Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eedd5c2b-5199-3410-bb8a-09e21dac6d12.roa
File:                     eedd5c2b-5199-3410-bb8a-09e21dac6d12.roa (raw, json)
Hash identifier:          C8zg61guaQRf8ILQFIkC97p9w5QwfB0e4qpREp/JdwA=
Subject key identifier:   D9:C9:BD:C9:AE:20:E6:16:79:36:87:8A:C2:FD:F0:BF:8E:31:85:27
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD8F070E9D6E985AE2E3B13C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eedd5c2b-5199-3410-bb8a-09e21dac6d12.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     20940
IP address blocks:        23.192.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:70:e9:d6:e9:85:ae:2e:3b:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=2d94516b-3555-443b-83fa-d16ab4c283df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:45:ce:6d:9c:01:e3:02:9f:fb:ce:8c:97:33:
                    b7:c1:51:97:ed:f5:49:1d:f8:5d:8b:f3:64:1b:32:
                    ab:3a:98:97:d8:ae:a3:ec:dc:46:71:18:60:3a:57:
                    46:16:f8:1e:cd:98:de:7b:8c:5a:de:3a:eb:3e:89:
                    2a:84:fc:d8:69:f0:a9:15:4d:36:7d:42:da:18:12:
                    c4:c0:56:30:68:b2:a0:17:bf:e4:63:d1:6e:ac:b3:
                    b5:71:3f:1d:85:8c:f3:9a:a8:3d:50:03:ea:98:e6:
                    ec:94:8c:f7:1f:7f:6f:80:ad:23:fb:aa:88:94:5e:
                    2d:18:99:ef:a3:aa:e6:e4:58:2e:3a:d1:d0:24:b3:
                    cf:28:b8:f8:44:98:6a:59:06:82:91:9c:a8:98:24:
                    b1:b0:b9:d1:8c:a6:b9:69:6d:f3:43:b1:d8:7f:b8:
                    b4:0a:b8:77:34:47:c3:07:bb:fe:93:4d:e0:ba:7c:
                    6c:78:bc:29:50:aa:b0:80:2f:ba:2e:9a:b0:8e:3e:
                    bf:7a:d5:54:b7:73:e5:6e:7c:b4:60:58:e7:4d:32:
                    08:c8:20:a9:d9:10:99:7a:29:7e:21:56:35:26:8b:
                    24:c7:14:2d:f1:51:68:d6:ef:c6:b3:1e:40:ed:26:
                    e0:00:87:b5:47:c5:60:1d:50:37:3a:98:f5:0a:b1:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C9:BD:C9:AE:20:E6:16:79:36:87:8A:C2:FD:F0:BF:8E:31:85:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eedd5c2b-5199-3410-bb8a-09e21dac6d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:56:c9:79:54:9a:cc:23:7a:84:28:12:93:13:bb:36:3b:4c:
         20:51:6e:be:40:dd:9e:de:91:00:68:aa:82:41:54:94:ee:e7:
         84:12:12:47:7d:01:56:69:f6:7f:3c:60:dd:a0:0a:fa:07:09:
         27:7e:b1:5c:73:dd:b9:06:0c:d6:03:ba:92:f9:3e:a4:d7:eb:
         83:89:93:c7:cc:d5:6e:50:81:6f:cc:aa:0c:83:6a:f6:e5:1c:
         5e:5a:b6:5a:ff:10:15:57:ae:9f:1c:e7:d5:5c:4a:a8:15:5d:
         1d:d4:95:ee:da:03:41:e4:1c:d6:59:80:f9:96:7b:a4:b1:d9:
         f5:d7:f7:a5:f3:87:b2:45:2a:14:8b:65:d9:a5:60:52:92:75:
         18:85:1b:82:03:af:1b:2f:8b:d0:5c:82:31:e0:68:56:72:82:
         41:51:c0:e7:b4:4d:39:b1:05:ba:67:01:5c:5b:38:52:23:c9:
         b6:d4:e9:38:be:a5:f4:ee:1f:aa:fd:82:22:7d:38:1f:dc:be:
         30:ee:59:33:fd:87:3f:65:88:49:22:be:db:03:93:24:2a:d7:
         a0:19:51:b8:4b:b1:9a:85:b8:a2:df:0b:cc:67:4d:4d:ec:d2:
         b7:8d:ba:d4:9b:ce:cb:66:91:54:30:a8:87:10:61:1f:41:0f:
         33:91:f9:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HDp1umFri47E8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
MmQ5NDUxNmItMzU1NS00NDNiLTgzZmEtZDE2YWI0YzI4M2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EXObZwB4wKf+86MlzO3wVGX7fVJHfhdi/Nk
GzKrOpiX2K6j7NxGcRhgOldGFvgezZjee4xa3jrrPokqhPzYafCpFU02fULaGBLE
wFYwaLKgF7/kY9FurLO1cT8dhYzzmqg9UAPqmObslIz3H39vgK0j+6qIlF4tGJnv
o6rm5FguOtHQJLPPKLj4RJhqWQaCkZyomCSxsLnRjKa5aW3zQ7HYf7i0Crh3NEfD
B7v+k03gunxseLwpUKqwgC+6Lpqwjj6/etVUt3Plbny0YFjnTTIIyCCp2RCZeil+
IVY1JoskxxQt8VFo1u/Gsx5A7SbgAIe1R8VgHVA3Opj1CrGxWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnJvcmuIOYWeTaHisL98L+OMYUnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWVkZDVjMmItNTE5OS0z
NDEwLWJiOGEtMDllMjFkYWM2ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8DtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNWyXlUmswjeoQoEpMTuzY7TCBRbr5A3Z7ekQBoqoJBVJTu54QSEkd9
AVZp9n88YN2gCvoHCSd+sVxz3bkGDNYDupL5PqTX64OJk8fM1W5QgW/MqgyDavbl
HF5atlr/EBVXrp8c59VcSqgVXR3Ule7aA0HkHNZZgPmWe6Sx2fXX96Xzh7JFKhSL
ZdmlYFKSdRiFG4IDrxsvi9BcgjHgaFZygkFRwOe0TTmxBbpnAVxbOFIjybbU6Ti+
pfTuH6r9giJ9OB/cvjDuWTP9hz9liEkivtsDkyQq16AZUbhLsZqFuKLfC8xnTU3s
0reNutSbzstmkVQwqIcQYR9BDzOR+dc=
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:30:34 2026 by rpki-client