Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac18a72d-b0df-3c55-8d9a-df0f36dfc506.roa
File:                     ac18a72d-b0df-3c55-8d9a-df0f36dfc506.roa (raw, json)
Hash identifier:          vrOKYrGAcEnIvbYG8WlHzQWFTD5nKJGCzt96iO4rhrQ=
Subject key identifier:   C9:FE:B8:51:32:2B:E7:B1:94:07:8A:14:5D:00:16:E8:1C:A7:D2:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F7A2E831CDA00E4DCFABC5900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac18a72d-b0df-3c55-8d9a-df0f36dfc506.roa
Signing time:             Mon 12 Oct 2026 11:57:47 +0000
ROA not before:           Mon 12 Oct 2026 11:57:47 +0000
ROA not after:            Sun 10 Jan 2027 12:57:47 +0000
asID:                     32787
IP address blocks:        23.57.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:2e:83:1c:da:00:e4:dc:fa:bc:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 12 11:57:47 2026 GMT
            Not After : Jan 10 12:57:47 2027 GMT
        Subject: CN=69b02424-f3c3-400a-895e-dd0ad8cb6c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:67:73:83:8e:05:dd:37:ba:cb:12:90:5f:
                    98:21:c8:e2:39:78:00:72:64:54:ee:cb:44:31:88:
                    42:87:f7:44:09:89:95:75:2c:23:24:ee:71:fd:50:
                    48:9c:1d:a6:75:53:f0:b2:cc:72:19:f8:43:aa:ba:
                    e1:6c:ea:2c:b7:d4:f7:ed:52:3f:a9:e9:d2:33:62:
                    9c:88:da:85:ce:2b:1a:f1:22:7b:da:de:91:78:dc:
                    9c:de:d8:89:58:67:6f:fd:27:41:24:95:4c:b9:6f:
                    61:26:d9:04:d6:f9:32:65:b3:70:b8:8d:24:36:37:
                    e3:5b:a9:22:c4:40:24:4c:81:09:f9:db:a9:93:5a:
                    05:6a:3f:42:f0:dd:46:6e:3f:c9:d6:79:40:0a:c2:
                    0b:ae:54:30:99:ee:72:3e:8f:8d:47:28:ba:7f:9a:
                    94:fb:04:9d:49:e6:e3:4d:f4:a8:9e:c4:1c:6a:36:
                    88:0c:4e:ed:c9:02:6c:d1:ba:f9:80:9d:57:d7:d7:
                    3a:cf:0b:4a:18:c6:a1:cd:9c:3e:63:29:2f:4f:90:
                    5e:6f:84:cc:92:f2:db:e4:1d:7b:d4:fe:b4:38:c6:
                    02:25:d1:c9:22:90:54:46:06:02:34:03:7a:09:b0:
                    ed:dc:01:12:17:5d:2f:6c:35:3a:15:49:4a:4e:b4:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:B8:51:32:2B:E7:B1:94:07:8A:14:5D:00:16:E8:1C:A7:D2:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac18a72d-b0df-3c55-8d9a-df0f36dfc506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.57.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:37:15:33:15:d7:63:8d:a2:ab:33:f5:7f:28:7e:5b:83:
         68:33:dd:ff:35:53:c8:6b:b2:2d:54:44:51:1e:67:a1:85:f0:
         30:22:ad:d5:61:17:3a:7a:71:da:44:3f:2c:d0:45:e4:ef:19:
         15:1c:a3:96:d9:b6:6f:cc:a6:37:f6:c6:3e:cf:02:b6:b8:f6:
         27:71:c7:b2:af:de:58:30:25:af:a2:74:9c:04:04:c7:09:0b:
         e0:ab:e6:95:a9:b2:e1:d7:ea:d8:42:a8:56:01:bc:4f:86:ec:
         d3:a4:7e:e2:e4:d2:4b:9e:fe:5b:89:6a:de:f7:63:5b:71:cc:
         e8:25:f0:52:f6:3e:86:df:a2:f4:2c:4c:c1:b5:1f:a5:3a:80:
         b0:5e:12:f7:a8:2d:3f:65:07:54:ac:b9:5d:6b:46:2d:46:10:
         ff:12:cc:06:7f:55:7a:8e:04:4f:b3:18:20:e3:dd:d4:7a:01:
         03:d4:ab:e2:0a:21:e6:8c:03:13:f5:2a:6b:e7:24:e3:90:88:
         24:91:68:5d:eb:41:bf:8e:02:a9:7c:46:e5:fa:34:04:93:3c:
         fd:52:ac:70:da:46:b0:8b:97:5a:7f:9c:08:8d:2f:2f:fe:ef:
         0e:28:15:41:1d:0f:42:66:bc:61:7d:43:00:0c:e0:cc:50:76:
         f8:21:a3:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96LoMc2gDk3Pq8WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MTAxMjExNTc0N1oXDTI3MDExMDEyNTc0N1owLzEtMCsGA1UEAxMk
NjliMDI0MjQtZjNjMy00MDBhLTg5NWUtZGQwYWQ4Y2I2Yzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lpnc4OOBd03ussSkF+YIcjiOXgAcmRU7stE
MYhCh/dECYmVdSwjJO5x/VBInB2mdVPwssxyGfhDqrrhbOost9T37VI/qenSM2Kc
iNqFzisa8SJ72t6ReNyc3tiJWGdv/SdBJJVMuW9hJtkE1vkyZbNwuI0kNjfjW6ki
xEAkTIEJ+dupk1oFaj9C8N1Gbj/J1nlACsILrlQwme5yPo+NRyi6f5qU+wSdSebj
TfSonsQcajaIDE7tyQJs0br5gJ1X19c6zwtKGMahzZw+YykvT5Beb4TMkvLb5B17
1P60OMYCJdHJIpBURgYCNAN6CbDt3AESF10vbDU6FUlKTrSyzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMn+uFEyK+exlAeKFF0AFugcp9KdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWMxOGE3MmQtYjBkZi0z
YzU1LThkOWEtZGYwZjM2ZGZjNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzlsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5sNxUzFddjjaKrM/V/KH5bg2gz3f81U8hrsi1URFEeZ6GF8DAirdVh
Fzp6cdpEPyzQReTvGRUco5bZtm/Mpjf2xj7PAra49idxx7Kv3lgwJa+idJwEBMcJ
C+Cr5pWpsuHX6thCqFYBvE+G7NOkfuLk0kue/luJat73Y1txzOgl8FL2PobfovQs
TMG1H6U6gLBeEveoLT9lB1SsuV1rRi1GEP8SzAZ/VXqOBE+zGCDj3dR6AQPUq+IK
IeaMAxP1KmvnJOOQiCSRaF3rQb+OAql8RuX6NASTPP1SrHDaRrCLl1p/nAiNLy/+
7w4oFUEdD0JmvGF9QwAM4MxQdvgho14=
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:02 2026 by rpki-client