Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5da7f798-dcef-3e9e-93f6-b8cae9c298e3.roa
File:                     5da7f798-dcef-3e9e-93f6-b8cae9c298e3.roa (raw, json)
Hash identifier:          HwRtrT1xSlplYs+1rL3GgrKd+2zYUoWZN8heBqC7HMM=
Subject key identifier:   2C:BE:73:43:D3:52:66:4C:83:A6:F2:3D:7B:BF:B9:51:73:47:16:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5BF48EF247A8E3E3AC180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5da7f798-dcef-3e9e-93f6-b8cae9c298e3.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.55.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:bf:48:ef:24:7a:8e:3e:3a:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=01859e17-5dc1-4823-b2df-b669f112308b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:91:4e:3a:8b:64:a7:7f:be:0a:9c:28:5f:
                    9c:b9:a2:79:81:dd:a6:5d:f9:5d:9e:ef:11:26:62:
                    5f:d8:25:48:cc:9e:78:3b:ce:46:6a:c1:80:87:86:
                    16:de:bd:24:2c:9f:99:fb:bb:81:61:e9:f4:75:7e:
                    84:61:f4:d1:c4:34:ab:12:02:a8:93:0b:cc:d0:8b:
                    75:8d:b6:3d:15:69:c6:93:4b:fd:ff:5c:dd:15:68:
                    6c:0e:00:1a:c9:cb:d6:2d:b0:cc:2c:86:44:92:40:
                    94:82:89:26:09:50:60:e0:50:0e:8b:ec:89:5c:43:
                    1f:ad:2e:1e:18:01:21:9d:53:14:13:be:4e:94:1c:
                    98:f7:02:ca:ad:c0:a1:fd:5d:5c:ec:3e:db:50:8a:
                    6e:ec:d0:61:d4:3e:b2:cc:a4:ee:e9:92:d9:92:67:
                    a5:ee:a1:14:db:21:cb:de:81:7f:31:ca:63:34:60:
                    1a:a9:f2:13:ec:35:c5:36:a7:40:6b:06:4a:6a:55:
                    0c:30:a5:24:97:68:d1:f6:17:e6:21:d7:90:01:c3:
                    07:c6:92:07:bd:10:7a:ba:5c:a8:d2:d8:47:5f:4b:
                    a3:39:e8:a0:87:9d:1b:cb:53:1d:a0:21:cf:f8:25:
                    9b:b9:f9:6e:e2:cc:0a:9d:68:20:26:f0:f6:70:2c:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:73:43:D3:52:66:4C:83:A6:F2:3D:7B:BF:B9:51:73:47:16:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5da7f798-dcef-3e9e-93f6-b8cae9c298e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:17:3c:30:bb:99:01:49:23:d1:38:0d:e2:b1:d5:e0:da:d6:
         d2:4a:8d:7c:1f:bb:c6:9c:c9:6d:dd:7e:a7:93:54:ac:31:15:
         9b:a4:4c:11:d2:91:ff:d4:08:2e:b6:ee:b4:3f:d3:13:9d:7d:
         b7:a0:c0:08:e1:ce:95:34:27:3a:ca:8e:ea:da:7a:70:c3:57:
         b3:6c:fc:f1:db:be:d4:bf:3c:09:3a:f2:eb:d8:32:ad:23:3a:
         f6:33:58:07:e3:ef:f4:cb:01:b8:ac:5c:7a:f0:a3:7b:91:8e:
         a8:cf:e7:be:2f:7d:b0:37:23:ed:15:57:c1:ea:45:47:4d:58:
         8b:27:6b:44:46:95:bd:60:66:33:1e:e8:a6:82:2d:b7:70:af:
         cb:3b:58:fb:35:d3:91:f1:9c:2c:19:ca:9c:b4:8b:0f:83:81:
         60:1c:97:04:62:59:69:55:c6:62:b3:a6:fe:c4:93:8b:ee:65:
         92:f9:d6:68:24:a3:46:9d:ed:23:ac:87:1a:4e:2e:46:90:fa:
         04:eb:6c:e7:c9:71:7b:ba:1e:8a:98:ee:f5:24:e3:7a:b8:63:
         f1:0e:d1:3f:89:15:8b:c5:fa:39:03:2b:21:d9:75:41:b9:9f:
         58:af:e9:dc:5f:0a:d7:01:85:66:3b:c7:ed:96:9e:51:30:8b:
         db:5e:a0:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Nxb9I7yR6jj46wYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
MDE4NTllMTctNWRjMS00ODIzLWIyZGYtYjY2OWYxMTIzMDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLWRTjqLZKd/vgqcKF+cuaJ5gd2mXfldnu8R
JmJf2CVIzJ54O85GasGAh4YW3r0kLJ+Z+7uBYen0dX6EYfTRxDSrEgKokwvM0It1
jbY9FWnGk0v9/1zdFWhsDgAaycvWLbDMLIZEkkCUgokmCVBg4FAOi+yJXEMfrS4e
GAEhnVMUE75OlByY9wLKrcCh/V1c7D7bUIpu7NBh1D6yzKTu6ZLZkmel7qEU2yHL
3oF/McpjNGAaqfIT7DXFNqdAawZKalUMMKUkl2jR9hfmIdeQAcMHxpIHvRB6ulyo
0thHX0ujOeigh50by1MdoCHP+CWbuflu4swKnWggJvD2cCzCSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCy+c0PTUmZMg6byPXu/uVFzRxb/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWRhN2Y3OTgtZGNlZi0z
ZTllLTkzZjYtYjhjYWU5YzI5OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzdlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUXPDC7mQFJI9E4DeKx1eDa1tJKjXwfu8acyW3dfqeTVKwxFZukTBHS
kf/UCC627rQ/0xOdfbegwAjhzpU0JzrKjuraenDDV7Ns/PHbvtS/PAk68uvYMq0j
OvYzWAfj7/TLAbisXHrwo3uRjqjP574vfbA3I+0VV8HqRUdNWIsna0RGlb1gZjMe
6KaCLbdwr8s7WPs105HxnCwZypy0iw+DgWAclwRiWWlVxmKzpv7Ek4vuZZL51mgk
o0ad7SOshxpOLkaQ+gTrbOfJcXu6HoqY7vUk43q4Y/EO0T+JFYvF+jkDKyHZdUG5
n1iv6dxfCtcBhWY7x+2WnlEwi9teoN0=
-----END CERTIFICATE-----
Generated at Wed May 13 06:45:42 2026 by rpki-client