Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fdd40e2-34b6-388e-8445-f103cc47179c.roa
File:                     2fdd40e2-34b6-388e-8445-f103cc47179c.roa (raw, json)
Hash identifier:          hh8hyyN/yctsjLUb81SeyUHayHrbyzXkmT+lyASl5q0=
Subject key identifier:   68:BD:76:73:77:A1:C2:1A:91:9F:7E:BF:DA:21:DB:BF:72:88:5C:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D9E502468D432507CA75F1634
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fdd40e2-34b6-388e-8445-f103cc47179c.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.43.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:24:68:d4:32:50:7c:a7:5f:16:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=7c5990e2-5838-449c-b480-649f3474bf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:10:09:12:a8:65:ea:f7:06:2b:24:75:33:
                    25:05:05:2b:67:50:5c:35:92:bd:9a:b6:30:d8:d8:
                    d8:31:d6:f0:1d:de:be:e6:a8:a7:61:b5:a0:be:ca:
                    85:0c:88:ab:2e:6a:05:e6:80:ac:f0:8a:a5:fc:e0:
                    0d:b0:83:e2:9d:55:06:32:77:cd:22:cc:03:4a:05:
                    8e:7f:e6:dc:9d:67:53:77:76:c6:b4:14:6a:9c:fb:
                    ba:fd:fe:73:2b:74:50:af:69:48:d4:d0:01:19:58:
                    15:0f:a8:cf:35:30:e2:d9:60:41:7e:e2:83:df:06:
                    d2:0e:b6:fa:36:c7:36:e9:e4:80:c9:cc:c2:d1:19:
                    c6:50:cd:e6:cd:00:7a:c0:11:9c:56:4f:e9:6e:47:
                    68:30:67:16:5e:39:ef:d0:99:c6:f3:59:ca:ef:03:
                    1e:9e:f1:31:2b:02:ee:51:77:aa:c7:40:e8:31:2a:
                    27:f6:e7:35:70:28:aa:6c:5a:8e:26:16:f9:77:46:
                    c5:43:3b:a4:a2:55:bf:b7:c6:cd:0b:32:f5:40:df:
                    c3:9c:12:63:e0:4d:8f:b0:e8:cf:6a:86:b0:b2:aa:
                    42:7f:4a:c9:52:57:18:8c:6c:7c:a6:ef:7d:e3:4a:
                    f5:a6:49:98:33:cb:b6:39:90:ff:43:84:cb:d7:44:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:76:73:77:A1:C2:1A:91:9F:7E:BF:DA:21:DB:BF:72:88:5C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fdd40e2-34b6-388e-8445-f103cc47179c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:7b:16:82:bd:dc:b7:d5:10:b2:94:59:92:e0:f1:6c:ec:
         eb:70:e7:cf:5c:b0:20:61:83:4b:ff:19:a4:a6:fe:64:c4:34:
         2e:fc:36:ab:03:f7:85:66:d9:f6:a3:70:78:c4:dd:79:e0:49:
         ba:3f:0a:3b:3f:fa:3a:d3:fb:46:49:4f:e3:42:68:ac:f7:f2:
         7a:e1:8d:eb:87:c9:b4:db:97:42:7a:32:89:49:20:1a:a8:4a:
         c9:a5:7e:a7:fc:c2:a9:d8:c8:81:92:8d:c8:b0:df:5d:af:4b:
         fb:bd:9c:d9:76:43:bf:aa:b9:f1:49:ac:16:81:fc:fd:6c:64:
         d6:69:c3:aa:0d:b2:b0:85:12:a0:c5:4f:85:4c:c7:09:2f:2b:
         65:6a:0f:be:73:f1:7f:cf:40:66:fc:e8:6a:3b:31:7c:4b:69:
         7e:18:d2:0e:63:8b:c1:39:8f:42:f3:d1:ee:68:bf:98:e4:b4:
         ae:51:c1:0d:ac:c7:72:29:36:bb:32:4a:60:00:98:33:02:47:
         96:77:d3:91:d8:23:3a:4f:ee:ce:e3:8a:58:5c:e7:36:37:10:
         eb:8a:9d:df:08:ec:b7:35:e3:33:24:c8:54:dc:6a:65:30:03:
         55:48:ab:33:ce:6c:38:bc:9b:70:9d:96:24:07:c2:2c:71:95:
         2b:83:0a:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCRo1DJQfKdfFjQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
N2M1OTkwZTItNTgzOC00NDljLWI0ODAtNjQ5ZjM0NzRiZjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH4QCRKoZer3BiskdTMlBQUrZ1BcNZK9mrYw
2NjYMdbwHd6+5qinYbWgvsqFDIirLmoF5oCs8Iql/OANsIPinVUGMnfNIswDSgWO
f+bcnWdTd3bGtBRqnPu6/f5zK3RQr2lI1NABGVgVD6jPNTDi2WBBfuKD3wbSDrb6
Nsc26eSAyczC0RnGUM3mzQB6wBGcVk/pbkdoMGcWXjnv0JnG81nK7wMenvExKwLu
UXeqx0DoMSon9uc1cCiqbFqOJhb5d0bFQzukolW/t8bNCzL1QN/DnBJj4E2PsOjP
aoawsqpCf0rJUlcYjGx8pu9940r1pkmYM8u2OZD/Q4TL10QauQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGi9dnN3ocIakZ9+v9oh279yiFzkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmZkZDQwZTItMzRiNi0z
ODhlLTg0NDUtZjEwM2NjNDcxNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFytXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/iexaCvdy31RCylFmS4PFs7Otw589csCBhg0v/GaSm/mTENC78NqsD
94Vm2fajcHjE3XngSbo/Cjs/+jrT+0ZJT+NCaKz38nrhjeuHybTbl0J6MolJIBqo
Ssmlfqf8wqnYyIGSjciw312vS/u9nNl2Q7+qufFJrBaB/P1sZNZpw6oNsrCFEqDF
T4VMxwkvK2VqD75z8X/PQGb86Go7MXxLaX4Y0g5ji8E5j0Lz0e5ov5jktK5RwQ2s
x3IpNrsySmAAmDMCR5Z305HYIzpP7s7jilhc5zY3EOuKnd8I7Lc14zMkyFTcamUw
A1VIqzPObDi8m3CdliQHwixxlSuDCsc=
-----END CERTIFICATE-----
Generated at Wed May 13 19:07:27 2026 by rpki-client