Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
File:                     bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa (raw, json)
Hash identifier:          fafHD3qywsYJUyq8jsXaiVIzMbCf7dvGnqS/efWfRew=
Subject key identifier:   2F:D6:DE:1A:D3:1F:6F:4C:7B:A4:8C:00:53:61:10:C6:18:96:2B:72
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584EC0A7121431B2000B2CA17900
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     399624
IP address blocks:        23.129.68.0/24 maxlen: 24
                          2602:f7a7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:12:14:31:b2:00:0b:2c:a1:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=61d73959-5c3e-41b5-bef4-1559f8d7588d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:7f:ba:90:af:f1:c6:86:fc:eb:8a:08:d5:
                    0b:bc:35:26:61:e8:ba:25:5f:de:c3:7c:1d:5a:1d:
                    35:ab:44:2c:fd:be:0d:df:1d:e1:5a:6d:27:97:ae:
                    52:a7:e1:65:e1:8d:9e:4f:78:ba:50:69:b3:3a:8a:
                    d1:ac:ca:d6:09:b7:bb:84:07:53:69:65:5d:21:73:
                    90:0c:f1:df:f7:1b:4d:57:63:83:6c:22:d9:6f:ee:
                    ab:8b:01:14:54:a9:b3:fa:5d:82:fd:8e:af:57:91:
                    56:f8:c5:57:9b:c8:93:54:dd:b0:89:ed:27:84:63:
                    00:da:68:10:d3:a8:e1:d1:7e:a4:ec:8e:d4:ad:37:
                    68:79:c3:47:ac:1b:c1:bb:d2:f7:61:e3:10:53:0d:
                    45:cb:35:05:9e:1d:36:0d:bd:a3:83:b8:bb:bd:01:
                    9b:25:08:c7:76:1e:85:aa:50:53:a8:ec:ca:b2:af:
                    21:71:3a:a4:11:0a:06:9e:53:73:1f:c2:d1:15:c2:
                    0d:8e:1e:7f:a9:5d:74:ac:f6:fc:d6:49:ba:96:a0:
                    56:01:9c:50:f8:cb:e6:36:25:ed:4e:35:c8:80:0d:
                    6b:98:a4:db:59:06:48:ed:91:6d:ea:15:2f:85:37:
                    46:68:b1:0e:26:45:c7:9e:63:54:6b:46:9f:73:5a:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:DE:1A:D3:1F:6F:4C:7B:A4:8C:00:53:61:10:C6:18:96:2B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.68.0/24
                IPv6:
                  2602:f7a7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:eb:86:dd:e5:e7:c5:be:43:d7:50:4d:94:29:db:04:86:d0:
         d2:5a:38:df:50:06:d5:2b:49:b5:22:3f:8c:1d:f6:4c:d2:ef:
         f2:2f:e1:72:ed:70:94:29:3f:2e:23:1d:7c:d2:01:49:a3:56:
         1d:5a:ca:fe:3a:5b:60:ad:4f:9a:b1:53:b8:ba:8f:b2:70:a4:
         e3:6f:c5:27:9b:76:98:7b:3d:4f:05:fa:4a:4b:7a:88:b1:82:
         45:1e:72:23:a1:eb:49:0e:13:18:4f:96:34:57:79:56:21:60:
         46:e9:7a:33:98:da:e2:28:27:c1:2b:af:25:69:89:c1:23:06:
         ed:9a:51:36:bd:4d:36:15:0c:a2:9d:d9:d8:df:26:35:56:9d:
         56:1b:4f:d3:70:db:62:08:ad:c7:74:89:0b:ab:46:fb:2f:2c:
         1c:a3:a2:84:99:df:1a:e9:74:50:02:91:ac:b4:bc:a7:f4:da:
         b3:62:13:b7:12:b3:13:e7:c8:51:03:da:0a:97:95:50:53:92:
         89:88:68:c6:89:3f:5c:14:c2:6f:3f:9e:36:1d:74:9b:54:a9:
         d4:82:93:b3:40:16:8c:93:64:67:10:98:0d:e0:9f:af:2b:d6:
         35:c8:df:55:33:71:3b:dd:70:c5:6a:8c:69:c6:45:4f:20:55:
         33:87:44:f3
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7ApxIUMbIACyyheQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0
NmNjMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
NjFkNzM5NTktNWMzZS00MWI1LWJlZjQtMTU1OWY4ZDc1ODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vl/upCv8caG/OuKCNULvDUmYei6JV/ew3wd
Wh01q0Qs/b4N3x3hWm0nl65Sp+Fl4Y2eT3i6UGmzOorRrMrWCbe7hAdTaWVdIXOQ
DPHf9xtNV2ODbCLZb+6riwEUVKmz+l2C/Y6vV5FW+MVXm8iTVN2wie0nhGMA2mgQ
06jh0X6k7I7UrTdoecNHrBvBu9L3YeMQUw1FyzUFnh02Db2jg7i7vQGbJQjHdh6F
qlBTqOzKsq8hcTqkEQoGnlNzH8LRFcINjh5/qV10rPb81km6lqBWAZxQ+MvmNiXt
TjXIgA1rmKTbWQZI7ZFt6hUvhTdGaLEOJkXHnmNUa0afc1q8XQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFC/W3hrTH29Me6SMAFNhEMYYlityMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy
YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvYmQ5ZmE1MTAtNGNiMS0z
NmFjLWI2ZWYtZDQ3NDhjMDk0ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw
NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5
NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm
YWMzOTQ2Y2MuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4FEMA4E
AgACMAgDBgAmAvenADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBS64bd5efFvkPXUE2UKdsEhtDSWjjfUAbV
K0m1Ij+MHfZM0u/yL+Fy7XCUKT8uIx180gFJo1YdWsr+OltgrU+asVO4uo+ycKTj
b8Unm3aYez1PBfpKS3qIsYJFHnIjoetJDhMYT5Y0V3lWIWBG6XozmNriKCfBK68l
aYnBIwbtmlE2vU02FQyindnY3yY1Vp1WG0/TcNtiCK3HdIkLq0b7Lywco6KEmd8a
6XRQApGstLyn9NqzYhO3ErMT58hRA9oKl5VQU5KJiGjGiT9cFMJvP542HXSbVKnU
gpOzQBaMk2RnEJgN4J+vK9Y1yN9VM3E73XDFaoxpxkVPIFUzh0Tz
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:19 2026 by rpki-client