Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa
File:                     632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa (raw, json)
Hash identifier:          7UByES9WENPDr43rjUhcGGwTAyzaevkyHYKqX7JKqrk=
Subject key identifier:   09:D3:EC:A9:82:C4:8D:EE:33:4E:B8:BC:45:85:3B:72:BB:F0:35:D9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4F08277297FBC541342B0F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.219.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:27:72:97:fb:c5:41:34:2b:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=3aeabb9b-d265-4dfa-9d42-e1f771f68129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:2a:67:8c:d7:1f:4c:28:20:5e:12:d0:f9:
                    81:63:0b:33:90:fb:c5:81:a1:bb:93:42:5f:a8:55:
                    80:c2:46:03:d5:1c:ed:91:30:7e:38:e5:aa:b3:b0:
                    0e:ed:e6:a0:cb:ce:ad:68:4f:f8:a3:55:80:0e:5d:
                    5d:b2:91:29:f9:04:e1:17:11:60:bc:c6:51:16:5c:
                    67:97:a1:83:f8:f4:19:ac:5c:99:47:ba:c1:e2:91:
                    d5:10:bf:53:80:06:d3:a8:7b:29:c6:dd:7e:12:a0:
                    ad:bd:92:ce:af:60:31:66:34:9b:bf:03:79:63:12:
                    e8:f9:a7:91:0e:82:21:17:7b:81:9e:d5:96:7e:50:
                    79:cc:6b:cc:df:07:04:87:aa:f5:e5:ac:ab:07:04:
                    7c:df:d3:c1:bc:f5:f4:b4:26:73:3a:64:65:47:c2:
                    a3:46:f0:24:e0:3c:75:a2:e7:68:85:c2:a7:ab:e2:
                    06:0d:78:00:60:e1:2a:38:8e:f0:fc:30:a0:27:54:
                    e7:d1:11:f1:71:02:65:ad:d3:a8:57:20:3e:2a:86:
                    c4:c3:bd:4d:18:46:53:0e:09:9c:8e:b9:6f:1b:26:
                    d1:e4:38:be:58:29:56:2a:4d:c4:33:58:51:ed:eb:
                    32:d9:2a:71:fd:37:75:da:68:c1:00:25:d6:61:3b:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D3:EC:A9:82:C4:8D:EE:33:4E:B8:BC:45:85:3B:72:BB:F0:35:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a3:5c:ab:41:1a:14:b1:63:85:73:eb:ba:cb:9a:1f:f9:4d:
         61:ca:e1:38:d7:30:23:1e:c3:ab:bb:b0:bd:a4:95:5d:05:ee:
         8b:7d:a1:4b:83:31:0e:bf:99:d4:53:3c:34:a0:8a:ec:8b:6b:
         64:8c:37:37:3e:74:1c:bc:8b:9f:fe:8a:58:7d:d1:f3:1c:00:
         0c:dc:27:aa:5c:af:fe:49:df:33:90:bf:30:ad:34:ee:e1:79:
         4a:61:ae:d1:bc:43:40:95:b3:91:f4:ac:a6:cd:88:46:37:4e:
         1c:8c:af:95:52:02:dc:e2:bf:91:67:08:29:24:bf:fd:ff:da:
         b4:f5:b1:f0:9a:e2:80:d0:f2:7c:a8:14:ad:2e:dc:16:34:f8:
         a4:8d:ed:a6:2e:33:97:49:30:77:be:24:0f:dd:0f:dd:b7:6c:
         d1:25:b1:b1:01:b8:10:c3:4e:dc:78:a0:14:d5:95:e4:d3:4f:
         13:9a:55:c5:ab:26:c0:9d:2a:a7:fa:a2:7b:5b:40:2d:56:4c:
         5a:21:cc:51:24:54:2f:60:94:e2:85:27:69:d1:0a:6c:7b:c3:
         db:cf:e5:86:1f:db:d7:bd:9a:94:7b:89:7e:35:3f:1b:8e:8f:
         da:4a:f4:8d:9e:3e:42:d4:f3:83:de:68:1a:aa:4e:85:e8:dc:
         a1:e0:c8:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCdyl/vFQTQrDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
M2FlYWJiOWItZDI2NS00ZGZhLTlkNDItZTFmNzcxZjY4MTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZEqZ4zXH0woIF4S0PmBYwszkPvFgaG7k0Jf
qFWAwkYD1RztkTB+OOWqs7AO7eagy86taE/4o1WADl1dspEp+QThFxFgvMZRFlxn
l6GD+PQZrFyZR7rB4pHVEL9TgAbTqHspxt1+EqCtvZLOr2AxZjSbvwN5YxLo+aeR
DoIhF3uBntWWflB5zGvM3wcEh6r15ayrBwR839PBvPX0tCZzOmRlR8KjRvAk4Dx1
oudohcKnq+IGDXgAYOEqOI7w/DCgJ1Tn0RHxcQJlrdOoVyA+KobEw71NGEZTDgmc
jrlvGybR5Di+WClWKk3EM1hR7esy2Spx/Td12mjBACXWYTuZcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnT7KmCxI3uM064vEWFO3K78DXZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjMyYzJmZmUtZDBlZC0z
ZDAyLWExZDAtYjlkYWUwZDcxM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9vQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+jXKtBGhSxY4Vz67rLmh/5TWHK4TjXMCMew6u7sL2klV0F7ot9oUuD
MQ6/mdRTPDSgiuyLa2SMNzc+dBy8i5/+ilh90fMcAAzcJ6pcr/5J3zOQvzCtNO7h
eUphrtG8Q0CVs5H0rKbNiEY3ThyMr5VSAtziv5FnCCkkv/3/2rT1sfCa4oDQ8nyo
FK0u3BY0+KSN7aYuM5dJMHe+JA/dD923bNElsbEBuBDDTtx4oBTVleTTTxOaVcWr
JsCdKqf6ontbQC1WTFohzFEkVC9glOKFJ2nRCmx7w9vP5YYf29e9mpR7iX41PxuO
j9pK9I2ePkLU84PeaBqqToXo3KHgyAc=
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:28:13 2026 by rpki-client