Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2e7ebd8-011e-3d39-b1b7-d21a478dcd68.roa
File:                     a2e7ebd8-011e-3d39-b1b7-d21a478dcd68.roa (raw, json)
Hash identifier:          2xBvvNo5UmIc1cac3Ud1sacTkamIOcNhSpRz1LGnZXk=
Subject key identifier:   DD:53:F2:5D:46:44:CB:DD:94:34:E4:64:53:17:3A:0F:FA:ED:7C:66
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DFA708AE1B0BA5C550D647B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2e7ebd8-011e-3d39-b1b7-d21a478dcd68.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     20940
IP address blocks:        23.205.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:8a:e1:b0:ba:5c:55:0d:64:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=1b7da8eb-30ad-4d67-ad89-0ed50463c8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:5c:7f:28:8a:ba:60:7a:6f:c0:94:a8:db:
                    71:bb:bc:c5:11:26:fb:77:7b:5c:c7:39:c4:07:5c:
                    6e:6f:8f:84:af:55:4a:64:b0:ed:d2:db:b1:2a:0c:
                    c0:e6:d8:6d:c0:1a:9a:e5:27:b1:86:41:3d:88:e9:
                    48:3d:06:9a:47:06:8d:d3:34:d7:57:84:26:7b:88:
                    d5:16:1a:b5:bc:0a:c4:11:5f:99:46:0c:84:9d:4f:
                    7f:5c:de:c1:34:2f:b2:d4:57:c8:cd:ad:70:e9:e6:
                    68:28:13:41:f0:8f:d3:b9:66:bc:45:12:d3:7e:3c:
                    88:ed:a5:36:ae:73:cc:9a:9a:1b:60:8c:04:78:c4:
                    7e:c4:a8:42:ca:56:d9:8b:55:15:68:88:27:28:83:
                    23:a6:50:65:d3:5a:f1:b9:5d:85:53:6a:c6:9e:27:
                    02:d3:52:3d:e2:cc:5a:fa:51:f8:b1:02:70:fe:bc:
                    2f:36:60:55:2a:ba:2a:ad:08:db:aa:77:7c:c4:d3:
                    0d:66:37:86:a0:9c:0e:f9:bc:c2:60:d8:64:2b:67:
                    fc:d4:c3:0a:73:eb:92:46:46:2a:e1:33:57:08:52:
                    a0:10:ca:0d:62:e0:76:04:41:7c:76:63:82:3e:60:
                    b3:28:1f:44:24:cb:48:5a:72:fa:4b:f2:5b:e2:a8:
                    3e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:53:F2:5D:46:44:CB:DD:94:34:E4:64:53:17:3A:0F:FA:ED:7C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2e7ebd8-011e-3d39-b1b7-d21a478dcd68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:02:2a:5c:f2:72:05:c2:e5:fd:f6:90:07:ba:3f:9f:68:
         d9:ef:de:bd:fa:97:f3:a9:34:24:06:1a:8b:71:6d:30:a7:52:
         bd:2e:33:d5:30:4a:27:d8:c0:92:a2:a5:15:34:cf:32:85:13:
         3e:16:17:37:48:d0:da:90:62:80:ad:43:0c:9f:c8:1b:7f:1f:
         d0:56:73:91:ea:d7:42:1f:b9:4f:45:1a:c2:a3:ea:83:15:5e:
         86:b7:ff:b3:d7:78:5e:56:23:b1:35:1b:6d:50:19:72:72:42:
         0b:e2:de:58:22:39:56:52:8a:d3:ce:ed:b9:4b:61:3e:e7:5d:
         31:31:b8:d1:b3:e5:61:65:ef:e6:40:3c:ac:8e:b4:57:9b:44:
         0b:80:43:00:86:ba:41:18:1e:72:ca:f9:44:e7:a1:0f:3c:89:
         5b:96:11:6f:8c:db:48:cc:8f:95:fa:08:00:50:d7:7b:cb:1b:
         d5:ec:21:33:6f:54:14:c4:bc:4c:48:59:6e:c3:a4:7e:85:cd:
         9a:25:90:4c:2e:51:5b:89:eb:0a:b3:fe:55:d2:92:14:c5:e4:
         26:f4:42:c1:ef:c6:74:0b:ba:9a:ac:0e:1e:7b:56:57:52:67:
         f8:14:ee:2d:0f:89:fc:9e:7b:9a:2f:7f:3d:7d:34:48:fb:50:
         6c:f6:3d:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIrhsLpcVQ1kewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
MWI3ZGE4ZWItMzBhZC00ZDY3LWFkODktMGVkNTA0NjNjOGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogZcfyiKumB6b8CUqNtxu7zFESb7d3tcxznE
B1xub4+Er1VKZLDt0tuxKgzA5thtwBqa5SexhkE9iOlIPQaaRwaN0zTXV4Qme4jV
Fhq1vArEEV+ZRgyEnU9/XN7BNC+y1FfIza1w6eZoKBNB8I/TuWa8RRLTfjyI7aU2
rnPMmpobYIwEeMR+xKhCylbZi1UVaIgnKIMjplBl01rxuV2FU2rGnicC01I94sxa
+lH4sQJw/rwvNmBVKroqrQjbqnd8xNMNZjeGoJwO+bzCYNhkK2f81MMKc+uSRkYq
4TNXCFKgEMoNYuB2BEF8dmOCPmCzKB9EJMtIWnL6S/Jb4qg+7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1T8l1GRMvdlDTkZFMXOg/67XxmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTJlN2ViZDgtMDExZS0z
ZDM5LWIxYjctZDIxYTQ3OGRjZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF83eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4lAipc8nIFwuX99pAHuj+faNnv3r36l/OpNCQGGotxbTCnUr0uM9Uw
SifYwJKipRU0zzKFEz4WFzdI0NqQYoCtQwyfyBt/H9BWc5Hq10IfuU9FGsKj6oMV
Xoa3/7PXeF5WI7E1G21QGXJyQgvi3lgiOVZSitPO7blLYT7nXTExuNGz5WFl7+ZA
PKyOtFebRAuAQwCGukEYHnLK+UTnoQ88iVuWEW+M20jMj5X6CABQ13vLG9XsITNv
VBTEvExIWW7DpH6FzZolkEwuUVuJ6wqz/lXSkhTF5Cb0QsHvxnQLupqsDh57VldS
Z/gU7i0Pifyee5ovfz19NEj7UGz2PQY=
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:10:44 2026 by rpki-client