Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/683c5366-d489-3620-be55-24a0b5edd227.roa
File:                     683c5366-d489-3620-be55-24a0b5edd227.roa (raw, json)
Hash identifier:          YQVEG9Zu1Lm1dpCcVGhzoCRmhV6BAe7LTLPzLY8LPH4=
Subject key identifier:   64:E5:D0:CF:D2:F4:79:E0:15:82:E1:23:9A:A7:F3:7E:28:60:FF:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F3FAD4C67B4F4358AF1E6C000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/683c5366-d489-3620-be55-24a0b5edd227.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.44.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:4c:67:b4:f4:35:8a:f1:e6:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=61255bed-1272-45d1-8807-fcd9c1d487fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:f1:2c:e9:24:72:8c:08:28:6f:50:47:ea:
                    ea:d9:a3:14:f0:47:d4:b5:ce:bd:b9:42:d8:94:c8:
                    a3:fb:3b:b4:75:77:2a:46:4f:b7:4c:55:fa:45:f8:
                    d2:66:2b:d8:fe:a6:4c:96:ae:db:43:92:be:86:cf:
                    2a:a9:1d:1b:65:bb:e1:97:b4:66:4e:2d:f0:74:2b:
                    14:85:f3:ce:ae:c0:60:16:ce:b0:19:07:e7:9a:56:
                    38:e0:ed:3c:0a:9c:36:e2:eb:b3:b2:45:99:50:3b:
                    8d:3c:04:8e:4c:3f:06:cd:70:77:42:59:bf:0c:3a:
                    58:2c:a9:6a:ba:ed:c9:9f:b8:94:d3:3b:c9:51:26:
                    93:67:6b:64:e5:ae:6b:db:5d:da:51:94:ea:91:29:
                    2b:62:e9:06:9d:b1:eb:2a:94:fc:24:87:f7:8a:26:
                    4e:d0:68:21:7a:c7:94:56:a6:86:4d:68:e9:c5:a4:
                    87:28:66:a4:2f:ec:29:3e:f4:93:d0:54:fa:da:a0:
                    54:6f:16:1d:88:e6:bc:aa:53:a5:24:11:8a:06:3e:
                    ea:6e:42:39:c6:c3:6c:3d:d3:2a:af:73:f4:ff:fd:
                    19:0d:f4:68:a0:47:a0:9b:69:e5:80:0f:79:ed:c8:
                    fc:fd:70:91:27:01:1a:96:ae:63:09:e8:d4:26:ca:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E5:D0:CF:D2:F4:79:E0:15:82:E1:23:9A:A7:F3:7E:28:60:FF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/683c5366-d489-3620-be55-24a0b5edd227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:46:7d:5e:02:d5:6b:72:2f:3b:f0:2a:04:2f:64:34:c7:39:
         97:86:b4:ae:a1:cf:83:16:e1:e2:5c:04:cf:c7:5c:e4:ee:9a:
         7e:70:dd:48:94:39:ee:1b:70:50:78:8b:df:91:3f:5e:23:db:
         f2:ee:27:fb:34:0f:ec:2b:1b:14:1f:6c:3d:85:6d:fc:67:cb:
         8c:95:80:04:d0:53:6a:2b:41:af:cc:d0:c5:23:05:5f:bc:89:
         ca:c8:cd:16:48:c3:54:f3:b3:77:ef:03:6e:ac:fd:5b:3f:4e:
         14:e8:e9:ae:f0:43:cb:22:7b:af:f1:95:84:ab:3f:97:60:e0:
         32:50:ec:0d:4c:e0:7d:9a:85:ef:e2:05:f4:d7:0a:00:0a:71:
         06:b0:f6:7f:61:92:61:9e:ea:c0:7c:1a:d0:db:43:ef:87:de:
         ac:2e:05:7c:61:35:98:9b:21:da:aa:f7:a9:a4:65:7d:48:11:
         c2:29:07:a6:29:f9:f2:e6:be:c3:23:20:3a:97:3e:5f:88:fe:
         81:59:dc:11:c7:26:f6:59:03:00:6e:15:56:d2:35:71:1d:ff:
         59:46:ed:1c:a0:9b:b6:7b:f8:10:cf:64:3b:b5:ef:55:93:ab:
         b3:29:4c:01:90:24:30:5d:0b:83:7a:66:ae:8d:89:90:41:ea:
         bf:81:3e:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUxntPQ1ivHmwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
NjEyNTViZWQtMTI3Mi00NWQxLTg4MDctZmNkOWMxZDQ4N2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlPxLOkkcowIKG9QR+rq2aMU8EfUtc69uULY
lMij+zu0dXcqRk+3TFX6RfjSZivY/qZMlq7bQ5K+hs8qqR0bZbvhl7RmTi3wdCsU
hfPOrsBgFs6wGQfnmlY44O08Cpw24uuzskWZUDuNPASOTD8GzXB3Qlm/DDpYLKlq
uu3Jn7iU0zvJUSaTZ2tk5a5r213aUZTqkSkrYukGnbHrKpT8JIf3iiZO0GgheseU
VqaGTWjpxaSHKGakL+wpPvST0FT62qBUbxYdiOa8qlOlJBGKBj7qbkI5xsNsPdMq
r3P0//0ZDfRooEegm2nlgA957cj8/XCRJwEalq5jCejUJspazwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTl0M/S9HngFYLhI5qn834oYP+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjgzYzUzNjYtZDQ4OS0z
NjIwLWJlNTUtMjRhMGI1ZWRkMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyyvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERGfV4C1WtyLzvwKgQvZDTHOZeGtK6hz4MW4eJcBM/HXOTumn5w3UiU
Oe4bcFB4i9+RP14j2/LuJ/s0D+wrGxQfbD2Fbfxny4yVgATQU2orQa/M0MUjBV+8
icrIzRZIw1Tzs3fvA26s/Vs/ThTo6a7wQ8sie6/xlYSrP5dg4DJQ7A1M4H2ahe/i
BfTXCgAKcQaw9n9hkmGe6sB8GtDbQ++H3qwuBXxhNZibIdqq96mkZX1IEcIpB6Yp
+fLmvsMjIDqXPl+I/oFZ3BHHJvZZAwBuFVbSNXEd/1lG7Rygm7Z7+BDPZDu171WT
q7MpTAGQJDBdC4N6Zq6NiZBB6r+BPqc=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:29:53 2026 by rpki-client