Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f7863f-e221-314d-864f-f06c8012acff.roa
File:                     01f7863f-e221-314d-864f-f06c8012acff.roa (raw, json)
Hash identifier:          oFVA6Rcr/9ReBLknBLxBBomOiKTiE7fQReG+8VdH/OY=
Subject key identifier:   02:4D:BD:E7:0C:70:B8:35:63:35:F4:A9:ED:5E:E5:C5:19:5B:B0:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E6F3A14301C342CECBF643200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f7863f-e221-314d-864f-f06c8012acff.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     35994
IP address blocks:        23.44.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:14:30:1c:34:2c:ec:bf:64:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=a97d053e-1e75-4606-af1b-b647628a9fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:d4:01:67:e5:95:67:d5:60:ed:15:5e:69:
                    3d:71:84:14:67:e2:6c:ad:a3:38:2e:a4:3f:20:f9:
                    54:d1:f4:8d:e3:9c:fe:97:9b:25:35:cd:33:ad:f8:
                    30:3e:20:9b:72:64:c8:ef:87:fb:ed:4a:03:35:d0:
                    18:8d:fd:17:65:28:9e:63:c6:64:31:22:4f:69:25:
                    9b:cf:10:41:a5:b8:76:b3:3c:84:50:2e:bc:9d:48:
                    73:f1:f6:2e:04:fb:57:63:ef:8d:b4:de:ca:97:92:
                    9e:ba:0b:7d:1f:43:46:da:a8:27:0e:0f:58:b8:ce:
                    49:c3:25:ff:0b:67:60:5c:2b:5d:70:6d:dd:e9:d7:
                    bc:35:fc:00:b8:4d:8a:8c:fe:9e:e3:b9:bd:c8:0c:
                    34:c1:56:86:e2:00:9c:7e:fd:43:a8:8e:aa:39:99:
                    c9:22:13:20:b3:ef:d7:7a:90:ac:fd:4c:5c:6b:31:
                    0d:a6:f2:c3:2a:44:7f:1c:07:6d:b5:2d:fd:39:ec:
                    f3:37:79:cb:0e:eb:23:f6:cd:ab:97:58:3d:ce:cd:
                    0f:75:70:83:b0:4d:e3:28:81:7a:bf:01:28:cb:17:
                    9d:fb:68:d7:ef:50:b7:c2:f3:2e:2d:dd:9a:5e:4a:
                    f2:15:a5:b3:7c:04:b3:bd:da:4d:07:59:92:93:23:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4D:BD:E7:0C:70:B8:35:63:35:F4:A9:ED:5E:E5:C5:19:5B:B0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f7863f-e221-314d-864f-f06c8012acff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:32:5a:57:ae:42:db:9d:9e:5c:ef:dc:05:02:19:90:3a:
         f3:77:96:71:e2:83:66:e9:e8:aa:49:09:f4:f2:98:1c:fc:c9:
         3f:54:0b:77:8f:42:d7:e7:65:a6:8e:95:27:c1:15:7d:f3:f0:
         20:f4:c0:a2:74:ce:0a:44:b5:0c:f1:c4:a9:f8:b8:ba:d4:c2:
         1b:01:83:1a:73:bc:21:a8:41:37:62:27:4b:fb:af:c8:53:2d:
         2e:7a:4b:ff:22:eb:50:0d:a3:12:dd:44:c9:67:9f:35:95:53:
         6a:7b:65:e4:e8:20:a0:48:c9:71:8e:fc:05:8a:cb:87:63:c7:
         0e:96:6b:24:cd:36:d0:63:d6:c0:e1:4f:d1:fa:b4:60:3d:52:
         ae:89:47:f5:07:e7:85:c3:af:30:44:bb:f4:f8:8c:36:24:4a:
         77:71:8c:ee:30:9b:51:a0:c6:53:a1:66:7f:4a:20:11:ee:93:
         d6:dc:1f:63:6c:56:be:cb:cf:11:33:bf:f1:c0:18:ce:18:e8:
         ab:8b:d2:8b:e5:af:32:ea:c3:c9:2c:7a:61:1b:51:31:74:8a:
         e2:64:32:fb:8e:d6:d7:74:d4:be:bd:7f:3a:10:74:0c:da:f5:
         69:86:cf:b0:76:1a:ed:20:d6:f4:4b:8c:2e:73:06:7c:3c:b5:
         98:46:eb:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOhQwHDQs7L9kMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
YTk3ZDA1M2UtMWU3NS00NjA2LWFmMWItYjY0NzYyOGE5ZmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLnUAWfllWfVYO0VXmk9cYQUZ+JsraM4LqQ/
IPlU0fSN45z+l5slNc0zrfgwPiCbcmTI74f77UoDNdAYjf0XZSieY8ZkMSJPaSWb
zxBBpbh2szyEUC68nUhz8fYuBPtXY++NtN7Kl5Keugt9H0NG2qgnDg9YuM5JwyX/
C2dgXCtdcG3d6de8NfwAuE2KjP6e47m9yAw0wVaG4gCcfv1DqI6qOZnJIhMgs+/X
epCs/UxcazENpvLDKkR/HAdttS39OezzN3nLDusj9s2rl1g9zs0PdXCDsE3jKIF6
vwEoyxed+2jX71C3wvMuLd2aXkryFaWzfASzvdpNB1mSkyOz5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJNvecMcLg1YzX0qe1e5cUZW7B0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDFmNzg2M2YtZTIyMS0z
MTRkLTg2NGYtZjA2YzgwMTJhY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyysMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8tMlpXrkLbnZ5c79wFAhmQOvN3lnHig2bp6KpJCfTymBz8yT9UC3eP
QtfnZaaOlSfBFX3z8CD0wKJ0zgpEtQzxxKn4uLrUwhsBgxpzvCGoQTdiJ0v7r8hT
LS56S/8i61ANoxLdRMlnnzWVU2p7ZeToIKBIyXGO/AWKy4djxw6WayTNNtBj1sDh
T9H6tGA9Uq6JR/UH54XDrzBEu/T4jDYkSndxjO4wm1GgxlOhZn9KIBHuk9bcH2Ns
Vr7LzxEzv/HAGM4Y6KuL0ovlrzLqw8ksemEbUTF0iuJkMvuO1td01L69fzoQdAza
9WmGz7B2Gu0g1vRLjC5zBnw8tZhG63c=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:41:50 2026 by rpki-client