Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52122391-0607-3e19-be27-69e4dd18cd77.roa
File:                     52122391-0607-3e19-be27-69e4dd18cd77.roa (raw, json)
Hash identifier:          r+kykKFh7uma7kBlR6kgHkg9oR0SjXkzj4K+jSs1pYk=
Subject key identifier:   50:F0:C5:CD:D1:2B:DC:3C:82:E9:50:61:06:2F:41:C9:10:C6:FA:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1B1A5B3ACC7953B6985D42E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52122391-0607-3e19-be27-69e4dd18cd77.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     20940
IP address blocks:        23.212.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:5b:3a:cc:79:53:b6:98:5d:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=245692db-e49d-4c4b-beba-9102a3f973f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:27:05:62:64:e7:d5:47:9d:a7:8e:bb:93:
                    38:af:86:02:49:a4:b9:b7:a1:83:c1:fa:60:fb:3d:
                    7f:82:a2:78:3f:18:20:de:cc:4a:c4:cc:7d:b6:81:
                    74:fb:40:56:6f:aa:37:bc:97:b7:0d:92:40:af:8a:
                    0c:9a:30:d0:1b:98:36:32:48:64:fe:09:c5:9b:d5:
                    91:25:1c:26:7f:30:43:cf:83:42:c8:c9:1d:ba:25:
                    15:cd:81:02:48:ce:e4:a7:3a:d3:61:70:28:6e:3e:
                    81:e5:ca:af:4a:7d:ec:95:8b:d1:59:be:26:20:40:
                    ac:19:35:61:af:ca:60:57:d2:b0:5c:64:99:58:e1:
                    65:66:5d:7e:d5:81:c6:54:cb:9d:58:f2:73:f6:99:
                    e4:eb:d8:1c:97:b5:10:98:96:db:15:35:e2:16:b4:
                    84:f0:0f:17:15:86:ef:80:cd:46:c5:6d:92:72:7c:
                    53:39:c2:7a:2b:5e:bd:14:ee:5c:2c:4a:6b:6d:54:
                    bb:47:29:16:c0:6d:bd:1a:c7:2d:f2:da:71:36:f7:
                    23:34:c6:66:6a:75:cd:5b:58:88:13:92:83:1f:3b:
                    53:e8:7a:66:af:7b:c6:ee:ed:c6:6d:91:9a:d8:34:
                    34:2c:82:70:9f:10:52:4f:f4:b3:82:6c:1d:74:f7:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:C5:CD:D1:2B:DC:3C:82:E9:50:61:06:2F:41:C9:10:C6:FA:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52122391-0607-3e19-be27-69e4dd18cd77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c7:9c:b7:44:2a:42:0d:8f:f5:3b:11:8c:81:92:a5:dc:f6:
         a4:15:09:a1:a2:75:0f:8e:bb:84:06:30:2d:65:5a:69:2d:a0:
         4e:c1:19:ce:6d:d7:b6:b2:f2:9a:c2:54:f1:06:a0:e8:22:1f:
         49:fc:90:21:b6:df:af:b2:e6:79:2c:b3:71:72:40:ea:41:34:
         82:75:de:d6:85:52:06:eb:2b:8d:2c:c4:fa:e4:63:6a:86:f0:
         ab:2a:18:c4:bf:05:29:da:2f:32:c6:b7:22:79:f3:4b:d7:99:
         c7:d2:77:b4:78:34:7a:5b:cb:f5:8e:63:a6:5a:28:bc:b9:03:
         77:64:52:98:86:0b:2b:a6:4c:43:01:5a:e0:c7:c0:6c:d2:e5:
         3b:6c:80:49:80:a1:ef:f3:a5:8e:ea:a1:c3:36:cd:d6:94:d9:
         3e:8c:df:d8:4b:14:83:ae:22:80:2a:61:63:7d:62:85:a3:02:
         3f:a9:22:4b:7f:0e:ac:42:4a:e2:34:df:e1:c9:da:be:c6:6b:
         fb:70:82:b9:ac:2d:1f:a7:e2:f4:5e:6c:d0:31:f4:61:51:39:
         ec:89:e1:43:59:bd:b1:97:82:a6:73:e5:27:67:f3:3f:c1:60:
         d1:6b:ed:c0:5c:bc:df:c7:0b:60:b5:6d:23:ab:3a:73:89:dd:
         20:d7:d9:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGls6zHlTtphdQuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MjQ1NjkyZGItZTQ5ZC00YzRiLWJlYmEtOTEwMmEzZjk3M2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJQnBWJk59VHnaeOu5M4r4YCSaS5t6GDwfpg
+z1/gqJ4Pxgg3sxKxMx9toF0+0BWb6o3vJe3DZJAr4oMmjDQG5g2Mkhk/gnFm9WR
JRwmfzBDz4NCyMkduiUVzYECSM7kpzrTYXAobj6B5cqvSn3slYvRWb4mIECsGTVh
r8pgV9KwXGSZWOFlZl1+1YHGVMudWPJz9pnk69gcl7UQmJbbFTXiFrSE8A8XFYbv
gM1GxW2ScnxTOcJ6K169FO5cLEprbVS7RykWwG29Gsct8tpxNvcjNMZmanXNW1iI
E5KDHztT6Hpmr3vG7u3GbZGa2DQ0LIJwnxBST/SzgmwddPcbdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDwxc3RK9w8gulQYQYvQckQxvoOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTIxMjIzOTEtMDYwNy0z
ZTE5LWJlMjctNjllNGRkMThjZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9StMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfHnLdEKkINj/U7EYyBkqXc9qQVCaGidQ+Ou4QGMC1lWmktoE7BGc5t
17ay8prCVPEGoOgiH0n8kCG236+y5nkss3FyQOpBNIJ13taFUgbrK40sxPrkY2qG
8KsqGMS/BSnaLzLGtyJ580vXmcfSd7R4NHpby/WOY6ZaKLy5A3dkUpiGCyumTEMB
WuDHwGzS5TtsgEmAoe/zpY7qocM2zdaU2T6M39hLFIOuIoAqYWN9YoWjAj+pIkt/
DqxCSuI03+HJ2r7Ga/twgrmsLR+n4vRebNAx9GFROeyJ4UNZvbGXgqZz5Sdn8z/B
YNFr7cBcvN/HC2C1bSOrOnOJ3SDX2Sg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:38 2026 by rpki-client