Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/a9be59ec-81ce-32d4-a58e-72e99c88035d.roa
File:                     a9be59ec-81ce-32d4-a58e-72e99c88035d.roa (raw, json)
Hash identifier:          6WiNlrbDvX4YKbM8s7xLDFQPY5GvJNm1vrKuMJwm+5I=
Subject key identifier:   D4:B6:EF:08:82:3D:F6:22:31:BC:1D:C2:68:3F:7D:25:3F:D0:DA:2E
Certificate issuer:       /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
Certificate serial:       010D0C9F4328584F7B34B4B74AF7F218AC3112C0
Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/a9be59ec-81ce-32d4-a58e-72e99c88035d.roa
Signing time:             Mon 12 Oct 2026 20:46:04 +0000
ROA not before:           Mon 12 Oct 2026 20:46:04 +0000
ROA not after:            Sun 10 Jan 2027 21:46:04 +0000
asID:                     46606
IP address blocks:        23.91.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:34:b4:b7:4a:f7:f2:18:ac:31:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
        Validity
            Not Before: Oct 12 20:46:04 2026 GMT
            Not After : Jan 10 21:46:04 2027 GMT
        Subject: CN=a605e3f8-d258-4281-910d-be49211c19ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:00:13:a0:fb:44:27:cb:78:73:62:52:20:
                    8d:09:36:63:48:9c:77:7b:70:dd:b6:de:ce:fe:ff:
                    14:87:3e:73:d0:b1:63:ff:70:4a:84:33:c8:ec:7a:
                    06:2b:59:5a:4e:21:6a:46:58:67:5b:dd:99:fb:1b:
                    2a:20:91:45:66:01:ad:ef:14:1c:1e:03:3c:19:6b:
                    29:69:9b:12:d4:10:28:0e:a8:3b:f3:21:9f:f5:15:
                    ee:0d:9f:25:e7:cb:5e:85:9b:3a:0f:99:3f:54:c2:
                    55:dd:0b:40:b4:5a:59:b3:43:11:5d:02:b4:a6:b8:
                    b7:de:3c:b0:e8:36:ab:4d:83:fb:cf:c1:76:21:87:
                    82:0e:6b:70:b9:59:55:dc:ad:e6:46:48:bb:6a:68:
                    89:07:1e:53:dc:d5:6e:49:b9:71:b4:70:15:b3:33:
                    5c:7e:65:f6:d7:b9:7a:d3:07:78:fe:67:f5:7f:6e:
                    da:ff:f6:4a:72:10:2b:fc:44:ac:c0:21:aa:e5:14:
                    09:d9:90:d3:77:92:ed:60:0d:32:5e:98:4a:37:b9:
                    52:42:6a:33:c1:82:22:de:4f:c7:c7:5a:e5:5a:38:
                    34:92:9d:20:42:ef:c8:e9:9f:bc:d7:b9:15:91:ec:
                    29:1c:13:f0:f1:d4:29:d8:e6:ca:ec:cb:81:b6:64:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:EF:08:82:3D:F6:22:31:BC:1D:C2:68:3F:7D:25:3F:D0:DA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/a9be59ec-81ce-32d4-a58e-72e99c88035d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl

            X509v3 Authority Key Identifier:
                keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:49:71:0e:d7:9b:64:b5:e6:22:36:1d:23:e2:8a:93:8f:
         04:3b:ca:f9:70:7a:bc:43:09:b2:b7:fa:64:5b:48:03:75:2e:
         3d:34:0d:8e:e3:58:3d:fc:7d:50:f8:b3:4f:e8:f9:b4:cf:09:
         d8:45:ef:ae:e4:20:a1:e3:e2:0e:e4:5e:5f:6e:13:f1:61:26:
         33:07:b4:62:ca:2d:d8:21:1b:05:c8:12:d9:26:e3:db:b1:24:
         ae:0d:80:af:1a:0d:4b:2a:9e:65:23:97:bb:2c:14:01:75:37:
         b8:73:c7:91:64:d9:cb:39:e7:e7:64:83:9e:fa:a6:ba:f2:90:
         da:89:dc:76:28:6d:92:33:d2:1b:68:92:a7:77:62:31:46:a1:
         26:1a:bc:cb:51:33:f6:29:ce:c6:75:21:9f:29:24:7f:ce:59:
         5d:63:4d:73:60:ea:0b:dc:0b:0a:7f:26:c0:ac:dd:f6:fc:a0:
         d3:35:b0:73:9e:3d:68:46:00:0f:d4:c8:1e:0c:da:62:8a:31:
         88:fc:6a:16:e0:3a:83:50:4f:5d:ec:19:3f:39:5b:40:b1:df:
         48:61:80:45:8f:63:62:77:91:b1:bf:99:07:eb:a1:8e:68:b8:
         1f:33:06:22:d7:fb:7e:2c:27:d6:76:e9:02:1c:d2:61:f6:c8:
         68:fb:29:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97NLS3SvfyGKwxEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1
ZGEwMB4XDTI2MTAxMjIwNDYwNFoXDTI3MDExMDIxNDYwNFowLzEtMCsGA1UEAxMk
YTYwNWUzZjgtZDI1OC00MjgxLTkxMGQtYmU0OTIxMWMxOWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomAAE6D7RCfLeHNiUiCNCTZjSJx3e3Ddtt7O
/v8Uhz5z0LFj/3BKhDPI7HoGK1laTiFqRlhnW92Z+xsqIJFFZgGt7xQcHgM8GWsp
aZsS1BAoDqg78yGf9RXuDZ8l58tehZs6D5k/VMJV3QtAtFpZs0MRXQK0pri33jyw
6DarTYP7z8F2IYeCDmtwuVlV3K3mRki7amiJBx5T3NVuSblxtHAVszNcfmX217l6
0wd4/mf1f27a//ZKchAr/ESswCGq5RQJ2ZDTd5LtYA0yXphKN7lSQmozwYIi3k/H
x1rlWjg0kp0gQu/I6Z+817kVkewpHBPw8dQp2ObK7MuBtmTb8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNS27wiCPfYiMbwdwmg/fSU/0NouMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk
YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvYTliZTU5ZWMtODFjZS0z
MmQ0LWE1OGUtNzJlOTljODgwMzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5
MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi
NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3
MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF1twMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGs7SXEO15tkteYiNh0j4oqTjwQ7yvlwerxDCbK3+mRbSAN1Lj00DY7j
WD38fVD4s0/o+bTPCdhF767kIKHj4g7kXl9uE/FhJjMHtGLKLdghGwXIEtkm49ux
JK4NgK8aDUsqnmUjl7ssFAF1N7hzx5Fk2cs55+dkg576prrykNqJ3HYobZIz0hto
kqd3YjFGoSYavMtRM/YpzsZ1IZ8pJH/OWV1jTXNg6gvcCwp/JsCs3fb8oNM1sHOe
PWhGAA/UyB4M2mKKMYj8ahbgOoNQT13sGT85W0Cx30hhgEWPY2J3kbG/mQfroY5o
uB8zBiLX+34sJ9Z26QIc0mH2yGj7KVc=
-----END CERTIFICATE-----
Generated at Sat Oct 17 02:37:24 2026 by rpki-client