Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/204f1049-7640-32a0-a7b0-8b7f83003360.roa
File:                     204f1049-7640-32a0-a7b0-8b7f83003360.roa (raw, json)
Hash identifier:          7txA7XGgbI/UiZMCCmj1LUi5KUAYyVS5Cuh91cfLvIc=
Subject key identifier:   D1:A5:23:49:02:DB:80:89:C0:D3:F1:46:F7:88:0E:5A:ED:17:CE:C2
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F53883C0FB8030363A9255380
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/204f1049-7640-32a0-a7b0-8b7f83003360.roa
Signing time:             Mon 28 Sep 2026 15:42:02 +0000
ROA not before:           Mon 28 Sep 2026 15:42:02 +0000
ROA not after:            Sun 27 Dec 2026 16:42:02 +0000
asID:                     62904
IP address blocks:        23.90.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:88:3c:0f:b8:03:03:63:a9:25:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 15:42:02 2026 GMT
            Not After : Dec 27 16:42:02 2026 GMT
        Subject: CN=29710059-01c6-4a05-a7a9-45b7d755d9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:69:cb:33:44:4e:06:af:fa:f9:46:b6:0e:
                    a9:a9:0e:f3:5e:4c:82:f8:bd:10:47:7e:b5:38:f8:
                    21:22:bd:42:8b:0e:2b:a1:85:4a:19:be:4a:2f:ef:
                    ca:ea:21:c0:da:13:65:6f:74:8f:06:e6:73:79:82:
                    66:82:ec:25:d2:12:5b:32:bb:0d:f1:f9:36:29:51:
                    d6:c8:69:87:ea:14:f0:31:44:d6:c8:19:4a:7c:d6:
                    f0:61:a1:54:85:59:a3:d9:15:92:fc:66:0e:8f:a3:
                    9c:bf:a3:c3:23:d0:f8:c4:1d:55:51:f9:7d:80:31:
                    13:59:86:03:39:4b:60:d6:76:7b:1c:77:92:ef:66:
                    62:c5:99:f0:c6:12:56:93:93:da:cd:f0:b5:ff:91:
                    0e:0f:b4:c2:20:27:19:74:aa:ab:ee:b1:14:a9:35:
                    f3:b7:14:e4:65:9c:a2:6b:ed:4d:6c:d6:57:a5:63:
                    79:41:0c:d6:57:9e:d5:9f:76:70:35:92:b1:b3:cb:
                    a7:95:be:af:a5:0f:7b:3d:3a:db:b0:23:8f:ac:68:
                    92:84:0d:1d:e4:9e:70:c1:21:ee:e0:b0:5b:f5:a4:
                    69:39:15:00:8e:39:48:fc:cf:2f:c5:d8:d8:c1:eb:
                    8b:fd:87:ad:21:f4:d0:01:3a:ac:c7:27:92:62:ac:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A5:23:49:02:DB:80:89:C0:D3:F1:46:F7:88:0E:5A:ED:17:CE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/204f1049-7640-32a0-a7b0-8b7f83003360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:89:d5:43:cc:d4:fc:75:60:ee:77:80:58:6b:bc:62:86:
         ad:e7:a6:4d:17:f6:26:79:45:19:57:2e:b9:50:58:8f:31:04:
         eb:78:f0:68:1c:d9:95:1d:b6:59:8f:af:e0:d9:99:b2:a2:ef:
         5d:4f:ce:8a:4d:76:2e:71:e1:86:b5:70:e0:f5:05:39:97:9c:
         2d:4f:1d:2a:2a:36:19:d6:1d:9a:5c:ce:88:28:9e:9f:d8:9b:
         a7:8a:5b:9b:b3:05:3c:18:91:32:16:dd:f3:b1:bc:29:63:9f:
         41:13:82:fc:99:93:9e:33:78:fd:97:f4:7a:70:cb:3e:7d:b9:
         a9:b5:e7:11:c6:6b:c7:b9:0b:4d:aa:e6:06:02:df:68:6d:34:
         1a:2a:03:ff:2f:f9:96:56:cf:78:0f:d8:59:85:e8:13:f6:e4:
         ee:c8:80:b8:c2:5e:79:5b:f6:2c:84:57:c0:49:3e:1b:25:a9:
         db:36:c6:8e:81:8d:5a:c6:5e:96:64:0c:ad:1b:e0:e2:43:2a:
         68:7f:3e:fe:01:8d:b3:30:c2:53:5f:0f:4a:24:45:27:1c:01:
         82:07:ec:df:7a:1d:12:52:5b:a0:59:99:f5:3b:12:34:cb:d1:
         12:d5:eb:de:db:50:f1:2a:83:5a:1d:1a:b6:d5:c4:59:f4:bb:
         8e:fc:b1:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TiDwPuAMDY6klU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyODE1NDIwMloXDTI2MTIyNzE2NDIwMlowLzEtMCsGA1UEAxMk
Mjk3MTAwNTktMDFjNi00YTA1LWE3YTktNDViN2Q3NTVkOWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JtpyzNETgav+vlGtg6pqQ7zXkyC+L0QR361
OPghIr1Ciw4roYVKGb5KL+/K6iHA2hNlb3SPBuZzeYJmguwl0hJbMrsN8fk2KVHW
yGmH6hTwMUTWyBlKfNbwYaFUhVmj2RWS/GYOj6Ocv6PDI9D4xB1VUfl9gDETWYYD
OUtg1nZ7HHeS72ZixZnwxhJWk5PazfC1/5EOD7TCICcZdKqr7rEUqTXztxTkZZyi
a+1NbNZXpWN5QQzWV57Vn3ZwNZKxs8unlb6vpQ97PTrbsCOPrGiShA0d5J5wwSHu
4LBb9aRpORUAjjlI/M8vxdjYweuL/YetIfTQATqsxyeSYqyeLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNGlI0kC24CJwNPxRveIDlrtF87CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMjA0ZjEwNDktNzY0MC0z
MmEwLWE3YjAtOGI3ZjgzMDAzMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF1oYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGycidVDzNT8dWDud4BYa7xihq3npk0X9iZ5RRlXLrlQWI8xBOt48Ggc
2ZUdtlmPr+DZmbKi711PzopNdi5x4Ya1cOD1BTmXnC1PHSoqNhnWHZpczogonp/Y
m6eKW5uzBTwYkTIW3fOxvCljn0ETgvyZk54zeP2X9Hpwyz59uam15xHGa8e5C02q
5gYC32htNBoqA/8v+ZZWz3gP2FmF6BP25O7IgLjCXnlb9iyEV8BJPhslqds2xo6B
jVrGXpZkDK0b4OJDKmh/Pv4BjbMwwlNfD0okRSccAYIH7N96HRJSW6BZmfU7EjTL
0RLV697bUPEqg1odGrbVxFn0u478sdc=
-----END CERTIFICATE-----
Generated at Mon Oct 12 18:22:52 2026 by rpki-client