Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53acecf8-51bd-34b4-96b4-24e5adf1f8fa.roa
File:                     53acecf8-51bd-34b4-96b4-24e5adf1f8fa.roa (raw, json)
Hash identifier:          0sZBxf776GcAgaS/o4091YSNkZslFdIA4hXVf4xRoUc=
Subject key identifier:   1A:9F:31:CD:39:B5:5A:0A:DE:E4:0D:D3:C6:D9:13:8D:DA:1E:4B:63
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F49856D4BDF35F98338771900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53acecf8-51bd-34b4-96b4-24e5adf1f8fa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.62.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:6d:4b:df:35:f9:83:38:77:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8af27bf1-9f29-4f62-9509-a8d06baeea0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:b7:41:06:d2:b4:b7:ff:90:b2:ab:13:d2:
                    f7:23:c6:1b:26:95:c2:63:e4:c4:c8:8b:aa:8c:a6:
                    9e:5e:06:3c:76:35:02:f3:bb:7e:76:9f:98:62:dc:
                    a5:c1:e5:7b:9a:c0:88:52:9a:1e:7f:87:06:73:76:
                    68:35:b7:eb:f2:51:e8:fc:c4:de:1e:a5:f6:48:93:
                    9d:e2:04:2d:0f:ff:e4:ec:65:1b:fa:d4:75:c2:b4:
                    34:8c:3d:cc:a9:e1:c0:3d:e9:72:23:6d:45:da:dd:
                    14:05:ed:c0:60:d9:07:a5:0a:6a:01:9f:f4:b6:06:
                    8e:32:02:29:4b:fb:5d:ba:67:4b:39:c2:31:f5:e8:
                    21:f4:7c:33:22:79:15:6b:df:0c:f1:6a:74:ab:ab:
                    83:50:b2:2d:ee:00:81:7d:22:e7:ca:2d:b1:5a:0e:
                    48:68:c1:f9:65:ca:41:77:22:54:b0:73:2b:16:f0:
                    13:b6:37:2e:1a:60:82:3c:19:fd:de:94:f3:3e:c9:
                    a4:a1:c8:fa:41:d0:e9:58:28:a9:61:be:41:29:34:
                    ff:77:e6:0f:d7:49:f4:f1:e8:ac:ae:9f:b4:28:dd:
                    3e:bb:cb:33:aa:b5:c5:51:f4:83:ac:9d:68:b8:9b:
                    8e:7f:13:aa:5b:3b:54:f3:dc:64:c0:d2:28:c9:f9:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9F:31:CD:39:B5:5A:0A:DE:E4:0D:D3:C6:D9:13:8D:DA:1E:4B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53acecf8-51bd-34b4-96b4-24e5adf1f8fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:01:57:72:02:b3:0d:ae:e9:f3:cd:aa:4e:4e:9b:50:29:3e:
         1e:c8:46:51:f0:ed:b5:28:b5:f3:4f:ba:89:d3:6d:fe:22:81:
         af:b9:40:e9:8c:b1:55:19:1c:d4:bc:d0:5e:6c:09:25:fb:35:
         34:2a:58:6c:d8:57:a5:6d:f5:9e:4b:ff:c6:3f:bf:dc:91:ae:
         87:d6:21:bf:f4:b0:c3:81:98:03:56:95:c4:bf:f1:34:1a:89:
         a9:f2:17:d3:ca:79:69:41:ad:58:bc:17:fb:d0:e0:99:d2:ea:
         fc:99:52:d8:98:f7:e0:24:9a:7a:d9:77:29:a2:88:94:55:5d:
         a2:fa:0a:55:05:ed:46:ed:1d:d6:0d:04:34:3d:f2:44:ba:46:
         28:bf:98:92:c5:28:a7:5e:43:d4:ab:09:ac:75:14:03:a8:10:
         65:a4:c7:9c:a4:1f:7e:78:a0:01:2d:7d:4f:5a:9b:d7:ec:fc:
         d8:06:95:df:ae:5b:68:af:35:ec:00:e6:9a:94:cb:d0:2b:6f:
         30:e6:5a:f6:e3:16:9d:bf:54:c8:6d:21:48:ee:fb:02:6e:31:
         4c:8d:93:0a:80:48:6f:b1:88:a8:a8:f6:15:76:b3:a8:bf:8e:
         d9:d6:20:6b:17:14:15:23:c6:93:ee:52:40:c7:b6:e2:2d:55:
         25:6f:0f:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhW1L3zX5gzh3GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OGFmMjdiZjEtOWYyOS00ZjYyLTk1MDktYThkMDZiYWVlYTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGe3QQbStLf/kLKrE9L3I8YbJpXCY+TEyIuq
jKaeXgY8djUC87t+dp+YYtylweV7msCIUpoef4cGc3ZoNbfr8lHo/MTeHqX2SJOd
4gQtD//k7GUb+tR1wrQ0jD3MqeHAPelyI21F2t0UBe3AYNkHpQpqAZ/0tgaOMgIp
S/tdumdLOcIx9egh9HwzInkVa98M8Wp0q6uDULIt7gCBfSLnyi2xWg5IaMH5ZcpB
dyJUsHMrFvATtjcuGmCCPBn93pTzPsmkocj6QdDpWCipYb5BKTT/d+YP10n08eis
rp+0KN0+u8szqrXFUfSDrJ1ouJuOfxOqWztU89xkwNIoyflcXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqfMc05tVoK3uQN08bZE43aHktjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTNhY2VjZjgtNTFiZC0z
NGI0LTk2YjQtMjRlNWFkZjFmOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz5tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABABV3ICsw2u6fPNqk5Om1ApPh7IRlHw7bUotfNPuonTbf4iga+5QOmM
sVUZHNS80F5sCSX7NTQqWGzYV6Vt9Z5L/8Y/v9yRrofWIb/0sMOBmANWlcS/8TQa
ianyF9PKeWlBrVi8F/vQ4JnS6vyZUtiY9+AkmnrZdymiiJRVXaL6ClUF7UbtHdYN
BDQ98kS6Rii/mJLFKKdeQ9SrCax1FAOoEGWkx5ykH354oAEtfU9am9fs/NgGld+u
W2ivNewA5pqUy9ArbzDmWvbjFp2/VMhtIUju+wJuMUyNkwqASG+xiKio9hV2s6i/
jtnWIGsXFBUjxpPuUkDHtuItVSVvD68=
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:14:50 2026 by rpki-client