:9d:e1:78:
                    36:ff:07:84:90:27:69:d9:63:b8:f2:74:aa:8f:20:
                    0c:bd:8f:82:8d:18:cc:21:14:73:e8:67:be:24:ae:
                    12:56:a0:1e:82:76:c1:5d:bd:cd:61:e3:a0:5d:c5:
                    5b:b7:ad:9e:f7:e9:15:db:59:3c:87:ed:e9:3f:1c:
                    d2:3b:b8:a2:2d:3e:16:44:8d:e1:05:53:cc:9f:01:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:65:FA:F9:4A:E4:4F:B7:CF:5F:B9:F1:44:DF:6E:A8:9A:CC:82:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa3e78f-ff56-3f7d-9898-9ea7f71b555b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:68:bf:e8:0f:94:c6:21:57:a9:04:ad:f1:9e:2d:87:7b:9f:
         0a:78:5c:c9:02:0b:1b:cf:12:5c:6f:06:67:25:13:0d:52:16:
         a0:b4:9e:ef:52:18:1b:f2:ec:da:bc:56:34:19:99:c4:8a:fa:
         71:21:3c:da:30:a6:d8:e4:ee:95:f1:ab:ce:f5:88:91:e4:74:
         7f:b1:ef:84:30:c9:57:f3:88:c8:c7:01:2a:62:85:ee:5f:a3:
         bf:88:34:da:03:63:92:5e:f3:4e:bf:b2:8b:ec:5d:71:68:97:
         10:04:18:a1:f7:9b:e2:0f:7f:43:ad:6d:42:28:50:65:96:70:
         e2:f1:60:f5:5c:19:e0:aa:8a:12:eb:8c:06:ac:68:57:44:11:
         15:be:93:07:d5:94:b3:84:5a:9c:03:d8:15:14:75:54:f6:fa:
         4c:9e:35:d6:ec:38:ce:f7:bf:8f:4a:99:98:21:94:13:82:4d:
         5c:74:9d:11:47:7b:0e:d9:ef:19:fe:bb:57:d9:90:33:11:26:
         ea:28:37:b0:a5:31:2f:fe:60:74:33:6a:55:0b:8c:c4:73:20:
         33:20:48:cf:45:dd:06:66:bd:96:0f:0d:7d:68:1f:4e:b8:0e:
         d3:28:6f:b6:0b:ec:61:44:64:d1:76:ba:cb:ef:6c:0f:e6:ed:
         b8:ac:d9:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkwetgOi8NkcxsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWE4ODQ1ZGMtNGQ3My00ZjA5LWI1Y2YtOTQ5YzIyYjI1ODZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkW2oJmDqzrNbgoe24eqqxTD3hOcW/5rN5uX
LBWujuHqxY7LKpEyesK2x1BsROgV5sPGX6ArN4EHWGtnCO4xhrx77ot/nIeeA0zF
5hZihXkmYg1GOeb/nvVmeZY6Zpyi4nsKQvScKBTu19mMO0nVVC+xFU4QZdkTRYy7
CAiQF1k0psacKZjxOPM9JHcztzd29LJnzcKdZOjXW45cI2aLkab1X6S2HQ2XPDKN
yLEVudGd4Xg2/weEkCdp2WO48nSqjyAMvY+CjRjMIRRz6Ge+JK4SVqAegnbBXb3N
YeOgXcVbt62e9+kV21k8h+3pPxzSO7iiLT4WRI3hBVPMnwHoIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGNl+vlK5E+3z1+58UTfbqiazIIcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2FhM2U3OGYtZmY1Ni0z
ZjdkLTk4OTgtOWVhN2Y3MWI1NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8qoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJov+gPlMYhV6kErfGeLYd7nwp4XMkCCxvPElxvBmclEw1SFqC0nu9S
GBvy7Nq8VjQZmcSK+nEhPNowptjk7pXxq871iJHkdH+x74QwyVfziMjHASpihe5f
o7+INNoDY5Je806/sovsXXFolxAEGKH3m+IPf0OtbUIoUGWWcOLxYPVcGeCqihLr
jAasaFdEERW+kwfVlLOEWpwD2BUUdVT2+kyeNdbsOM73v49KmZghlBOCTVx0nRFH
ew7Z7xn+u1fZkDMRJuooN7ClMS/+YHQzalULjMRzIDMgSM9F3QZmvZYPDX1oH064
DtMob7YL7GFEZNF2usvvbA/m7bis2QM=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:44:20 2026 by rpki-client