Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/538db97f-318b-365d-95e7-eb306ee4f6c0.roa
File:                     538db97f-318b-365d-95e7-eb306ee4f6c0.roa (raw, json)
Hash identifier:          +0E/CD2S1YmIzgFVwUMcMqeUh2443+Ohfxd6L6a86Hw=
Subject key identifier:   86:23:C7:6C:00:81:F9:AD:00:85:6C:F5:AB:53:8B:CD:EF:68:E2:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DC565A7BC08E9DE80BD054700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/538db97f-318b-365d-95e7-eb306ee4f6c0.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     16625
IP address blocks:        23.52.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:a7:bc:08:e9:de:80:bd:05:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=03464c0c-fb94-41cf-9e37-489609baf428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:f4:8c:db:a6:8f:23:a8:04:37:74:38:fd:
                    12:49:d5:c0:7f:bd:28:b0:49:67:32:17:6f:cd:b4:
                    f6:28:3c:51:a8:34:ac:87:6b:ba:4a:5c:f4:5e:04:
                    b9:d4:ac:a7:3a:e2:86:6e:40:74:39:a9:cd:c3:88:
                    e5:e1:05:f5:95:f2:79:5e:ee:03:e0:67:8d:47:24:
                    56:45:5e:ba:5b:1c:e3:e2:8f:55:a7:bb:f4:1b:4d:
                    8b:f6:f0:56:28:c1:31:27:48:4b:9c:7b:04:89:31:
                    cd:d0:22:e5:a5:43:23:8c:7c:b6:72:75:12:f0:bb:
                    5a:ae:5c:fb:c6:6c:e2:ff:20:9c:b3:4f:da:24:fc:
                    e0:f9:23:07:1e:03:a6:15:db:00:50:38:f9:42:b3:
                    1c:a9:d5:35:ac:22:37:b2:45:e4:fc:80:4c:e9:3b:
                    f4:c8:f5:86:e9:ff:1d:3e:f0:7b:01:94:e5:ad:96:
                    6d:a9:e1:b9:33:6f:b9:84:d3:ee:99:60:bb:e7:14:
                    b6:96:d8:c5:02:98:7b:0a:b2:81:57:d3:ef:4b:46:
                    74:05:76:ad:3d:00:16:a3:17:39:7a:0d:df:36:fe:
                    43:37:b8:8e:8d:a3:c5:46:a2:24:f3:49:c5:51:b3:
                    11:e8:21:70:96:db:12:d8:50:73:1e:c7:1d:04:60:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:23:C7:6C:00:81:F9:AD:00:85:6C:F5:AB:53:8B:CD:EF:68:E2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/538db97f-318b-365d-95e7-eb306ee4f6c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:de:11:0b:b7:83:30:cf:d7:62:f1:47:a5:49:9b:e5:ad:
         61:ce:bb:50:42:6e:ef:f7:b7:c1:88:d5:84:7d:3f:ba:e5:cf:
         e2:94:a0:6f:aa:71:1c:7a:72:4d:b9:a2:a7:19:f0:d3:19:f3:
         4c:ea:1a:4a:e5:bf:65:bf:6e:68:5f:81:af:d7:e2:ef:6c:6b:
         a4:16:90:06:19:1b:de:b5:68:36:cc:89:83:0b:9d:f4:1c:38:
         f1:86:bb:07:3f:88:32:5e:4b:3f:ce:18:c9:e5:62:2f:fb:c5:
         f1:c8:4f:92:5a:cc:c7:fc:36:27:b3:e5:e0:1b:19:43:6a:44:
         91:f4:71:9a:61:6b:c0:63:84:80:f7:a3:f5:fb:87:94:2e:22:
         25:b3:96:10:93:4d:ad:f9:92:a8:4b:c8:43:4d:a5:10:9b:0f:
         39:6d:77:8d:eb:58:58:cb:90:95:99:ad:cb:10:7b:e4:e3:a6:
         6b:4a:63:02:10:6a:3e:d1:60:f1:93:35:6c:6a:eb:fa:bf:d6:
         b4:87:ad:06:60:c8:fc:24:8e:ff:08:aa:0f:35:20:38:6c:cc:
         02:0b:e1:b9:d7:0d:3a:ca:60:f3:0a:07:6d:42:95:1c:d0:1d:
         89:11:a7:3b:2b:14:27:ae:52:9b:05:ae:3a:e7:13:ee:41:8b:
         0d:fd:1a:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZae8COnegL0FRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
MDM0NjRjMGMtZmI5NC00MWNmLTllMzctNDg5NjA5YmFmNDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohL0jNumjyOoBDd0OP0SSdXAf70osElnMhdv
zbT2KDxRqDSsh2u6Slz0XgS51KynOuKGbkB0OanNw4jl4QX1lfJ5Xu4D4GeNRyRW
RV66Wxzj4o9Vp7v0G02L9vBWKMExJ0hLnHsEiTHN0CLlpUMjjHy2cnUS8Ltarlz7
xmzi/yCcs0/aJPzg+SMHHgOmFdsAUDj5QrMcqdU1rCI3skXk/IBM6Tv0yPWG6f8d
PvB7AZTlrZZtqeG5M2+5hNPumWC75xS2ltjFAph7CrKBV9PvS0Z0BXatPQAWoxc5
eg3fNv5DN7iOjaPFRqIk80nFUbMR6CFwltsS2FBzHscdBGCrXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYjx2wAgfmtAIVs9atTi83vaOJLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM4ZGI5N2YtMzE4Yi0z
NjVkLTk1ZTctZWIzMDZlZTRmNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzRMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI353hELt4Mwz9di8UelSZvlrWHOu1BCbu/3t8GI1YR9P7rlz+KUoG+q
cRx6ck25oqcZ8NMZ80zqGkrlv2W/bmhfga/X4u9sa6QWkAYZG961aDbMiYMLnfQc
OPGGuwc/iDJeSz/OGMnlYi/7xfHIT5JazMf8Niez5eAbGUNqRJH0cZpha8BjhID3
o/X7h5QuIiWzlhCTTa35kqhLyENNpRCbDzltd43rWFjLkJWZrcsQe+TjpmtKYwIQ
aj7RYPGTNWxq6/q/1rSHrQZgyPwkjv8Iqg81IDhszAIL4bnXDTrKYPMKB21ClRzQ
HYkRpzsrFCeuUpsFrjrnE+5Biw39Gk8=
-----END CERTIFICATE-----
Generated at Wed May 13 09:45:19 2026 by rpki-client