Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa
File:                     9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa (raw, json)
Hash identifier:          NVTXXc+V+Bt4t9+J+7mFNuhg1/u4cwRQpmNcO1wg66U=
Subject key identifier:   F0:4E:64:E2:EA:04:94:93:7F:47:D8:F6:CD:5A:4E:DA:7A:42:DB:C7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4985ED55FD4E790AF0B53800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.211.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:ed:55:fd:4e:79:0a:f0:b5:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d826e11d-796b-4ee8-bf1a-be1f37031410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:a4:66:73:c5:45:13:cb:3b:22:09:e7:28:
                    18:78:5a:0a:a5:f8:97:11:75:b2:c8:b0:85:9a:d8:
                    09:95:e2:60:2c:d3:90:e0:4b:03:14:22:b4:04:fd:
                    72:ea:f7:0e:3c:c1:36:30:5f:4f:10:c4:46:90:c2:
                    48:39:b7:8e:8d:3e:22:a8:11:c6:a8:37:75:d0:3e:
                    b0:72:c0:12:6d:8a:5a:42:a4:80:a9:fb:01:ad:4d:
                    22:c0:48:8f:fd:a6:07:e6:05:86:c4:a4:76:dc:e0:
                    50:bf:54:78:28:8f:d3:0b:9e:65:d6:ec:c4:19:d9:
                    5c:d5:f0:a0:4a:8d:40:d7:74:49:49:29:2a:8a:aa:
                    48:af:79:f8:dc:06:3e:39:04:51:9b:ed:d0:be:32:
                    61:eb:2a:e4:c2:15:3f:d1:0c:fd:2c:ac:0f:b8:70:
                    ba:35:9d:92:75:0f:ce:71:3d:d6:d0:90:14:40:48:
                    b2:37:4b:56:a9:ee:8f:d9:98:44:f5:1d:9b:29:58:
                    e1:60:84:59:f3:db:0a:fe:8e:57:90:d3:18:20:3a:
                    5d:91:6a:b8:98:78:24:b9:c9:0e:6b:fa:9e:8e:21:
                    bc:4b:bd:62:b9:6f:0e:32:6d:75:4d:dd:92:35:86:
                    9c:12:3c:18:c0:05:9f:ae:ed:bd:e0:a5:e0:13:ef:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4E:64:E2:EA:04:94:93:7F:47:D8:F6:CD:5A:4E:DA:7A:42:DB:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:10:76:8c:7e:22:85:31:13:ec:11:96:d9:33:ad:db:53:97:
         c0:5d:65:04:e0:e2:f4:cc:cb:1a:d9:5a:7c:c7:cc:da:69:03:
         8b:3f:f6:10:75:29:2e:2d:b0:77:be:81:ce:09:2c:0d:0e:79:
         ae:b0:fc:b5:67:fe:2b:9e:fc:82:4a:f5:26:cb:80:15:f4:16:
         d2:b2:9b:dd:ae:28:46:e7:f3:8e:c9:75:a7:1e:db:74:e4:43:
         dd:64:b8:e9:8b:25:6f:12:fe:3d:8d:c7:2a:63:0e:40:b1:51:
         4f:ec:fa:37:d0:df:66:f3:42:7c:61:c3:ab:20:31:af:35:8c:
         0a:f0:fc:02:cd:64:83:e5:3b:4f:0e:54:47:2d:6d:33:09:3b:
         ea:b5:23:c3:f6:10:75:2a:c8:de:e8:83:26:39:e2:9f:ec:ce:
         2b:4e:c6:be:f3:0c:8d:1e:56:2e:b2:1a:6e:de:ab:ba:6f:4b:
         c8:6e:68:b2:73:1e:fd:d2:52:11:20:de:a5:aa:c8:15:4c:83:
         a8:47:da:7b:5d:22:da:97:8e:b1:32:25:49:d1:5b:5d:04:1e:
         2c:73:8b:5d:fe:88:7e:e7:42:32:79:68:b0:be:df:12:9d:ff:
         d7:a4:a3:70:dd:57:f5:57:2a:1f:e2:14:9e:0d:e8:6f:76:7a:
         79:73:63:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhe1V/U55CvC1OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDgyNmUxMWQtNzk2Yi00ZWU4LWJmMWEtYmUxZjM3MDMxNDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5OkZnPFRRPLOyIJ5ygYeFoKpfiXEXWyyLCF
mtgJleJgLNOQ4EsDFCK0BP1y6vcOPME2MF9PEMRGkMJIObeOjT4iqBHGqDd10D6w
csASbYpaQqSAqfsBrU0iwEiP/aYH5gWGxKR23OBQv1R4KI/TC55l1uzEGdlc1fCg
So1A13RJSSkqiqpIr3n43AY+OQRRm+3QvjJh6yrkwhU/0Qz9LKwPuHC6NZ2SdQ/O
cT3W0JAUQEiyN0tWqe6P2ZhE9R2bKVjhYIRZ89sK/o5XkNMYIDpdkWq4mHgkuckO
a/qejiG8S71iuW8OMm11Td2SNYacEjwYwAWfru294KXgE+/PlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBOZOLqBJSTf0fY9s1aTtp6QtvHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM0ZWI2ZGUtYzJlNS0z
OTMzLWI4MGUtMjU3OWMxZDAyYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEQdox+IoUxE+wRltkzrdtTl8BdZQTg4vTMyxrZWnzHzNppA4s/9hB1
KS4tsHe+gc4JLA0Oea6w/LVn/iue/IJK9SbLgBX0FtKym92uKEbn847Jdace23Tk
Q91kuOmLJW8S/j2NxypjDkCxUU/s+jfQ32bzQnxhw6sgMa81jArw/ALNZIPlO08O
VEctbTMJO+q1I8P2EHUqyN7ogyY54p/szitOxr7zDI0eVi6yGm7eq7pvS8huaLJz
Hv3SUhEg3qWqyBVMg6hH2ntdItqXjrEyJUnRW10EHixzi13+iH7nQjJ5aLC+3xKd
/9eko3DdV/VXKh/iFJ4N6G92enlzYx0=
-----END CERTIFICATE-----
Generated at Sat Oct 24 08:28:09 2026 by rpki-client