Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98e3b44b-905d-3f70-8c98-b1bf0a362bd7.roa
File:                     98e3b44b-905d-3f70-8c98-b1bf0a362bd7.roa (raw, json)
Hash identifier:          db5bAcb1w9m2YHwngrX+f+aDHJeGLejR2byIUDCpwZQ=
Subject key identifier:   6D:E9:79:56:3C:9B:B6:8B:9B:9F:EC:30:DB:DF:42:F4:07:29:F1:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA791F6DAD46E838E1A850880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98e3b44b-905d-3f70-8c98-b1bf0a362bd7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.200.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:f6:da:d4:6e:83:8e:1a:85:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=063af8db-b46a-4596-87d4-1303848f9f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:06:b1:db:c4:6a:3c:04:25:f1:52:18:b4:
                    d1:cb:cc:a7:68:98:b8:1c:97:1e:7c:6d:a7:80:bf:
                    60:47:cd:81:13:44:73:1f:e0:93:b6:1b:7f:81:b9:
                    e9:6a:cd:43:48:e0:ca:51:e9:dd:00:dc:3a:6f:5f:
                    75:68:f0:70:61:87:d3:b0:9c:46:11:aa:f7:92:ef:
                    24:f2:2b:91:94:5d:f9:e2:28:d1:ff:ed:1c:ea:9c:
                    bb:67:db:67:cf:c9:1d:ba:da:e2:41:50:58:4b:c1:
                    6d:8e:72:46:2f:86:62:67:59:ad:c3:74:1f:3d:10:
                    d7:c9:11:2b:ea:53:a1:9f:5b:89:51:d7:6b:03:4c:
                    44:47:c8:5c:01:46:a0:4c:44:08:48:e8:d0:39:83:
                    b4:36:92:f8:62:a1:a3:05:b9:70:b7:7e:99:95:38:
                    cd:c4:70:39:92:18:37:c3:6b:48:e7:30:d8:2b:4d:
                    71:8b:b8:8d:67:32:7f:30:0b:b0:60:c1:9b:f4:cf:
                    21:0b:d5:38:99:2a:84:47:ab:be:c1:5a:50:73:b0:
                    82:9d:a5:bb:71:cc:7e:0d:5f:a1:ea:05:f5:ce:1e:
                    6d:e1:00:7c:f4:99:bc:f5:03:02:7b:4e:10:30:e1:
                    cc:91:ee:ab:54:14:9e:60:9a:2b:68:f4:77:e2:bd:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E9:79:56:3C:9B:B6:8B:9B:9F:EC:30:DB:DF:42:F4:07:29:F1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98e3b44b-905d-3f70-8c98-b1bf0a362bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:15:1f:e4:d1:6f:30:f0:bb:87:6c:46:76:b7:c9:be:e1:
         f2:0c:0e:ed:ec:dc:8e:7a:04:db:ad:6f:9d:96:53:40:2f:48:
         a5:1a:e0:7e:92:8a:df:29:2e:10:a3:e3:54:44:6c:c2:4d:4c:
         cc:45:24:e3:70:28:c6:42:d6:76:74:4f:24:56:73:83:50:87:
         9c:86:05:fc:43:c3:d7:c3:de:71:13:0d:15:2a:9b:33:08:d1:
         de:e2:98:eb:bf:42:b7:3e:59:94:ce:a0:62:e1:17:d7:b7:b1:
         97:65:7b:c6:06:2f:7e:39:50:1a:95:b9:8d:25:57:b6:10:37:
         37:fa:b1:a4:72:57:9f:cc:7c:b0:86:87:b5:53:e3:a1:ba:f1:
         36:11:4c:f8:68:78:06:84:f3:17:59:c3:33:48:79:0c:a1:ef:
         60:42:0b:97:49:72:b2:97:98:42:25:14:d0:a4:36:24:5d:ba:
         35:be:49:4f:51:86:2f:68:17:b5:b5:16:3b:dd:c7:2d:ff:be:
         fc:61:fc:b7:13:c6:0c:8a:9d:fe:a7:1f:20:6b:49:91:b4:9d:
         15:7b:a5:c1:d4:24:2f:c4:1b:1e:c5:26:fb:9a:0c:79:a0:c7:
         11:74:44:44:c6:0a:70:b1:f6:41:ba:18:cc:39:37:85:d0:47:
         73:ed:b9:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkfba1G6DjhqFCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDYzYWY4ZGItYjQ2YS00NTk2LTg3ZDQtMTMwMzg0OGY5ZjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEsGsdvEajwEJfFSGLTRy8ynaJi4HJcefG2n
gL9gR82BE0RzH+CTtht/gbnpas1DSODKUendANw6b191aPBwYYfTsJxGEar3ku8k
8iuRlF354ijR/+0c6py7Z9tnz8kdutriQVBYS8FtjnJGL4ZiZ1mtw3QfPRDXyREr
6lOhn1uJUddrA0xER8hcAUagTEQISOjQOYO0NpL4YqGjBblwt36ZlTjNxHA5khg3
w2tI5zDYK01xi7iNZzJ/MAuwYMGb9M8hC9U4mSqER6u+wVpQc7CCnaW7ccx+DV+h
6gX1zh5t4QB89Jm89QMCe04QMOHMke6rVBSeYJoraPR34r2V7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3peVY8m7aLm5/sMNvfQvQHKfHmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOThlM2I0NGItOTA1ZC0z
ZjcwLThjOTgtYjFiZjBhMzYyYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIabFR/k0W8w8LuHbEZ2t8m+4fIMDu3s3I56BNutb52WU0AvSKUa4H6S
it8pLhCj41REbMJNTMxFJONwKMZC1nZ0TyRWc4NQh5yGBfxDw9fD3nETDRUqmzMI
0d7imOu/Qrc+WZTOoGLhF9e3sZdle8YGL345UBqVuY0lV7YQNzf6saRyV5/MfLCG
h7VT46G68TYRTPhoeAaE8xdZwzNIeQyh72BCC5dJcrKXmEIlFNCkNiRdujW+SU9R
hi9oF7W1Fjvdxy3/vvxh/LcTxgyKnf6nHyBrSZG0nRV7pcHUJC/EGx7FJvuaDHmg
xxF0RETGCnCx9kG6GMw5N4XQR3PtuZk=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:28:23 2026 by rpki-client