Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5901ab29-2699-3789-be62-b017dfad5375.roa
File:                     5901ab29-2699-3789-be62-b017dfad5375.roa (raw, json)
Hash identifier:          pf6lMuMnl/jai0IAG/BCFyNzKGGFbIhr/9sWVWR3obs=
Subject key identifier:   86:1F:62:A9:D1:3C:AD:8F:D6:2F:B0:CC:5B:5D:4D:25:7C:80:84:B4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF6FD258FF8448AED98B400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5901ab29-2699-3789-be62-b017dfad5375.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.60.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:fd:25:8f:f8:44:8a:ed:98:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=ab46c3da-b7aa-4b1a-9f14-e8d79d1a4d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:2a:da:76:e2:87:70:90:8a:f5:bb:e2:78:
                    7e:27:b5:4d:2b:6c:e4:fe:16:29:f8:43:10:11:dc:
                    36:14:a9:cd:30:b1:a6:de:4c:e4:0c:50:80:2e:61:
                    d4:fc:6c:1f:7d:ed:c8:17:e9:8e:fc:a3:58:38:80:
                    23:87:5c:1a:6f:1d:92:18:62:77:5e:1b:8b:7f:f6:
                    90:02:67:fd:89:4a:07:c5:7c:e8:ba:d7:13:de:90:
                    c8:66:52:46:71:88:4d:74:48:96:41:f7:71:b2:ba:
                    9a:96:2c:5e:0e:ff:25:4b:62:fb:56:a2:d0:96:dc:
                    2a:9c:b6:19:11:fa:ce:5a:dc:17:90:c2:4c:61:5f:
                    a5:6b:ac:be:2b:af:f1:ae:5a:25:b1:cd:4c:d4:a3:
                    f1:cd:64:cd:43:5c:25:e7:30:20:33:42:c8:76:82:
                    10:56:18:0e:38:64:21:60:57:b4:b7:c9:66:92:e1:
                    aa:43:02:20:ad:c9:ec:6a:05:31:3e:ea:26:d6:06:
                    54:35:1a:b4:0c:e7:23:b9:cc:42:e9:43:85:f6:ad:
                    d7:0b:a3:2e:cc:b1:3e:f3:7f:1e:c6:c7:54:8a:be:
                    1c:0c:15:2b:b0:02:c5:40:0c:f2:c3:4a:a9:14:17:
                    ea:39:4c:3c:c9:8d:6f:db:9e:5c:ab:8f:43:44:a1:
                    15:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1F:62:A9:D1:3C:AD:8F:D6:2F:B0:CC:5B:5D:4D:25:7C:80:84:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5901ab29-2699-3789-be62-b017dfad5375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.60.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1b:33:16:f4:64:bb:41:1f:0c:83:18:00:ec:6f:44:f6:b4:
         aa:7b:d6:81:7d:1b:57:a8:5f:ad:f2:cb:5a:5d:7c:ba:38:06:
         f9:6f:91:46:0e:3e:27:5e:d1:6a:ab:11:9c:c6:75:8c:e4:c0:
         75:15:1e:55:51:72:3c:a8:32:79:fb:89:3e:1d:ec:94:c9:f7:
         c3:3b:d2:c2:41:df:6b:b5:09:0c:ef:eb:24:c8:23:3a:e5:ee:
         f4:24:a1:85:72:95:f0:9a:1f:96:1a:0a:b5:8d:dc:20:4f:b1:
         01:2a:9f:17:73:33:33:32:e1:1d:67:8d:85:a4:cf:eb:a4:21:
         79:dd:b3:eb:72:26:73:0e:74:a8:b2:38:4e:88:ca:76:db:7f:
         ce:aa:fa:e3:f2:5e:43:64:39:85:38:3b:eb:d3:56:54:36:e4:
         ab:43:37:b2:05:f1:34:51:ec:77:78:bf:79:ee:f9:8b:06:5e:
         68:10:c1:c2:79:7a:a5:67:1c:e7:02:28:00:a3:9e:52:26:c8:
         eb:73:78:6c:e5:f2:e7:91:be:53:9f:43:56:b1:a6:f0:ce:94:
         16:af:8b:2e:37:dd:fa:bf:3b:c6:2f:e0:b4:d9:f9:99:53:d9:
         12:c4:0c:ce:ce:6c:b2:1a:65:04:ab:14:b0:6f:3c:48:41:ee:
         a8:73:be:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9v0lj/hEiu2YtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
YWI0NmMzZGEtYjdhYS00YjFhLTlmMTQtZThkNzlkMWE0ZDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMUq2nbih3CQivW74nh+J7VNK2zk/hYp+EMQ
Edw2FKnNMLGm3kzkDFCALmHU/Gwffe3IF+mO/KNYOIAjh1wabx2SGGJ3XhuLf/aQ
Amf9iUoHxXzoutcT3pDIZlJGcYhNdEiWQfdxsrqalixeDv8lS2L7VqLQltwqnLYZ
EfrOWtwXkMJMYV+la6y+K6/xrlolsc1M1KPxzWTNQ1wl5zAgM0LIdoIQVhgOOGQh
YFe0t8lmkuGqQwIgrcnsagUxPuom1gZUNRq0DOcjucxC6UOF9q3XC6MuzLE+838e
xsdUir4cDBUrsALFQAzyw0qpFBfqOUw8yY1v255cq49DRKEV1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYfYqnRPK2P1i+wzFtdTSV8gIS0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTkwMWFiMjktMjY5OS0z
Nzg5LWJlNjItYjAxN2RmYWQ1Mzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzykMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4bMxb0ZLtBHwyDGADsb0T2tKp71oF9G1eoX63yy1pdfLo4BvlvkUYO
Pide0WqrEZzGdYzkwHUVHlVRcjyoMnn7iT4d7JTJ98M70sJB32u1CQzv6yTIIzrl
7vQkoYVylfCaH5YaCrWN3CBPsQEqnxdzMzMy4R1njYWkz+ukIXnds+tyJnMOdKiy
OE6Iynbbf86q+uPyXkNkOYU4O+vTVlQ25KtDN7IF8TRR7Hd4v3nu+YsGXmgQwcJ5
eqVnHOcCKACjnlImyOtzeGzl8ueRvlOfQ1axpvDOlBaviy433fq/O8Yv4LTZ+ZlT
2RLEDM7ObLIaZQSrFLBvPEhB7qhzvpY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:39 2025 by rpki-client