Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c56d06-a5b3-349a-bf6b-f9338bbde8f3.roa
File:                     71c56d06-a5b3-349a-bf6b-f9338bbde8f3.roa (raw, json)
Hash identifier:          ZfEfCFsF7hVEE6oYIAaUETTwGiDw5ntbhLhJtPJ/Vcc=
Subject key identifier:   FD:9C:66:8F:4C:29:5F:42:25:F1:AF:9B:8B:BD:44:0E:1F:22:9E:D2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4985F64CB5E1F1EB32737C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c56d06-a5b3-349a-bf6b-f9338bbde8f3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.213.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:f6:4c:b5:e1:f1:eb:32:73:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ac707a5b-0a7b-490b-b320-b3d6e53eb2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f2:cd:46:cb:ea:4c:e4:83:8e:75:c1:30:45:
                    dc:59:4f:df:fe:43:ce:04:ec:ca:46:84:4d:72:d7:
                    d5:6e:fe:92:df:1d:12:90:1e:c1:2d:35:d9:6c:db:
                    97:af:2b:70:d7:4c:f6:f2:b4:9a:83:97:03:33:05:
                    8b:6d:84:14:62:a6:50:75:09:44:73:db:93:7f:9a:
                    ea:0a:d6:97:bb:ee:76:a5:21:f8:15:31:9f:c5:1a:
                    d2:c9:94:1f:4c:2d:8b:47:e6:2a:d6:51:85:49:cb:
                    a9:52:1b:67:20:c9:c3:09:43:30:a8:9b:0e:9f:63:
                    22:93:38:c6:00:eb:96:e1:dc:2c:a5:08:40:1e:08:
                    cf:fb:04:54:10:04:da:42:3d:bf:0b:0c:f7:8a:97:
                    b8:3c:42:2b:4a:2a:06:85:69:0b:35:a0:8c:12:e6:
                    46:77:50:94:56:94:a3:2f:f5:5f:51:18:b4:26:80:
                    01:7e:8e:aa:a9:53:b3:b9:ff:e6:cd:09:1a:f0:1d:
                    e0:cc:ec:5f:6e:3c:32:50:52:d7:84:62:f2:d8:10:
                    48:17:6c:51:09:d8:3f:19:54:47:98:3b:fc:a7:32:
                    84:14:72:e5:80:7e:93:fd:4c:36:b2:98:a3:ca:e8:
                    e0:2d:09:22:66:4f:be:b5:2c:fc:6f:b9:1a:66:77:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:66:8F:4C:29:5F:42:25:F1:AF:9B:8B:BD:44:0E:1F:22:9E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c56d06-a5b3-349a-bf6b-f9338bbde8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:04:a5:50:33:d7:b2:11:21:2b:ec:1a:a2:76:51:92:40:4d:
         c3:4e:fe:73:2d:b5:ed:63:fd:8b:f5:f2:df:b2:3e:10:25:be:
         1d:74:3f:43:96:61:54:33:ae:3e:94:96:10:82:9d:d6:a7:43:
         da:e6:fe:c6:12:2d:c7:09:0c:f9:9a:09:81:49:81:09:63:08:
         5b:5e:20:96:ab:b7:4b:13:cd:6a:6c:3f:ca:f5:91:33:ea:88:
         55:7e:bb:c1:e7:ec:32:0a:83:ae:bc:87:ce:1c:91:6f:0a:a0:
         ba:70:5c:81:20:80:63:43:2a:d9:bb:4f:a5:b0:a2:8c:6f:73:
         74:39:4e:ad:c1:72:ff:7a:fe:5d:4c:e0:f4:02:35:38:27:38:
         c0:a7:42:25:6d:24:1e:46:e9:e6:b4:b6:6e:96:9c:51:36:6d:
         5e:a7:f4:ee:c3:69:43:34:b0:8f:c0:bf:65:fc:62:b0:e9:79:
         5d:1d:98:ce:f3:65:2d:70:58:35:c6:af:69:4e:d2:df:c3:4c:
         84:5e:33:26:e1:16:40:2b:cb:70:b9:dc:86:04:99:ab:83:99:
         dc:4a:ca:0a:a6:eb:dc:98:40:dd:93:d0:ac:c8:4f:4b:f2:32:
         2a:fd:cc:1a:94:fa:be:fb:e4:55:52:87:bd:0c:5f:76:7d:c3:
         59:75:3c:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhfZMteHx6zJzfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWM3MDdhNWItMGE3Yi00OTBiLWIzMjAtYjNkNmU1M2ViMmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPLNRsvqTOSDjnXBMEXcWU/f/kPOBOzKRoRN
ctfVbv6S3x0SkB7BLTXZbNuXrytw10z28rSag5cDMwWLbYQUYqZQdQlEc9uTf5rq
CtaXu+52pSH4FTGfxRrSyZQfTC2LR+Yq1lGFScupUhtnIMnDCUMwqJsOn2MikzjG
AOuW4dwspQhAHgjP+wRUEATaQj2/Cwz3ipe4PEIrSioGhWkLNaCMEuZGd1CUVpSj
L/VfURi0JoABfo6qqVOzuf/mzQka8B3gzOxfbjwyUFLXhGLy2BBIF2xRCdg/GVRH
mDv8pzKEFHLlgH6T/Uw2spijyujgLQkiZk++tSz8b7kaZndyOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2cZo9MKV9CJfGvm4u9RA4fIp7SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFjNTZkMDYtYTViMy0z
NDlhLWJmNmItZjkzMzhiYmRlOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9W0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkEpVAz17IRISvsGqJ2UZJATcNO/nMtte1j/Yv18t+yPhAlvh10P0OW
YVQzrj6UlhCCndanQ9rm/sYSLccJDPmaCYFJgQljCFteIJart0sTzWpsP8r1kTPq
iFV+u8Hn7DIKg668h84ckW8KoLpwXIEggGNDKtm7T6Wwooxvc3Q5Tq3Bcv96/l1M
4PQCNTgnOMCnQiVtJB5G6ea0tm6WnFE2bV6n9O7DaUM0sI/Av2X8YrDpeV0dmM7z
ZS1wWDXGr2lO0t/DTIReMybhFkAry3C53IYEmauDmdxKygqm69yYQN2T0KzIT0vy
Mir9zBqU+r775FVSh70MX3Z9w1l1PK8=
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:11:44 2026 by rpki-client