Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa
File:                     cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa (raw, json)
Hash identifier:          9gyGt+8hTAdd0d8XgEWN+AccfcShKQnNFzj5EJxyrCk=
Subject key identifier:   B9:C9:8A:EA:7C:11:B5:30:EE:96:46:6C:07:DA:DF:DB:7D:44:E2:8F
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F4328584EE7BCBAF1C199914D85659780
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     39937
IP address blocks:        23.160.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ba:f1:c1:99:91:4d:85:65:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=925a6ec7-0b0f-491f-b99d-1b8ff41614dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ab:a8:ff:e8:ff:ad:d6:71:23:f8:eb:93:0f:
                    5c:77:62:59:d1:0f:32:c3:a1:85:fc:83:f1:c3:ef:
                    31:4e:c6:3d:f8:18:08:42:55:b4:41:07:36:6d:2c:
                    63:e8:3f:76:76:cc:23:76:7b:57:a7:77:3b:da:22:
                    eb:b9:7d:ad:c2:f7:88:f7:e7:11:52:39:ea:b7:a7:
                    d4:4f:a1:6f:11:2e:b8:78:c0:6b:a4:e8:a3:da:b8:
                    ed:05:c3:23:d6:c4:47:78:33:f2:79:47:a2:a8:78:
                    3b:97:4d:c7:78:ea:b9:94:f1:db:59:70:30:17:2a:
                    6d:2b:74:ac:03:83:8f:f1:ae:c9:34:37:04:18:c1:
                    d9:cb:bf:48:1e:76:5e:c8:a8:c1:d7:90:2e:2f:35:
                    f1:1d:a0:31:b2:e1:4b:6c:d0:c3:25:e3:12:df:1d:
                    cc:08:f9:79:25:e0:99:bf:e0:40:46:6d:b1:f1:8f:
                    71:5c:71:03:57:94:47:ed:12:01:93:b0:04:88:2d:
                    bd:d7:e1:4a:01:aa:06:71:57:fc:51:60:cb:c7:02:
                    42:41:70:c9:ac:ea:9f:0b:76:8d:07:a4:39:ca:9a:
                    82:6d:43:ee:8b:20:49:19:c6:8b:bc:46:4b:6f:40:
                    0c:6f:38:ac:9a:f7:65:c0:57:f8:d1:f5:ce:0d:1d:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C9:8A:EA:7C:11:B5:30:EE:96:46:6C:07:DA:DF:DB:7D:44:E2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:46:c8:78:df:e0:7c:fb:6e:fb:22:43:76:f3:ec:12:9f:a0:
         55:0f:77:d5:08:23:99:32:c3:48:7b:29:41:c7:c1:4b:7a:ce:
         3b:b0:8f:28:a9:f8:c2:0c:18:91:6f:82:51:28:8f:87:2d:23:
         e9:ad:a4:1b:54:e9:26:c9:d7:ef:93:0c:6d:9c:af:bd:11:b4:
         c6:96:1f:62:d2:e3:13:2b:36:28:32:2f:fd:b3:2d:77:50:f0:
         7a:f3:e2:80:7d:12:8f:a8:06:80:7e:20:4b:76:eb:66:e7:21:
         03:91:33:08:ec:b6:50:c3:ec:74:4b:1f:37:fc:a1:0f:6d:54:
         a4:75:79:45:41:75:3e:38:65:44:2e:fd:a9:25:1c:04:ba:83:
         59:dd:d9:28:d7:6f:64:71:8b:07:42:df:e4:d8:2d:56:9a:75:
         4a:d3:e0:ff:1b:8e:9b:9d:0d:38:43:21:a6:b1:c5:a1:cb:09:
         70:bc:d8:70:88:dc:e4:32:a5:2b:dd:45:58:60:68:07:ca:e3:
         56:d3:bd:1e:44:b8:29:7a:3e:b0:ca:d7:d0:63:35:c7:7d:cc:
         9c:e1:be:b5:f2:dc:a9:c1:41:1f:c5:e3:9b:40:ca:ae:6c:12:
         dd:c0:70:34:65:c8:c7:1c:9f:e2:36:cd:be:6d:7e:0d:d9:16:
         0f:e4:2a:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLrxwZmRTYVll4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkODcxNWYtNmQ0YS00YjlmLTkzZmYtOGViMjUxNTg4
ZjYxMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
OTI1YTZlYzctMGIwZi00OTFmLWI5OWQtMWI4ZmY0MTYxNGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKuo/+j/rdZxI/jrkw9cd2JZ0Q8yw6GF/IPx
w+8xTsY9+BgIQlW0QQc2bSxj6D92dswjdntXp3c72iLruX2twveI9+cRUjnqt6fU
T6FvES64eMBrpOij2rjtBcMj1sRHeDPyeUeiqHg7l03HeOq5lPHbWXAwFyptK3Ss
A4OP8a7JNDcEGMHZy79IHnZeyKjB15AuLzXxHaAxsuFLbNDDJeMS3x3MCPl5JeCZ
v+BARm2x8Y9xXHEDV5RH7RIBk7AEiC291+FKAaoGcVf8UWDLxwJCQXDJrOqfC3aN
B6Q5ypqCbUPuiyBJGcaLvEZLb0AMbzismvdlwFf40fXODR06+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLnJiup8EbUw7pZGbAfa39t9ROKPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4
NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIyNTE1ODhmNjEvY2YwM2M0YmQtZWI3Yy0z
Y2VlLTk5MDAtZDNjYzljNGQxMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTlkODcxNWYtNmQ0YS00YjlmLTkz
ZmYtOGViMjUxNTg4ZjYxL2E5ZDg3MTVmLTZkNGEtNGI5Zi05M2ZmLThlYjI1MTU4
OGY2MS5jcmwwHwYDVR0jBBgwFoAUpiXWfjyryXpYmjCju/XhvKZbD3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIy
NTE1ODhmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6B4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZGyHjf4Hz7bvsiQ3bz7BKfoFUPd9UII5kyw0h7KUHHwUt6zjuwjyip
+MIMGJFvglEoj4ctI+mtpBtU6SbJ1++TDG2cr70RtMaWH2LS4xMrNigyL/2zLXdQ
8Hrz4oB9Eo+oBoB+IEt262bnIQORMwjstlDD7HRLHzf8oQ9tVKR1eUVBdT44ZUQu
/aklHAS6g1nd2SjXb2RxiwdC3+TYLVaadUrT4P8bjpudDThDIaaxxaHLCXC82HCI
3OQypSvdRVhgaAfK41bTvR5EuCl6PrDK19BjNcd9zJzhvrXy3KnBQR/F45tAyq5s
Et3AcDRlyMccn+I2zb5tfg3ZFg/kKlc=
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:17:24 2026 by rpki-client