Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce7c41b-8ef0-33cd-b62c-4bb5d8b413dc.roa
File:                     5ce7c41b-8ef0-33cd-b62c-4bb5d8b413dc.roa (raw, json)
Hash identifier:          3zQCkB0pduHHA9dHHNJVaHX9CAgHYeCezaSZIAYgG9s=
Subject key identifier:   66:27:DD:A6:83:EE:47:2B:8A:20:ED:69:E1:55:F1:F6:7A:A3:28:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA314CC2BA2CC671EC9D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce7c41b-8ef0-33cd-b62c-4bb5d8b413dc.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        23.9.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:31:4c:c2:ba:2c:c6:71:ec:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=2d4c3807-92ef-48c6-85b1-819303cec73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:5a:e0:00:4b:2a:48:14:64:f0:87:1d:a3:
                    60:58:19:b3:ff:09:9e:7f:83:c3:b9:74:ab:fe:07:
                    c9:2a:6c:db:32:de:fc:37:b9:77:ac:4d:99:91:7e:
                    a5:5a:64:c5:72:9e:ce:5e:ef:b6:36:2d:92:63:89:
                    db:9e:22:54:66:94:84:49:27:4b:29:4f:4b:90:8d:
                    3c:c3:b1:3f:30:b0:f3:0a:8d:29:d9:d5:0d:a5:f2:
                    da:5c:54:ff:6e:df:c7:e4:a8:00:82:5d:8c:ed:88:
                    56:b3:6f:83:f0:a9:46:22:91:f9:45:ae:6b:55:77:
                    40:c7:f4:89:6f:a4:37:c5:f0:72:62:79:36:1b:1b:
                    8b:1e:ca:25:75:c0:22:80:3e:cc:90:d5:45:0c:c4:
                    87:43:48:ad:13:04:51:f7:6e:05:a0:8f:e7:01:43:
                    3f:6a:fe:27:0a:d8:ee:6e:d4:f3:18:ef:e1:eb:47:
                    a2:c7:3b:d9:af:61:61:b2:8c:a6:0c:74:f9:f9:56:
                    b7:8f:7c:5a:0b:c4:9e:8a:d8:2c:2f:c9:87:c3:8e:
                    20:2a:58:52:34:b2:f5:74:d3:43:04:6d:39:b8:06:
                    8b:6f:ad:55:ad:d2:4c:ab:3c:30:ff:54:52:05:79:
                    36:87:50:76:ac:19:1f:13:aa:c6:38:ca:ea:2a:d9:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:DD:A6:83:EE:47:2B:8A:20:ED:69:E1:55:F1:F6:7A:A3:28:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce7c41b-8ef0-33cd-b62c-4bb5d8b413dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.9.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:88:d5:d7:32:99:c6:9a:58:45:d3:50:2d:59:e8:ec:19:fa:
         50:92:fb:00:97:74:29:09:3f:6f:00:6e:b7:61:d3:87:aa:95:
         77:0f:f7:cd:69:b9:23:73:ef:d8:b0:46:51:2a:60:81:d4:2a:
         7b:ab:dd:3f:16:a0:89:7f:bd:29:8b:fc:51:1c:fe:d3:9a:c3:
         29:6e:04:d7:68:7b:9b:0c:f0:82:f4:51:82:69:09:f0:eb:60:
         8b:15:d6:97:a5:94:47:37:30:de:9f:20:2a:f3:fa:35:71:23:
         72:fe:30:93:b6:cc:41:b7:a6:ee:27:da:a1:a3:ef:03:d5:47:
         ef:f4:21:3d:e3:24:e5:d6:20:f1:ba:d7:f1:90:f2:34:2b:c2:
         33:ac:34:58:18:24:c1:14:a5:63:d9:69:f6:6d:68:d3:ed:66:
         31:6a:fe:70:13:b9:86:37:b6:9d:5a:79:00:f8:8b:c3:9a:65:
         3d:7e:b5:4a:9f:89:51:60:9e:dd:bc:7d:85:7b:6b:cc:af:2c:
         33:53:18:7b:1a:20:9f:4f:8a:c3:e5:87:e5:7a:77:7b:3b:18:
         b9:54:b8:59:c7:05:6a:89:6c:ec:ae:7b:df:cb:2a:5a:ad:97:
         78:10:e8:47:aa:20:12:b7:95:cf:d9:7d:d4:63:25:e9:a6:06:
         5e:e0:42:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2jFMwrosxnHsnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
MmQ0YzM4MDctOTJlZi00OGM2LTg1YjEtODE5MzAzY2VjNzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZJa4ABLKkgUZPCHHaNgWBmz/wmef4PDuXSr
/gfJKmzbMt78N7l3rE2ZkX6lWmTFcp7OXu+2Ni2SY4nbniJUZpSESSdLKU9LkI08
w7E/MLDzCo0p2dUNpfLaXFT/bt/H5KgAgl2M7YhWs2+D8KlGIpH5Ra5rVXdAx/SJ
b6Q3xfByYnk2GxuLHsoldcAigD7MkNVFDMSHQ0itEwRR924FoI/nAUM/av4nCtju
btTzGO/h60eixzvZr2FhsoymDHT5+Va3j3xaC8SeitgsL8mHw44gKlhSNLL1dNND
BG05uAaLb61VrdJMqzww/1RSBXk2h1B2rBkfE6rGOMrqKtk8pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYn3aaD7kcriiDtaeFV8fZ6oyhPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNlN2M0MWItOGVmMC0z
M2NkLWI2MmMtNGJiNWQ4YjQxM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwlAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2I1dcymcaaWEXTUC1Z6OwZ+lCS+wCXdCkJP28Abrdh04eqlXcP981p
uSNz79iwRlEqYIHUKnur3T8WoIl/vSmL/FEc/tOawyluBNdoe5sM8IL0UYJpCfDr
YIsV1pellEc3MN6fICrz+jVxI3L+MJO2zEG3pu4n2qGj7wPVR+/0IT3jJOXWIPG6
1/GQ8jQrwjOsNFgYJMEUpWPZafZtaNPtZjFq/nATuYY3tp1aeQD4i8OaZT1+tUqf
iVFgnt28fYV7a8yvLDNTGHsaIJ9PisPlh+V6d3s7GLlUuFnHBWqJbOyue9/LKlqt
l3gQ6EeqIBK3lc/ZfdRjJemmBl7gQhc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:43 2026 by rpki-client