Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8332d592-d1df-3a26-9c25-e777438f0964.roa
File:                     8332d592-d1df-3a26-9c25-e777438f0964.roa (raw, json)
Hash identifier:          e8Zb+ANgv094ykBwjUFQY/BSGvqoBaQPHzx9utu4E8U=
Subject key identifier:   96:8D:C4:88:58:BC:DF:01:C3:EE:B4:3B:22:C2:72:58:9E:5A:C1:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D8C2AACFDBA7C1E6E237DB780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8332d592-d1df-3a26-9c25-e777438f0964.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     16625
IP address blocks:        23.47.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:ac:fd:ba:7c:1e:6e:23:7d:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=c0748981-c021-44ab-86b4-34557dc60695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:55:f2:47:e1:44:44:1c:18:9a:04:e0:6a:
                    a9:f5:ee:43:23:cc:f4:06:e4:07:08:03:16:fb:64:
                    38:97:5a:ad:a8:26:b2:3c:bf:6a:59:8b:f7:eb:d3:
                    6e:ae:56:7e:07:bf:88:be:4c:9c:2c:2a:5a:b4:b6:
                    68:9f:71:ed:7d:d6:46:af:1d:e2:b3:d2:2f:e3:cf:
                    0b:14:80:0f:99:c9:c4:9b:88:b1:21:61:68:02:a9:
                    15:ff:e0:78:88:bb:96:45:cb:3e:1a:ea:bd:0e:14:
                    ee:2f:a9:ed:ae:c9:31:87:99:49:19:ad:8e:dd:59:
                    f6:ab:9f:36:dd:c8:e9:6c:a6:c6:2d:29:2d:60:69:
                    17:4c:24:dc:27:61:6a:49:05:b2:65:0d:e0:96:0a:
                    51:68:32:6c:de:8d:ed:c4:46:a0:e5:1e:44:c0:b3:
                    77:df:06:61:9e:15:a9:39:f0:3e:ae:d5:71:50:6e:
                    0f:b1:83:9e:f1:f7:ce:b4:8d:4a:c1:f5:24:2d:08:
                    79:3d:24:73:ef:1d:e0:ae:28:ce:22:5c:34:2f:a7:
                    32:2c:70:d4:12:48:9b:11:1b:60:d4:b6:91:ff:d7:
                    f8:33:df:83:c0:ed:1c:bf:53:17:4c:39:68:ab:d3:
                    26:c9:34:ab:e0:91:84:96:31:05:90:8f:d7:d1:a6:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8D:C4:88:58:BC:DF:01:C3:EE:B4:3B:22:C2:72:58:9E:5A:C1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8332d592-d1df-3a26-9c25-e777438f0964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:b4:bc:9f:6c:40:11:1c:93:4e:db:29:70:bc:c3:ed:9f:
         cb:9b:c4:d8:1b:11:b3:96:12:4f:5b:87:6a:43:c4:63:3d:fd:
         cc:2b:f7:e9:c6:fb:4c:c6:c4:e6:93:e8:27:3a:b8:82:5f:86:
         22:07:27:24:38:93:56:3a:d9:15:a4:ab:5c:2a:1c:2d:64:23:
         21:2d:b8:35:b6:40:85:24:55:3b:04:ba:d7:c0:60:8c:be:ca:
         7a:f5:d4:87:59:c1:2c:c8:44:2c:6a:89:8b:21:32:d2:e4:b1:
         ac:57:b9:43:a1:33:ae:40:38:47:1e:5d:77:8c:04:86:a1:e6:
         9a:79:bf:64:dc:aa:1e:10:ee:96:a1:c6:40:90:7b:62:f5:03:
         da:74:0e:db:35:6c:a7:44:90:80:fc:16:ab:0d:88:65:d5:47:
         a6:3a:fa:9f:15:c0:66:7a:1a:94:5a:86:4a:17:d4:c7:66:87:
         e0:f7:59:f5:39:8e:62:41:ba:8d:94:58:20:08:65:9d:2e:5e:
         84:2d:29:2d:8b:91:30:ba:a0:80:b1:a5:a4:d2:18:9e:f9:b4:
         f9:65:8c:94:3c:d3:e0:ec:dd:4f:24:e6:a2:11:4d:cb:a3:12:
         1a:7e:d4:52:ac:e4:46:cc:d6:3f:3c:84:86:9f:a9:61:19:57:
         f9:45:d4:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKqz9unwebiN9t4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk
YzA3NDg5ODEtYzAyMS00NGFiLTg2YjQtMzQ1NTdkYzYwNjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphFV8kfhREQcGJoE4Gqp9e5DI8z0BuQHCAMW
+2Q4l1qtqCayPL9qWYv369NurlZ+B7+IvkycLCpatLZon3HtfdZGrx3is9Iv488L
FIAPmcnEm4ixIWFoAqkV/+B4iLuWRcs+Guq9DhTuL6ntrskxh5lJGa2O3Vn2q582
3cjpbKbGLSktYGkXTCTcJ2FqSQWyZQ3glgpRaDJs3o3txEag5R5EwLN33wZhnhWp
OfA+rtVxUG4PsYOe8ffOtI1KwfUkLQh5PSRz7x3grijOIlw0L6cyLHDUEkibERtg
1LaR/9f4M9+DwO0cv1MXTDloq9MmyTSr4JGEljEFkI/X0abbrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJaNxIhYvN8Bw+60OyLCclieWsGpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODMzMmQ1OTItZDFkZi0z
YTI2LTljMjUtZTc3NzQzOGYwOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy+sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABb4tLyfbEARHJNO2ylwvMPtn8ubxNgbEbOWEk9bh2pDxGM9/cwr9+nG
+0zGxOaT6Cc6uIJfhiIHJyQ4k1Y62RWkq1wqHC1kIyEtuDW2QIUkVTsEutfAYIy+
ynr11IdZwSzIRCxqiYshMtLksaxXuUOhM65AOEceXXeMBIah5pp5v2Tcqh4Q7pah
xkCQe2L1A9p0Dts1bKdEkID8FqsNiGXVR6Y6+p8VwGZ6GpRahkoX1Mdmh+D3WfU5
jmJBuo2UWCAIZZ0uXoQtKS2LkTC6oICxpaTSGJ75tPlljJQ80+Ds3U8k5qIRTcuj
Ehp+1FKs5EbM1j88hIafqWEZV/lF1Ew=
-----END CERTIFICATE-----
Generated at Wed May 13 06:16:53 2026 by rpki-client