Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/306195bd-41fb-393f-aa2f-24d34d0899fb.roa
File:                     306195bd-41fb-393f-aa2f-24d34d0899fb.roa (raw, json)
Hash identifier:          b3aZyLMk3Y926GXpKY2B1RuknvTX/2LdRCzk0PQ6afw=
Subject key identifier:   BE:6F:7E:C9:59:CD:79:66:DE:74:C4:A8:C9:54:69:E7:8B:54:D6:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE41B364359D86CE4EB1620C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/306195bd-41fb-393f-aa2f-24d34d0899fb.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     20940
IP address blocks:        23.195.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:36:43:59:d8:6c:e4:eb:16:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=e8490621-edb7-4b10-8632-fc21436c6fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:56:16:fc:69:8b:9b:e6:9f:0c:90:ac:c4:
                    6f:f2:38:57:f5:59:e3:5f:8f:a8:f1:3d:31:1c:ee:
                    79:29:ca:50:64:1e:b7:07:c8:bb:84:5d:7b:0c:91:
                    25:44:35:22:ed:0f:09:9e:6e:3d:7e:09:34:13:bc:
                    a9:b6:49:0e:62:a3:f0:4f:44:07:a3:42:78:32:1b:
                    f2:74:f1:5c:eb:9d:f5:fa:07:88:32:99:1e:45:86:
                    38:25:21:f8:87:1e:27:19:13:80:e4:06:2c:8f:86:
                    cf:1e:7b:84:2b:84:85:9c:98:a6:46:34:48:89:7f:
                    25:bd:b6:c0:09:b6:ea:91:b2:48:c9:dd:7b:b6:e5:
                    d6:60:0c:9e:f9:cc:ee:7c:99:78:a1:10:15:bb:8a:
                    bb:1b:ea:d3:0e:e1:27:4d:60:9c:6b:1b:a1:28:cd:
                    06:f0:66:cc:b0:0c:c7:09:ba:36:2d:71:fc:a8:af:
                    b8:25:6b:00:19:a9:02:69:2d:cf:71:eb:ad:0d:75:
                    5e:7d:83:61:81:96:b7:99:bb:38:60:cb:39:34:23:
                    24:64:46:b3:82:25:ed:7d:ad:6e:fc:6b:3e:fd:08:
                    34:10:d6:8f:ab:f8:ff:dd:ca:f4:86:04:8f:ca:d8:
                    07:5f:a1:9b:68:7a:38:74:84:3b:a7:52:f2:32:be:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6F:7E:C9:59:CD:79:66:DE:74:C4:A8:C9:54:69:E7:8B:54:D6:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/306195bd-41fb-393f-aa2f-24d34d0899fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:31:9f:7c:a1:a7:f6:06:7c:7f:27:57:4c:13:31:c4:28:
         ee:c7:12:bb:10:91:78:74:ea:77:19:0d:d3:e9:7d:f1:56:10:
         31:a9:b1:af:84:ba:5a:31:5b:6b:3f:08:8c:6d:24:03:f9:80:
         31:8b:a3:85:1c:05:33:58:39:dd:24:ee:39:cf:b2:58:e3:b6:
         e5:9c:b6:e4:f9:a6:a8:97:c0:48:58:89:e2:e0:19:10:66:be:
         cf:4c:47:42:38:2c:07:0f:1f:e7:e5:f5:14:66:7a:39:9a:c6:
         18:d0:5e:de:20:2c:cd:1a:28:8c:92:67:a4:5f:a8:a2:e1:73:
         b6:35:1f:eb:b6:f3:30:5b:99:d5:ec:ec:86:95:d6:f3:2e:1a:
         70:fe:3a:ea:f4:20:be:7f:df:4c:b7:4f:0d:f7:d5:1f:93:60:
         a0:39:e4:fc:48:31:77:f8:d9:49:85:f8:9d:13:bb:3e:8a:8e:
         25:86:d9:ca:9b:19:85:b8:8f:e8:c8:ce:ee:dc:5b:2c:3f:b0:
         ed:5c:95:1f:21:91:f2:ee:76:fc:18:b9:dd:01:3c:e6:db:40:
         ff:74:22:e4:65:99:94:e0:bb:7e:3d:20:ac:67:95:0d:5c:20:
         14:c0:3a:1a:4e:20:55:fc:32:ff:6a:eb:eb:d2:a6:fe:6c:43:
         d4:3e:c6:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGzZDWdhs5OsWIMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
ZTg0OTA2MjEtZWRiNy00YjEwLTg2MzItZmMyMTQzNmM2ZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzRWFvxpi5vmnwyQrMRv8jhX9VnjX4+o8T0x
HO55KcpQZB63B8i7hF17DJElRDUi7Q8Jnm49fgk0E7yptkkOYqPwT0QHo0J4Mhvy
dPFc6531+geIMpkeRYY4JSH4hx4nGROA5AYsj4bPHnuEK4SFnJimRjRIiX8lvbbA
CbbqkbJIyd17tuXWYAye+czufJl4oRAVu4q7G+rTDuEnTWCcaxuhKM0G8GbMsAzH
Cbo2LXH8qK+4JWsAGakCaS3PceutDXVefYNhgZa3mbs4YMs5NCMkZEazgiXtfa1u
/Gs+/Qg0ENaPq/j/3cr0hgSPytgHX6GbaHo4dIQ7p1LyMr5o0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5vfslZzXlm3nTEqMlUaeeLVNYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzA2MTk1YmQtNDFmYi0z
OTNmLWFhMmYtMjRkMzRkMDg5OWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8MkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPNMZ98oaf2Bnx/J1dMEzHEKO7HErsQkXh06ncZDdPpffFWEDGpsa+E
uloxW2s/CIxtJAP5gDGLo4UcBTNYOd0k7jnPsljjtuWctuT5pqiXwEhYieLgGRBm
vs9MR0I4LAcPH+fl9RRmejmaxhjQXt4gLM0aKIySZ6RfqKLhc7Y1H+u28zBbmdXs
7IaV1vMuGnD+Our0IL5/30y3Tw331R+TYKA55PxIMXf42UmF+J0Tuz6KjiWG2cqb
GYW4j+jIzu7cWyw/sO1clR8hkfLudvwYud0BPObbQP90IuRlmZTgu349IKxnlQ1c
IBTAOhpOIFX8Mv9q6+vSpv5sQ9Q+xtM=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:18 2026 by rpki-client