Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/9a009c87-99e6-33c8-9802-40d7527ac86f.roa
File:                     9a009c87-99e6-33c8-9802-40d7527ac86f.roa (raw, json)
Hash identifier:          zbO7BQVD1T/WN8f9C7+EqBBNwF80DyPSOtnPOACpLYY=
Subject key identifier:   AB:D9:AB:E5:28:77:C5:90:76:2E:CF:9A:12:46:AC:95:18:32:82:16
Certificate issuer:       /CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0
Certificate serial:       010D0C9F4328584DBBA8C08F9091F73C8542C900
Authority key identifier: 4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/9a009c87-99e6-33c8-9802-40d7527ac86f.roa
Signing time:             Tue 05 May 2026 13:17:45 +0000
ROA not before:           Tue 05 May 2026 13:17:45 +0000
ROA not after:            Mon 03 Aug 2026 13:17:45 +0000
asID:                     21859
IP address blocks:        23.149.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a8:c0:8f:90:91:f7:3c:85:42:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0
        Validity
            Not Before: May  5 13:17:45 2026 GMT
            Not After : Aug  3 13:17:45 2026 GMT
        Subject: CN=24b16de4-7350-4d79-84d0-e2397760a571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:7f:77:a4:73:a5:3f:9b:51:5f:51:41:12:
                    2c:76:4f:c7:12:63:ce:f2:5f:0e:49:9f:ec:15:09:
                    ea:e4:ba:18:14:fd:6a:66:3b:80:06:ed:cd:5c:3e:
                    29:6e:2f:90:d4:a7:f5:cf:79:1d:b8:13:37:67:ba:
                    0b:28:ad:c2:32:d0:b0:d5:a9:ff:a3:29:82:d2:b3:
                    ac:19:76:74:b3:d3:b2:9c:c4:0a:db:a5:ab:28:d2:
                    49:37:ba:03:32:fa:0c:83:ac:b2:a9:e1:b4:cb:6e:
                    7f:d5:20:ab:b4:84:f1:a1:dd:0d:bb:16:2b:e3:60:
                    52:a5:25:b6:f1:e4:b6:a6:53:be:09:92:46:95:ae:
                    57:ad:c2:fc:f2:0f:54:ed:d5:1a:d2:a1:cc:73:36:
                    dc:5b:66:7d:cc:a1:4c:ce:d8:bd:1c:4a:30:fe:ac:
                    ff:97:aa:98:c8:11:48:58:aa:b9:c2:86:55:a3:26:
                    75:e5:d7:7e:4e:59:7f:5e:3a:3a:2f:c6:a3:f3:b2:
                    26:6f:a6:31:06:0f:16:54:a2:23:e4:90:4d:e3:a4:
                    74:bd:cf:02:03:c2:ea:49:88:c6:8d:c6:a7:8b:51:
                    56:66:4b:76:4e:ef:3b:8b:61:21:07:b4:1d:ec:70:
                    70:57:f2:b4:7b:9d:08:6a:61:ec:c1:e6:c7:61:a9:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D9:AB:E5:28:77:C5:90:76:2E:CF:9A:12:46:AC:95:18:32:82:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/9a009c87-99e6-33c8-9802-40d7527ac86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl

            X509v3 Authority Key Identifier:
