Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa
File:                     f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa (raw, json)
Hash identifier:          m+mpBdkiZjiIUG5GNTjbp8PqkQlEjEbfPObiQ/FjU4M=
Subject key identifier:   16:21:3E:0A:6A:C4:6A:FB:8F:AF:EB:07:05:9E:96:B7:AB:91:1B:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA79B111C33FD4A20FA1BBB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.215.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:11:1c:33:fd:4a:20:fa:1b:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=76e74684-49e0-4f46-b9f4-88ff11b2697b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:42:9b:12:8c:70:12:4e:c8:27:60:be:5e:
                    91:ef:62:64:ef:1a:90:4d:90:b4:bb:a8:6b:6d:40:
                    c6:4e:64:8c:47:4f:5c:f3:53:e1:f7:1d:2c:18:a6:
                    e9:f9:dc:33:fc:93:c8:29:e5:5f:f1:18:02:6a:ac:
                    e3:87:5e:0a:6d:55:e7:fa:be:22:d5:1a:17:73:1c:
                    49:2c:f7:a8:22:04:37:86:9f:79:e1:ac:ed:ed:5d:
                    fc:af:09:0f:10:67:68:a8:09:b6:f0:f4:ea:a3:ba:
                    ab:00:7e:2c:77:11:94:f4:a9:39:79:6d:1a:66:ac:
                    b0:3c:52:57:e7:36:c7:5c:9d:f5:c2:28:cd:20:d3:
                    cb:8d:c6:09:dd:11:a0:dc:a2:d6:2b:b8:6e:1d:4b:
                    5b:02:34:93:b3:79:eb:4a:ff:52:10:0e:f3:cb:b8:
                    5f:f1:12:f9:54:92:c8:7c:03:da:ea:21:f5:75:ea:
                    41:69:45:ba:9e:3f:da:30:0a:86:32:5e:5f:a3:d9:
                    58:a4:18:83:e1:2a:e9:49:3d:6d:ff:82:a9:c5:ed:
                    88:3b:7b:ad:5f:c6:c0:f7:c6:3b:63:ee:90:40:39:
                    53:6e:d2:c6:c1:ae:19:0b:84:2a:53:be:73:08:86:
                    95:87:49:19:bf:62:87:e0:90:5a:67:11:86:9e:f4:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:21:3E:0A:6A:C4:6A:FB:8F:AF:EB:07:05:9E:96:B7:AB:91:1B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e0:c7:74:61:5d:34:16:da:29:dc:f3:9e:20:45:10:6a:b4:
         12:63:1f:f0:6d:73:85:e7:c9:7e:2d:d0:04:17:c7:66:20:1b:
         60:4a:89:98:65:7a:69:d7:19:98:e3:1c:08:6c:d7:a3:e9:a5:
         83:4b:59:73:ec:1a:83:5b:22:73:8a:30:e0:c8:2d:a6:7e:b2:
         77:4b:f6:ac:60:6b:0d:3f:91:25:85:88:8c:2e:6b:88:d1:6f:
         5c:43:55:60:ae:91:2f:1e:42:40:c0:01:ca:81:9e:88:a6:30:
         81:a4:f8:df:57:00:74:0f:8c:11:b5:67:b4:99:02:05:78:e4:
         7e:51:ad:84:c5:ae:af:a3:2c:42:54:28:0b:0c:da:c7:ae:fd:
         3e:d3:e7:34:36:1d:9e:e5:6b:76:6b:d6:f8:90:ff:b2:ec:b9:
         b9:62:46:66:e4:79:c2:f4:c4:5c:d0:ab:88:19:70:f3:84:5a:
         51:1d:4c:7c:99:3c:52:59:e7:d9:f2:bc:f7:20:8a:c2:c1:c3:
         58:9f:60:80:ed:aa:32:f1:ba:1b:46:a9:dd:80:ac:93:2f:2c:
         ec:dc:b2:cb:73:65:0c:2a:c7:d3:ff:e8:18:fa:19:e6:8c:fc:
         4f:76:e6:65:a1:9e:59:8d:4f:32:19:58:5a:0e:e5:8b:54:15:
         d8:cf:8a:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmxEcM/1KIPobuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzZlNzQ2ODQtNDllMC00ZjQ2LWI5ZjQtODhmZjExYjI2OTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWBCmxKMcBJOyCdgvl6R72Jk7xqQTZC0u6hr
bUDGTmSMR09c81Ph9x0sGKbp+dwz/JPIKeVf8RgCaqzjh14KbVXn+r4i1RoXcxxJ
LPeoIgQ3hp954azt7V38rwkPEGdoqAm28PTqo7qrAH4sdxGU9Kk5eW0aZqywPFJX
5zbHXJ31wijNINPLjcYJ3RGg3KLWK7huHUtbAjSTs3nrSv9SEA7zy7hf8RL5VJLI
fAPa6iH1depBaUW6nj/aMAqGMl5fo9lYpBiD4SrpST1t/4Kpxe2IO3utX8bA98Y7
Y+6QQDlTbtLGwa4ZC4QqU75zCIaVh0kZv2KH4JBaZxGGnvR7cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYhPgpqxGr7j6/rBwWelrerkRt0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk2MjA1ODAtMzg4Mi0z
ZGU3LWIzYjAtZDM3YjdlMWNmMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ffMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDgx3RhXTQW2inc854gRRBqtBJjH/Btc4XnyX4t0AQXx2YgG2BKiZhl
emnXGZjjHAhs16PppYNLWXPsGoNbInOKMODILaZ+sndL9qxgaw0/kSWFiIwua4jR
b1xDVWCukS8eQkDAAcqBnoimMIGk+N9XAHQPjBG1Z7SZAgV45H5RrYTFrq+jLEJU
KAsM2seu/T7T5zQ2HZ7la3Zr1viQ/7LsubliRmbkecL0xFzQq4gZcPOEWlEdTHyZ
PFJZ59nyvPcgisLBw1ifYIDtqjLxuhtGqd2ArJMvLOzcsstzZQwqx9P/6Bj6GeaM
/E925mWhnlmNTzIZWFoO5YtUFdjPilw=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:31:41 2026 by rpki-client