Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
File:                     d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa (raw, json)
Hash identifier:          heLVJ9FplYc9xQEgu7w1izt+GsHBOLXcSCf6X+1Slt8=
Subject key identifier:   04:AB:39:C8:D3:EC:32:1D:44:E0:CB:70:58:0A:A7:71:F6:02:41:CE
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F4328584F698D88F202DF62A4673077E0
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     19879
IP address blocks:        23.169.88.0/24 maxlen: 24
                          2602:f9a6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:88:f2:02:df:62:a4:67:30:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=834fe0f0-3d22-408c-bd44-6f06c3f0f29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:70:f1:0d:f7:76:c4:ef:36:89:fc:bb:c6:
                    99:c8:0c:86:d0:00:20:64:b4:1b:6c:b8:ca:dd:d8:
                    b1:85:d6:01:ac:f6:52:16:3a:55:77:2b:f0:a3:43:
                    15:45:26:94:cf:b7:c5:8b:3d:9d:07:48:9e:2f:5e:
                    bd:6a:0a:da:44:4b:60:15:72:2c:33:40:09:0c:85:
                    47:f5:87:61:32:a1:dd:cb:eb:02:3d:bc:fe:be:d8:
                    af:08:b5:b0:c9:0f:f3:f6:60:ee:98:02:d7:3d:af:
                    48:26:da:8d:04:ef:a7:e9:31:df:09:2b:cd:36:f1:
                    17:6b:3e:88:d7:e5:0e:b7:b2:64:4f:42:33:24:aa:
                    25:f3:7c:17:01:3d:6e:84:e2:51:90:98:52:14:1e:
                    9f:5e:37:e3:98:52:af:03:0a:26:02:f3:e2:84:a7:
                    cb:bb:3f:99:33:34:da:68:3f:d1:65:58:93:d1:4e:
                    94:91:6a:55:96:1d:0f:71:cb:21:ac:14:a3:e5:ab:
                    c1:82:fe:18:1f:12:9d:29:19:d3:b4:14:9b:55:e5:
                    47:e9:18:ad:2b:49:70:1e:d8:dc:7e:9a:39:c7:af:
                    99:fb:7d:04:32:53:f5:05:79:c3:03:dd:51:39:56:
                    9c:2a:41:63:59:b8:44:b9:c7:32:17:70:18:4c:66:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AB:39:C8:D3:EC:32:1D:44:E0:CB:70:58:0A:A7:71:F6:02:41:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.88.0/24
                IPv6:
                  2602:f9a6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:8b:52:13:b5:98:3b:3e:a5:75:81:38:75:ed:35:b3:19:
         2f:e2:ee:d3:a3:03:79:ef:07:32:54:b1:c6:4f:1d:77:25:f2:
         46:15:9d:c9:0e:0f:75:8f:58:61:1f:30:4f:6f:4f:9e:f8:40:
         32:f0:ab:53:05:47:11:bd:1d:07:38:bc:8b:ad:35:66:a7:fa:
         6c:b9:ca:db:74:86:de:13:a9:3e:68:09:75:56:44:cc:7e:6d:
         e4:fb:d0:4b:f9:c1:b2:6f:ba:b3:92:f6:39:8c:1c:ee:66:d4:
         23:cd:d9:1a:1e:b1:4f:68:63:f5:9f:83:22:e4:68:3d:16:a1:
         8b:fe:da:cc:4b:af:92:33:3c:6d:f2:38:40:32:19:79:92:0c:
         9e:1d:a1:6f:2a:ae:60:b9:3b:40:cc:4b:09:c8:8f:a2:24:e9:
         e4:b4:60:1f:0e:51:29:47:b7:62:93:e4:2f:db:ec:2c:10:4e:
         97:6f:ae:20:66:49:66:bb:bb:61:32:cd:15:4e:d3:0e:1c:ea:
         db:b9:1b:fe:ea:b0:b2:e0:4b:23:5a:bd:6b:84:2a:fb:59:bb:
         fa:2c:58:74:97:87:cd:4d:fc:72:6c:65:3c:3f:73:4b:33:73:
         cb:9a:45:aa:b5:b6:e3:ad:e3:86:7a:9b:c6:73:5d:51:9f:87:
         be:29:d6:65
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9pjYjyAt9ipGcwd+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjkxOGE2MGItMmYxNi00ZGI5LThkNDctZGRkZmFmYjVm
ZGFiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
ODM0ZmUwZjAtM2QyMi00MDhjLWJkNDQtNmYwNmMzZjBmMjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V9w8Q33dsTvNon8u8aZyAyG0AAgZLQbbLjK
3dixhdYBrPZSFjpVdyvwo0MVRSaUz7fFiz2dB0ieL169agraREtgFXIsM0AJDIVH
9YdhMqHdy+sCPbz+vtivCLWwyQ/z9mDumALXPa9IJtqNBO+n6THfCSvNNvEXaz6I
1+UOt7JkT0IzJKol83wXAT1uhOJRkJhSFB6fXjfjmFKvAwomAvPihKfLuz+ZMzTa
aD/RZViT0U6UkWpVlh0PccshrBSj5avBgv4YHxKdKRnTtBSbVeVH6RitK0lwHtjc
fpo5x6+Z+30EMlP1BXnDA91ROVacKkFjWbhEuccyF3AYTGb0XwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFASrOcjT7DIdRODLcFgKp3H2AkHOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OTE4
YTYwYi0yZjE2LTRkYjktOGQ0Ny1kZGRmYWZiNWZkYWIvZDgyMzA0MGQtMmRmYi0z
NWFiLWI5YzQtOTVlNmIyZGUyYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjkxOGE2MGItMmYxNi00ZGI5LThk
NDctZGRkZmFmYjVmZGFiLzY5MThhNjBiLTJmMTYtNGRiOS04ZDQ3LWRkZGZhZmI1
ZmRhYi5jcmwwHwYDVR0jBBgwFoAUl8NQrsFalDaWyPb4G3kBnULiTaMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82OTE4YTYwYi0yZjE2LTRkYjktOGQ0Ny1kZGRm
YWZiNWZkYWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6lYMA4E
AgACMAgDBgQmAvmmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXPotSE7WYOz6ldYE4de01sxkv4u7TowN5
7wcyVLHGTx13JfJGFZ3JDg91j1hhHzBPb0+e+EAy8KtTBUcRvR0HOLyLrTVmp/ps
ucrbdIbeE6k+aAl1VkTMfm3k+9BL+cGyb7qzkvY5jBzuZtQjzdkaHrFPaGP1n4Mi
5Gg9FqGL/trMS6+SMzxt8jhAMhl5kgyeHaFvKq5guTtAzEsJyI+iJOnktGAfDlEp
R7dik+Qv2+wsEE6Xb64gZklmu7thMs0VTtMOHOrbuRv+6rCy4EsjWr1rhCr7Wbv6
LFh0l4fNTfxybGU8P3NLM3PLmkWqtbbjreOGepvGc11Rn4e+KdZl
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:56:42 2026 by rpki-client