Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e803f80a-8363-34ec-afa6-52eb1032763f.roa
File:                     e803f80a-8363-34ec-afa6-52eb1032763f.roa (raw, json)
Hash identifier:          79tgnYdmO1a+yJyHDwVaaBlD2ZXpkYbdvPpK8bbJtYo=
Subject key identifier:   5A:38:FE:7B:F7:0E:CA:63:FD:CE:8D:3E:8B:A8:0F:A3:E0:7B:A2:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F093CF5ACF5CC37375D695120
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e803f80a-8363-34ec-afa6-52eb1032763f.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     9498
IP address blocks:        23.1.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f5:ac:f5:cc:37:37:5d:69:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=adacaa99-20b6-4d10-a22a-5eafad5a0c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:cd:32:8e:c2:17:b3:18:7d:8f:3d:a2:a7:
                    54:0a:b3:d0:05:c0:f9:1a:8e:fe:74:b1:ba:62:e1:
                    22:0d:a8:01:9a:76:96:3f:9c:d6:0a:07:c6:23:bb:
                    0b:bb:68:c9:10:27:b3:4f:6f:f6:fd:37:cd:2c:0e:
                    2a:f0:c4:65:6c:72:9f:57:19:11:02:36:16:07:9c:
                    c6:a7:de:c3:d4:b2:fc:63:de:d3:15:25:78:5a:62:
                    6d:1b:3c:92:3a:84:0a:7a:18:81:e0:f0:bf:e4:03:
                    68:0d:fd:a0:95:dd:4a:a9:01:f5:55:89:73:4c:b2:
                    69:18:fa:3c:47:ec:80:db:f7:48:c2:fc:17:f6:0c:
                    10:67:8f:be:cc:37:f0:0d:6a:ba:52:7b:2c:6a:64:
                    0e:6e:3e:f3:f3:73:0c:22:2b:c4:6d:2e:b0:df:23:
                    07:6c:da:c5:83:49:73:9f:a1:50:3a:a3:e3:3e:0d:
                    fc:da:91:ce:d8:0d:5a:92:77:1e:75:53:33:ea:95:
                    c3:57:eb:10:fb:4c:3f:b7:0d:03:b7:b3:a2:b6:6c:
                    fb:a4:0a:07:20:0e:a7:47:fb:85:b8:51:46:7b:d7:
                    46:d3:e1:f7:35:a0:31:d2:f8:cf:47:bd:75:0a:78:
                    1a:3f:bc:07:fa:c5:f7:b1:a0:db:aa:fd:ae:7f:08:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:38:FE:7B:F7:0E:CA:63:FD:CE:8D:3E:8B:A8:0F:A3:E0:7B:A2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e803f80a-8363-34ec-afa6-52eb1032763f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.1.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:74:bc:7f:70:9b:eb:69:5c:8d:66:09:64:12:e4:41:dc:
         53:1b:12:d9:e4:1e:a1:02:e9:ef:96:32:de:a5:7d:93:d9:b8:
         05:89:5e:ad:48:dd:e7:7d:9c:50:c0:4e:3a:2f:3e:00:99:e3:
         76:05:16:25:07:4b:4a:c7:6b:ae:d8:bc:8e:36:62:e3:0b:ba:
         d6:ec:b2:18:4a:6d:6d:69:c7:70:4e:9e:8a:a8:38:8a:e9:fe:
         af:9c:1f:2c:b7:79:11:68:2e:b3:12:99:ee:b4:2e:ff:2f:37:
         a3:a3:08:e6:d2:a3:07:f0:0c:d2:e4:bd:2e:5d:ae:95:ef:d0:
         d3:b5:75:82:78:00:9a:22:aa:16:7f:8b:8a:6d:e7:0b:3d:b6:
         51:59:3e:0d:c1:fe:e5:33:65:b8:07:84:21:db:69:0d:0b:a0:
         a1:7b:9e:ee:ee:57:7e:1e:f5:3b:66:c5:da:a3:6e:54:6c:c5:
         50:7a:c8:69:c1:44:f7:18:98:3d:16:8d:c1:b9:92:cd:dd:6e:
         86:ad:af:15:0c:5d:14:b3:f4:8e:c4:ae:03:b1:24:08:e5:9c:
         9a:62:17:fa:74:a9:e6:77:f5:2d:0e:0e:8b:10:73:b1:45:fd:
         37:ae:98:14:fa:f5:ad:31:6f:5f:b2:46:cf:7d:a0:52:74:1e:
         31:fc:d7:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPWs9cw3N11pUSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
YWRhY2FhOTktMjBiNi00ZDEwLWEyMmEtNWVhZmFkNWEwYzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6zNMo7CF7MYfY89oqdUCrPQBcD5Go7+dLG6
YuEiDagBmnaWP5zWCgfGI7sLu2jJECezT2/2/TfNLA4q8MRlbHKfVxkRAjYWB5zG
p97D1LL8Y97TFSV4WmJtGzySOoQKehiB4PC/5ANoDf2gld1KqQH1VYlzTLJpGPo8
R+yA2/dIwvwX9gwQZ4++zDfwDWq6UnssamQObj7z83MMIivEbS6w3yMHbNrFg0lz
n6FQOqPjPg382pHO2A1akncedVMz6pXDV+sQ+0w/tw0Dt7Oitmz7pAoHIA6nR/uF
uFFGe9dG0+H3NaAx0vjPR711CngaP7wH+sX3saDbqv2ufwg5bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFo4/nv3Dspj/c6NPouoD6Pge6LQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTgwM2Y4MGEtODM2My0z
NGVjLWFmYTYtNTJlYjEwMzI3NjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJPdLx/cJvraVyNZglkEuRB3FMbEtnkHqEC6e+WMt6lfZPZuAWJXq1I
3ed9nFDATjovPgCZ43YFFiUHS0rHa67YvI42YuMLutbsshhKbW1px3BOnoqoOIrp
/q+cHyy3eRFoLrMSme60Lv8vN6OjCObSowfwDNLkvS5drpXv0NO1dYJ4AJoiqhZ/
i4pt5ws9tlFZPg3B/uUzZbgHhCHbaQ0LoKF7nu7uV34e9TtmxdqjblRsxVB6yGnB
RPcYmD0WjcG5ks3dboatrxUMXRSz9I7ErgOxJAjlnJpiF/p0qeZ39S0ODosQc7FF
/TeumBT69a0xb1+yRs99oFJ0HjH818M=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:21 2026 by rpki-client