Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d678fa26-61ac-31c0-9e3b-f1569437cda2.roa
File:                     d678fa26-61ac-31c0-9e3b-f1569437cda2.roa (raw, json)
Hash identifier:          NODTY2nGMGwciUmNNB3/M+FDlZwtO+7lE1m/lercrnk=
Subject key identifier:   18:0A:05:82:99:66:11:C4:49:3A:4E:24:F4:14:39:09:C9:6D:61:A6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7889AFC6C5B6FC1E8703100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d678fa26-61ac-31c0-9e3b-f1569437cda2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.210.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:9a:fc:6c:5b:6f:c1:e8:70:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=963f45a1-f779-4ad0-a182-b58823463282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:7b:10:55:06:8f:4c:fa:d1:f9:f3:5c:05:
                    8e:bc:fa:d6:d3:90:94:02:5c:29:4a:00:de:af:1d:
                    d7:62:43:2d:a5:bf:e9:92:f3:6f:0d:ba:6f:f1:11:
                    4f:93:1b:ea:b0:57:51:1c:d2:9b:56:0f:ee:8b:37:
                    f6:b9:86:80:f8:a7:fa:48:6f:3c:7b:a8:04:1a:5e:
                    06:c6:a9:0c:10:aa:67:78:f8:e0:ee:74:02:8f:75:
                    ce:d5:bf:2c:1f:8a:bc:3b:b4:14:f9:cb:f8:b9:f6:
                    02:f3:04:f7:7c:8a:27:d5:68:41:35:07:14:c0:4d:
                    49:73:95:04:1a:17:d7:5b:17:1b:4f:86:cd:1c:68:
                    40:60:97:e3:58:c4:e9:81:82:b7:e0:2a:b1:7b:e4:
                    c4:9d:cd:88:0c:32:a8:ae:d3:e9:73:7c:cb:9f:65:
                    e4:da:61:c0:85:c4:1a:1b:d9:2e:20:bd:b9:87:6a:
                    6b:38:93:be:f6:6d:f0:5a:68:26:de:bc:7a:ef:a4:
                    eb:d3:09:02:42:83:3b:e0:ae:f0:88:0d:83:0c:1d:
                    4d:9d:68:f3:8b:e8:b5:90:8f:d9:43:92:18:84:17:
                    b5:81:15:3d:a6:b4:b3:b9:1e:9f:58:bb:11:40:6e:
                    54:c9:b6:d7:9e:53:3d:28:2e:7a:6a:5e:9a:68:93:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0A:05:82:99:66:11:C4:49:3A:4E:24:F4:14:39:09:C9:6D:61:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d678fa26-61ac-31c0-9e3b-f1569437cda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5c:73:ee:bf:98:b6:f2:7a:f2:28:0a:eb:4b:6d:e9:b0:07:
         14:e2:87:e3:aa:2f:55:cf:75:81:4f:c6:01:08:d7:45:c2:91:
         3b:32:ff:e7:b3:39:b4:8d:75:a0:e9:9c:32:b7:70:69:2b:49:
         af:3d:25:4c:a2:fa:99:bf:78:2e:e5:fd:e1:2b:2f:a8:c5:3b:
         f2:6b:05:40:ab:bb:50:d8:34:c1:d2:9d:63:dc:e5:52:9d:73:
         23:c2:f1:49:d9:fa:38:f7:9f:7d:23:d4:9f:9c:d9:27:cc:4d:
         16:19:3b:ad:86:39:22:a4:66:37:1f:79:58:5e:81:c5:b1:fb:
         22:f3:22:80:12:4d:6f:95:75:21:cd:05:b7:69:cc:17:01:5c:
         50:ca:40:fb:57:a0:fc:87:56:6d:eb:d7:80:64:c4:0c:48:f4:
         a6:e0:8d:a9:c8:ab:6d:d6:db:81:d5:3f:12:cf:84:06:d8:ef:
         65:26:8d:e8:08:51:26:11:78:4a:54:cb:c9:e9:57:ed:03:aa:
         fe:bd:e4:e9:03:70:52:7d:af:5b:f2:d6:c0:f7:cb:ed:44:74:
         dc:2c:7a:74:12:cf:9a:f2:68:70:cf:10:5f:4d:80:78:c3:3b:
         57:37:df:d5:b1:6b:c0:a4:4d:3c:57:0e:3b:7d:32:39:dd:b2:
         89:ee:9c:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJr8bFtvwehwMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTYzZjQ1YTEtZjc3OS00YWQwLWExODItYjU4ODIzNDYzMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaV7EFUGj0z60fnzXAWOvPrW05CUAlwpSgDe
rx3XYkMtpb/pkvNvDbpv8RFPkxvqsFdRHNKbVg/uizf2uYaA+Kf6SG88e6gEGl4G
xqkMEKpnePjg7nQCj3XO1b8sH4q8O7QU+cv4ufYC8wT3fIon1WhBNQcUwE1Jc5UE
GhfXWxcbT4bNHGhAYJfjWMTpgYK34Cqxe+TEnc2IDDKortPpc3zLn2Xk2mHAhcQa
G9kuIL25h2prOJO+9m3wWmgm3rx676Tr0wkCQoM74K7wiA2DDB1NnWjzi+i1kI/Z
Q5IYhBe1gRU9prSzuR6fWLsRQG5UybbXnlM9KC56al6aaJMTUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgKBYKZZhHESTpOJPQUOQnJbWGmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY3OGZhMjYtNjFhYy0z
MWMwLTllM2ItZjE1Njk0MzdjZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVcc+6/mLbyevIoCutLbemwBxTih+OqL1XPdYFPxgEI10XCkTsy/+ez
ObSNdaDpnDK3cGkrSa89JUyi+pm/eC7l/eErL6jFO/JrBUCru1DYNMHSnWPc5VKd
cyPC8UnZ+jj3n30j1J+c2SfMTRYZO62GOSKkZjcfeVhegcWx+yLzIoASTW+VdSHN
BbdpzBcBXFDKQPtXoPyHVm3r14BkxAxI9KbgjanIq23W24HVPxLPhAbY72UmjegI
USYReEpUy8npV+0Dqv695OkDcFJ9r1vy1sD3y+1EdNwsenQSz5ryaHDPEF9NgHjD
O1c339Wxa8CkTTxXDjt9MjndsonunHM=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:24:16 2026 by rpki-client