                keyid:4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:76:29:9a:33:e7:f7:4e:b2:75:b5:f1:fd:31:a0:ee:bb:3c:
         1b:15:70:91:5b:4c:84:ec:6d:53:c1:b4:30:3e:18:26:20:d4:
         66:66:f3:85:45:0d:a9:10:61:9e:70:2d:77:9b:fe:c0:55:4b:
         d5:e0:38:aa:52:2a:bd:61:30:35:bb:51:e1:bf:10:da:47:8a:
         6a:3b:62:7d:58:2a:3c:ea:25:1b:b4:f4:28:0f:b0:40:b9:9c:
         df:d7:2d:f4:a7:e9:39:7b:a7:0f:50:92:b0:9c:2c:34:bb:90:
         b9:e7:3c:fa:72:86:e7:a1:5a:7b:19:49:67:5e:38:26:d5:0f:
         5b:ec:57:ec:ea:f6:ad:2a:e7:c4:31:cf:71:f5:2a:cb:17:4b:
         15:08:54:aa:cb:85:40:68:bd:c2:71:b9:ec:1c:a3:b4:cb:5e:
         d0:e0:43:f0:0e:26:2b:dd:de:ef:d0:12:3e:a7:b4:e2:cc:d9:
         47:52:a7:9f:af:2a:b1:b3:b4:1c:f5:77:18:51:c2:ea:09:3f:
         71:b6:1a:24:c4:b6:77:a5:6f:f5:83:18:b9:e3:d6:5b:da:de:
         f6:54:53:8e:75:05:26:ce:55:4d:34:cf:f4:80:63:85:77:a0:
         71:42:24:2a:d0:22:2d:65:27:51:c9:e5:48:eb:46:32:2b:90:
         0c:31:c3:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27qMCPkJH3PIVCyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY5ZjVjYjUtYTdiYi00M2UwLTkwZDEtOTQ3N2Q3ZGUx
YWIwMB4XDTI2MDUwNTEzMTc0NVoXDTI2MDgwMzEzMTc0NVowLzEtMCsGA1UEAxMk
MjRiMTZkZTQtNzM1MC00ZDc5LTg0ZDAtZTIzOTc3NjBhNTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6J/d6RzpT+bUV9RQRIsdk/HEmPO8l8OSZ/s
FQnq5LoYFP1qZjuABu3NXD4pbi+Q1Kf1z3kduBM3Z7oLKK3CMtCw1an/oymC0rOs
GXZ0s9OynMQK26WrKNJJN7oDMvoMg6yyqeG0y25/1SCrtITxod0NuxYr42BSpSW2
8eS2plO+CZJGla5XrcL88g9U7dUa0qHMczbcW2Z9zKFMzti9HEow/qz/l6qYyBFI
WKq5woZVoyZ15dd+Tll/Xjo6L8aj87Imb6YxBg8WVKIj5JBN46R0vc8CA8LqSYjG
jcani1FWZkt2Tu87i2EhB7Qd7HBwV/K0e50IamHswebHYalmOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvZq+Uod8WQdi7PmhJGrJUYMoIWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjlm
NWNiNS1hN2JiLTQzZTAtOTBkMS05NDc3ZDdkZTFhYjAvOWEwMDljODctOTllNi0z
M2M4LTk4MDItNDBkNzUyN2FjODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWY5ZjVjYjUtYTdiYi00M2UwLTkw
ZDEtOTQ3N2Q3ZGUxYWIwLzFmOWY1Y2I1LWE3YmItNDNlMC05MGQxLTk0NzdkN2Rl
MWFiMC5jcmwwHwYDVR0jBBgwFoAUTJt9xaVBRqXYw9/Nq2gQcD8+4JwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjlmNWNiNS1hN2JiLTQzZTAtOTBkMS05NDc3
ZDdkZTFhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5U8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJ2KZoz5/dOsnW18f0xoO67PBsVcJFbTITsbVPBtDA+GCYg1GZm84VF
DakQYZ5wLXeb/sBVS9XgOKpSKr1hMDW7UeG/ENpHimo7Yn1YKjzqJRu09CgPsEC5
nN/XLfSn6Tl7pw9QkrCcLDS7kLnnPPpyhuehWnsZSWdeOCbVD1vsV+zq9q0q58Qx
z3H1KssXSxUIVKrLhUBovcJxuewco7TLXtDgQ/AOJivd3u/QEj6ntOLM2UdSp5+v
KrGztBz1dxhRwuoJP3G2GiTEtnelb/WDGLnj1lva3vZUU451BSbOVU00z/SAY4V3
oHFCJCrQIi1lJ1HJ5UjrRjIrkAwxw0c=
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:14 2026 by rpki-client