Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81f3d50c-a27f-3af7-90f8-2d0621129b30.roa
File:                     81f3d50c-a27f-3af7-90f8-2d0621129b30.roa (raw, json)
Hash identifier:          AyJ5DGoKVnek1ydF5aIK1Ca9GWLrB9c/yo9TakDrRQM=
Subject key identifier:   90:66:2B:4F:08:92:11:16:DA:05:77:4D:C0:20:57:57:D4:BC:F6:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1F4A2913C0E064927A468700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81f3d50c-a27f-3af7-90f8-2d0621129b30.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.215.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:29:13:c0:e0:64:92:7a:46:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=5c415bd9-1a28-4f7f-ac24-4efc1442fe9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2f:2d:e8:66:62:16:5e:be:ad:84:68:9f:55:
                    6b:45:89:37:b7:62:53:98:2e:77:a3:c3:35:9f:e6:
                    bc:c2:21:1d:e5:f4:1d:75:38:47:e8:ce:6c:04:f9:
                    85:e9:0c:29:44:22:e2:a2:81:39:f3:dd:34:10:2b:
                    35:90:0b:ca:80:dc:da:c5:27:93:0d:78:41:93:93:
                    e6:bd:4b:c6:4a:74:fa:41:87:18:63:9a:7e:25:ae:
                    b2:c4:61:2c:5e:c4:74:2b:60:42:f9:60:78:ca:6e:
                    29:46:6a:5c:01:5e:fe:8f:b3:ea:af:94:7d:c0:26:
                    2a:c8:fb:44:0f:25:42:e7:42:5c:3a:42:ae:9d:00:
                    a3:23:a4:10:bb:ba:c7:06:90:55:ff:d5:2f:a1:9c:
                    36:5a:7b:40:1b:3a:1a:cb:e6:4d:66:23:b8:87:14:
                    b1:d6:5d:bb:7d:00:c1:73:ce:45:6d:88:72:3d:25:
                    6a:fb:63:ec:3b:79:21:96:2e:cb:2c:b8:19:46:69:
                    32:97:13:01:36:cc:65:93:09:71:d4:89:77:bc:a8:
                    a3:28:64:9d:bb:b0:bb:b5:58:b7:0b:42:09:46:37:
                    07:fc:de:ca:56:33:9a:66:00:6e:ab:23:4d:06:9a:
                    c7:14:43:d8:1d:19:84:ae:42:3e:62:15:a3:02:a0:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:66:2B:4F:08:92:11:16:DA:05:77:4D:C0:20:57:57:D4:BC:F6:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81f3d50c-a27f-3af7-90f8-2d0621129b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:01:8c:ab:78:75:1b:13:e2:53:5c:75:eb:51:ff:7f:8e:de:
         d8:79:3f:b6:5f:c7:c8:f6:0e:47:65:db:b1:6b:97:f1:92:5f:
         33:3a:84:75:b9:09:21:57:b4:be:fb:34:ba:9a:f3:3a:50:68:
         d0:a0:1b:69:1f:e3:46:ab:ff:50:75:86:1f:e2:99:ac:ca:c0:
         21:c0:35:24:f1:6c:69:44:2c:f4:ee:da:d0:99:7c:60:a7:3b:
         30:20:85:35:f4:e4:78:1f:49:5c:0f:e5:b9:4b:46:e9:d8:17:
         96:79:f5:f9:77:37:5f:97:7c:fc:3c:29:42:0f:53:64:0d:e0:
         4d:d5:c6:a7:e4:05:5b:b2:dc:7b:88:8f:e9:08:69:88:74:e0:
         5e:d5:34:a0:92:1a:6b:60:b3:42:57:09:bd:f2:fc:f1:8a:bc:
         c7:04:45:3e:4d:56:70:4d:f1:c4:40:65:7a:cc:61:24:fe:06:
         39:11:8a:b5:ab:cb:bd:a5:f4:48:22:e0:be:94:02:70:ff:dc:
         7c:1d:45:8b:0e:0a:80:c8:0d:98:e4:28:90:97:8d:dd:7e:dd:
         94:b2:59:4a:fe:ff:e6:b3:30:ec:ea:c9:26:99:1f:34:86:13:
         cf:57:d9:05:0c:6f:a8:5f:2e:11:fa:64:86:cd:bb:4f:2d:cc:
         ff:fc:ab:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSikTwOBkknpGhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NWM0MTViZDktMWEyOC00ZjdmLWFjMjQtNGVmYzE0NDJmZTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky8t6GZiFl6+rYRon1VrRYk3t2JTmC53o8M1
n+a8wiEd5fQddThH6M5sBPmF6QwpRCLiooE58900ECs1kAvKgNzaxSeTDXhBk5Pm
vUvGSnT6QYcYY5p+Ja6yxGEsXsR0K2BC+WB4ym4pRmpcAV7+j7Pqr5R9wCYqyPtE
DyVC50JcOkKunQCjI6QQu7rHBpBV/9UvoZw2WntAGzoay+ZNZiO4hxSx1l27fQDB
c85FbYhyPSVq+2PsO3khli7LLLgZRmkylxMBNsxlkwlx1Il3vKijKGSdu7C7tVi3
C0IJRjcH/N7KVjOaZgBuqyNNBprHFEPYHRmErkI+YhWjAqDNEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBmK08IkhEW2gV3TcAgV1fUvPaOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODFmM2Q1MGMtYTI3Zi0z
YWY3LTkwZjgtMmQwNjIxMTI5YjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9eYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcBjKt4dRsT4lNcdetR/3+O3th5P7Zfx8j2Dkdl27Frl/GSXzM6hHW5
CSFXtL77NLqa8zpQaNCgG2kf40ar/1B1hh/imazKwCHANSTxbGlELPTu2tCZfGCn
OzAghTX05HgfSVwP5blLRunYF5Z59fl3N1+XfPw8KUIPU2QN4E3VxqfkBVuy3HuI
j+kIaYh04F7VNKCSGmtgs0JXCb3y/PGKvMcERT5NVnBN8cRAZXrMYST+BjkRirWr
y72l9Egi4L6UAnD/3HwdRYsOCoDIDZjkKJCXjd1+3ZSyWUr+/+azMOzqySaZHzSG
E89X2QUMb6hfLhH6ZIbNu08tzP/8q6M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:23 2026 by rpki-client