Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa
File:                     2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa (raw, json)
Hash identifier:          4si3VhnwTyXLlwFsda/omZankZt5fCmdxelJc3rHyTs=
Subject key identifier:   99:FB:5A:34:87:8B:63:44:5F:FC:7F:E9:3F:C3:9C:DD:FE:6E:6A:78
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7E94FA10E8474257FD2B5680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        23.32.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:fa:10:e8:47:42:57:fd:2b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=e8bf4351-8cad-4146-b3ab-834d03465a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:b6:81:bb:74:18:91:2b:89:05:49:fb:e0:
                    17:a2:1f:9e:41:f5:64:fe:26:63:65:37:70:c5:45:
                    d6:0c:80:11:92:a0:27:37:0c:b0:eb:6b:49:05:30:
                    76:42:0f:87:e0:e3:08:90:cd:5b:e2:82:87:cc:da:
                    75:7c:01:5e:ea:be:e5:bf:d3:35:96:d6:30:dd:91:
                    7b:20:78:e1:8e:8d:de:48:24:b2:eb:e5:1e:41:c7:
                    0d:9f:d4:6a:b2:7d:af:81:b8:ff:6e:05:e9:11:54:
                    ae:61:e8:50:ec:a9:20:2d:9d:f5:cc:04:8a:06:07:
                    75:8b:1c:7e:10:c0:5a:12:f5:b5:01:9b:5a:c2:1b:
                    19:94:b7:63:57:19:cf:de:0e:27:3a:a7:12:d7:f2:
                    30:5e:3e:e7:c8:05:d5:40:69:58:85:5f:bf:cd:a0:
                    fa:08:45:f1:09:d8:80:20:ef:d2:30:3b:9d:8d:e4:
                    c3:04:75:45:26:66:01:56:85:88:83:b4:bc:65:3a:
                    94:26:9e:08:f5:9d:ed:97:b0:0e:ee:ab:e1:a5:33:
                    6e:ed:cd:40:94:51:7b:a4:01:ea:cb:18:ad:33:0e:
                    d7:11:7f:fe:93:ce:99:5e:fa:6b:20:dd:f0:95:59:
                    d5:49:90:0b:3a:70:6f:84:0d:93:ef:47:15:c2:5b:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FB:5A:34:87:8B:63:44:5F:FC:7F:E9:3F:C3:9C:DD:FE:6E:6A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:87:ac:47:f6:c5:db:cf:a5:6a:53:3c:b3:49:2e:2d:d8:da:
         6f:2e:93:f1:f3:ea:b7:b8:1c:5a:e3:f4:e0:73:23:9f:79:57:
         a2:23:08:17:df:9e:8e:23:83:26:51:4d:63:dd:7d:a3:03:52:
         42:5b:bd:37:89:97:11:52:2f:3e:49:53:f5:05:d6:d8:25:23:
         9c:fd:b8:96:cc:2c:84:19:45:69:54:c3:9a:15:1b:fc:f3:79:
         4c:bf:96:cc:6f:7e:79:aa:c8:d1:2b:f5:21:30:c7:b2:91:26:
         7b:d1:bc:c6:b8:ef:73:40:a8:0a:e2:61:f9:b6:de:4d:7f:1b:
         61:8f:c3:1f:1e:46:1b:f2:fa:4e:d1:a8:7e:cc:35:75:e0:20:
         f8:1d:e5:55:e5:f6:bd:41:d7:6d:71:88:ee:24:f2:ab:b4:c6:
         60:94:0f:15:43:80:2e:a8:2f:12:f8:04:fb:75:7a:43:a3:f2:
         64:e6:05:67:2e:5c:da:1d:a4:64:44:0e:80:ec:cf:79:3a:4b:
         8e:12:70:2d:36:36:0a:1c:c8:07:33:48:04:51:9a:17:c6:f4:
         fa:43:3e:55:52:fc:87:55:4d:06:5c:2b:16:29:d9:a8:e7:40:
         1d:3f:f0:3a:57:a0:f2:64:fe:f2:c8:03:7f:32:42:99:d0:8a:
         90:5a:14:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPoQ6EdCV/0rVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
ZThiZjQzNTEtOGNhZC00MTQ2LWIzYWItODM0ZDAzNDY1YThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPe2gbt0GJEriQVJ++AXoh+eQfVk/iZjZTdw
xUXWDIARkqAnNwyw62tJBTB2Qg+H4OMIkM1b4oKHzNp1fAFe6r7lv9M1ltYw3ZF7
IHjhjo3eSCSy6+UeQccNn9Rqsn2vgbj/bgXpEVSuYehQ7KkgLZ31zASKBgd1ixx+
EMBaEvW1AZtawhsZlLdjVxnP3g4nOqcS1/IwXj7nyAXVQGlYhV+/zaD6CEXxCdiA
IO/SMDudjeTDBHVFJmYBVoWIg7S8ZTqUJp4I9Z3tl7AO7qvhpTNu7c1AlFF7pAHq
yxitMw7XEX/+k86ZXvprIN3wlVnVSZALOnBvhA2T70cVwlvL6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJn7WjSHi2NEX/x/6T/DnN3+bmp4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmExMDZmODUtNWZmNi0z
NTAxLTljNTgtMDg4YzRhZWJhNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiHrEf2xdvPpWpTPLNJLi3Y2m8uk/Hz6re4HFrj9OBzI595V6IjCBff
no4jgyZRTWPdfaMDUkJbvTeJlxFSLz5JU/UF1tglI5z9uJbMLIQZRWlUw5oVG/zz
eUy/lsxvfnmqyNEr9SEwx7KRJnvRvMa473NAqAriYfm23k1/G2GPwx8eRhvy+k7R
qH7MNXXgIPgd5VXl9r1B121xiO4k8qu0xmCUDxVDgC6oLxL4BPt1ekOj8mTmBWcu
XNodpGREDoDsz3k6S44ScC02NgocyAczSARRmhfG9PpDPlVS/IdVTQZcKxYp2ajn
QB0/8DpXoPJk/vLIA38yQpnQipBaFHE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:59:06 2026 by rpki-client