Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5d36fd-c5f8-3599-9293-76fea56cd54f.roa
File:                     9f5d36fd-c5f8-3599-9293-76fea56cd54f.roa (raw, json)
Hash identifier:          ISOTTn1BNDm2mUJS0H3Vifkup5KBD/ome01Ha9J1g8I=
Subject key identifier:   76:78:32:77:8F:14:6B:02:29:AB:43:6A:48:6E:F9:50:D7:41:0C:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F96386AB2CB2C48D5DD8DF3C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5d36fd-c5f8-3599-9293-76fea56cd54f.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     35994
IP address blocks:        23.67.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:6a:b2:cb:2c:48:d5:dd:8d:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=af9defb4-deb1-496b-b9b0-2ee3eb2b9445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:be:10:d4:39:4e:72:76:16:e3:d6:e2:2d:
                    27:08:91:de:4e:39:06:1f:dd:d0:2e:03:8a:05:d8:
                    54:6e:32:7e:18:82:52:6c:d9:5e:69:6e:fe:e6:4b:
                    85:07:9e:e4:7e:55:84:85:38:59:b6:2b:67:70:0f:
                    11:93:f7:38:33:48:8e:bf:5a:0a:8a:b3:af:ea:12:
                    49:f4:e9:ad:c2:91:73:f0:4d:b5:34:fa:af:2d:47:
                    9b:4a:f0:5f:40:2c:5c:0a:ea:75:69:69:c6:3f:68:
                    50:4b:f5:a4:44:48:29:e3:de:7d:10:1f:9f:4a:2b:
                    76:ce:3e:7c:39:e9:ab:3a:42:eb:63:fb:85:3b:8a:
                    81:05:56:88:d0:79:7b:b7:16:ff:82:f6:66:72:3b:
                    cf:ff:86:b4:28:5b:1c:c6:1e:f6:6a:fa:70:69:1c:
                    3c:b7:c9:c6:90:60:eb:6f:83:0a:69:f4:aa:f7:e8:
                    6a:f7:73:34:1e:ae:2b:6d:c6:80:29:a0:6e:d6:5b:
                    67:7d:5e:d0:c7:54:0a:fe:b5:8c:ff:ce:66:3a:af:
                    d2:06:d9:81:4e:0f:b7:01:99:d3:46:b2:67:34:69:
                    51:8a:9a:97:bd:1f:05:80:53:0b:07:86:68:2a:63:
                    e4:10:57:0b:f7:c3:74:da:3b:d5:b9:d2:3a:ca:05:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:78:32:77:8F:14:6B:02:29:AB:43:6A:48:6E:F9:50:D7:41:0C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5d36fd-c5f8-3599-9293-76fea56cd54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.67.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9b:ba:57:ee:a1:c6:74:29:8b:7a:f0:ea:6e:15:0d:ec:fa:
         9f:b6:5f:d6:b6:f9:93:e3:80:f9:fa:7f:aa:84:48:f4:ef:e5:
         48:b5:c6:3f:b6:4a:1e:45:c4:5e:69:ad:05:a2:0e:f8:00:f2:
         3b:ff:f1:9a:9c:65:a3:89:87:d2:06:88:ea:03:ce:7e:4d:aa:
         b1:19:d3:85:66:db:f4:96:3d:58:3e:16:3c:9c:7f:7d:25:43:
         29:be:d7:bd:dc:c5:79:5a:ff:7f:c0:20:56:a0:ab:ac:51:06:
         87:98:83:47:3e:70:a3:cb:5b:00:46:9b:f4:e2:d3:3b:be:46:
         1c:b7:af:7a:08:79:fd:7f:92:7b:e6:92:78:d1:36:00:29:66:
         ab:ef:fb:c2:0c:65:72:84:be:f2:fc:e0:f6:55:2c:35:fd:fb:
         0a:58:5e:3f:45:94:09:ad:b6:96:bf:8c:e3:e7:01:47:e9:8b:
         60:64:38:b4:3f:52:28:68:73:ee:ec:1a:d7:77:90:b5:d2:3e:
         d0:ce:04:40:c7:4e:a7:23:52:e5:7c:9f:11:4a:f6:af:44:95:
         5e:6b:8f:c2:1f:37:80:4d:cb:b6:3f:4b:4a:f3:c8:cc:ff:c6:
         b4:6f:77:ce:75:11:ca:54:b5:af:51:dd:4a:6a:cf:f8:7f:c2:
         1a:2d:98:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOGqyyyxI1d2N88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk
YWY5ZGVmYjQtZGViMS00OTZiLWI5YjAtMmVlM2ViMmI5NDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMy+ENQ5TnJ2FuPW4i0nCJHeTjkGH93QLgOK
BdhUbjJ+GIJSbNleaW7+5kuFB57kflWEhThZtitncA8Rk/c4M0iOv1oKirOv6hJJ
9OmtwpFz8E21NPqvLUebSvBfQCxcCup1aWnGP2hQS/WkREgp4959EB+fSit2zj58
OemrOkLrY/uFO4qBBVaI0Hl7txb/gvZmcjvP/4a0KFscxh72avpwaRw8t8nGkGDr
b4MKafSq9+hq93M0Hq4rbcaAKaBu1ltnfV7Qx1QK/rWM/85mOq/SBtmBTg+3AZnT
RrJnNGlRipqXvR8FgFMLB4ZoKmPkEFcL98N02jvVudI6ygU/hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZ4MnePFGsCKatDakhu+VDXQQxrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWY1ZDM2ZmQtYzVmOC0z
NTk5LTkyOTMtNzZmZWE1NmNkNTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0P3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADubulfuocZ0KYt68OpuFQ3s+p+2X9a2+ZPjgPn6f6qESPTv5Ui1xj+2
Sh5FxF5prQWiDvgA8jv/8ZqcZaOJh9IGiOoDzn5NqrEZ04Vm2/SWPVg+Fjycf30l
Qym+173cxXla/3/AIFagq6xRBoeYg0c+cKPLWwBGm/Ti0zu+Rhy3r3oIef1/knvm
knjRNgApZqvv+8IMZXKEvvL84PZVLDX9+wpYXj9FlAmttpa/jOPnAUfpi2BkOLQ/
Uihoc+7sGtd3kLXSPtDOBEDHTqcjUuV8nxFK9q9ElV5rj8IfN4BNy7Y/S0rzyMz/
xrRvd851EcpUta9R3Upqz/h/whotmKY=
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:12:47 2026 by rpki-client