Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/747ddfc0-ec6b-3345-bfb8-cd04cc6a7e6e.roa
File:                     747ddfc0-ec6b-3345-bfb8-cd04cc6a7e6e.roa (raw, json)
Hash identifier:          xJmfj/0Ocz6LWQQxFthZnJOe8fS+Mssc2g3ruEZg6Ys=
Subject key identifier:   70:96:DC:7F:48:3C:54:5A:E3:F5:93:A6:4E:68:BC:B5:03:76:AE:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B6BC77119F3BAAF1017684F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/747ddfc0-ec6b-3345-bfb8-cd04cc6a7e6e.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     20940
IP address blocks:        23.223.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:71:19:f3:ba:af:10:17:68:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=860773f6-c906-4f77-93f4-bb1d414b45ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:65:69:f6:1d:72:1d:51:9a:d0:1d:fd:f0:
                    0b:25:70:fd:ad:5f:fe:97:1d:ca:ad:b3:97:86:b1:
                    c8:ab:2a:c5:d4:0e:5f:9e:d7:a0:3d:3d:a2:e6:cb:
                    fe:bf:ff:af:89:2e:b9:f4:c1:94:22:e7:ac:79:74:
                    18:de:32:68:9d:2c:47:d0:5a:cc:17:f4:b7:7c:1c:
                    05:14:b1:23:80:bb:37:27:31:55:1f:04:ff:8a:f1:
                    d7:12:11:34:a6:4e:6c:7a:2f:4d:b7:ab:ec:13:b1:
                    8c:1b:7d:2c:3d:e3:2d:bc:6c:63:e8:a6:48:09:2c:
                    8c:5f:4b:f1:95:ff:8b:a5:66:5a:89:13:09:18:e5:
                    54:0d:23:48:6a:5e:2f:5a:22:66:f8:ca:3e:96:3b:
                    1a:03:50:c3:39:ec:99:f6:4b:38:17:59:bb:d4:29:
                    8f:8e:ff:ca:32:57:f9:df:f1:8d:9e:16:79:eb:c6:
                    0a:a3:54:42:58:8a:b8:56:cc:05:af:b7:39:b1:73:
                    3c:7e:be:28:88:6f:66:ec:e5:91:2d:be:68:b1:cc:
                    49:61:39:18:67:51:e9:07:9a:7a:ee:6d:1c:45:33:
                    0c:f7:b4:66:ea:86:62:49:9b:50:d7:2a:bb:6c:6b:
                    94:72:6d:33:be:57:08:48:cb:5e:07:90:2c:a4:40:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:96:DC:7F:48:3C:54:5A:E3:F5:93:A6:4E:68:BC:B5:03:76:AE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/747ddfc0-ec6b-3345-bfb8-cd04cc6a7e6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:58:10:23:aa:22:10:c8:3c:a3:2f:0f:bf:20:e7:75:f0:23:
         2e:0c:02:cb:19:b0:1b:54:c1:8b:2d:c0:74:2e:b8:e6:c9:30:
         79:1e:cb:6e:0e:f7:04:84:94:14:07:ec:0b:b5:3a:1a:60:d9:
         78:45:64:ea:62:6d:87:11:00:f2:30:7b:e3:7d:c3:21:c9:cf:
         0c:f8:fc:54:19:2d:c9:65:d9:51:d3:d8:1b:64:86:e0:42:f7:
         ff:c3:e0:30:4b:d4:8d:57:94:0a:31:29:37:68:a8:da:bc:6e:
         de:92:5d:7a:b2:03:83:cd:5a:00:1a:fc:69:ed:aa:29:c9:55:
         81:ce:d0:98:f9:1c:4f:df:c1:60:2f:78:94:e7:54:1d:62:ce:
         59:f5:9f:96:51:60:98:a6:28:65:45:05:d2:2a:66:93:2b:ce:
         7f:48:37:33:21:9a:c9:b1:cc:3e:e0:b3:c7:6b:de:3b:5e:92:
         5b:f1:95:2e:1c:06:3d:c4:e7:62:2a:a9:a0:09:dc:b2:36:15:
         7d:12:6a:f7:e8:04:03:96:13:32:45:2d:97:db:9c:98:e9:f0:
         42:56:06:51:3e:e3:2d:c6:e5:5d:50:a9:42:a0:77:4b:2a:c2:
         e3:84:b3:af:b4:03:30:01:6a:67:c2:d5:4c:a0:07:45:79:68:
         4b:d0:18:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3EZ87qvEBdoT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk
ODYwNzczZjYtYzkwNi00Zjc3LTkzZjQtYmIxZDQxNGI0NWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA111lafYdch1RmtAd/fALJXD9rV/+lx3KrbOX
hrHIqyrF1A5fntegPT2i5sv+v/+viS659MGUIueseXQY3jJonSxH0FrMF/S3fBwF
FLEjgLs3JzFVHwT/ivHXEhE0pk5sei9Nt6vsE7GMG30sPeMtvGxj6KZICSyMX0vx
lf+LpWZaiRMJGOVUDSNIal4vWiJm+Mo+ljsaA1DDOeyZ9ks4F1m71CmPjv/KMlf5
3/GNnhZ568YKo1RCWIq4VswFr7c5sXM8fr4oiG9m7OWRLb5oscxJYTkYZ1HpB5p6
7m0cRTMM97Rm6oZiSZtQ1yq7bGuUcm0zvlcISMteB5AspEBFYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCW3H9IPFRa4/WTpk5ovLUDdq7EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQ3ZGRmYzAtZWM2Yi0z
MzQ1LWJmYjgtY2QwNGNjNmE3ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRYECOqIhDIPKMvD78g53XwIy4MAssZsBtUwYstwHQuuObJMHkey24O
9wSElBQH7Au1Ohpg2XhFZOpibYcRAPIwe+N9wyHJzwz4/FQZLcll2VHT2BtkhuBC
9//D4DBL1I1XlAoxKTdoqNq8bt6SXXqyA4PNWgAa/GntqinJVYHO0Jj5HE/fwWAv
eJTnVB1izln1n5ZRYJimKGVFBdIqZpMrzn9INzMhmsmxzD7gs8dr3jteklvxlS4c
Bj3E52IqqaAJ3LI2FX0SavfoBAOWEzJFLZfbnJjp8EJWBlE+4y3G5V1QqUKgd0sq
wuOEs6+0AzABamfC1UygB0V5aEvQGNA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:25 2025 by rpki-client