Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86b1a190-3178-39ad-b3a8-0ff69b33ba3e.roa
File:                     86b1a190-3178-39ad-b3a8-0ff69b33ba3e.roa (raw, json)
Hash identifier:          /pfeptWF57u9Vkt6OURKiFFQ2JrR7BRuhnh4tlw9G74=
Subject key identifier:   87:D1:EA:82:EC:7B:8D:44:98:80:91:0E:75:32:E7:AF:B9:20:8B:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4985B3BD62CC76B18DE195C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86b1a190-3178-39ad-b3a8-0ff69b33ba3e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.200.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:b3:bd:62:cc:76:b1:8d:e1:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6e1767a8-6f9b-4ed0-b973-ed6fa9437d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:b9:e0:d4:0b:10:33:70:53:86:82:03:7a:
                    23:7c:3f:1e:86:eb:cb:6a:6c:96:69:0c:c4:d4:c5:
                    3c:12:93:fc:46:c3:ac:a8:96:77:4b:4e:b8:b4:6d:
                    46:07:5c:54:ae:cb:cc:ad:4d:be:ba:af:61:9b:9c:
                    b7:1e:2d:e0:34:c1:ea:73:66:7a:5c:21:a1:dd:7f:
                    68:b8:94:75:fc:34:c9:e6:69:74:48:7b:85:6a:9b:
                    3a:01:d5:0d:0f:cf:5f:06:6d:a3:cc:2a:c5:21:c0:
                    42:c4:d2:a3:75:e6:76:95:0a:43:b2:eb:41:35:06:
                    cb:3c:30:fe:f3:eb:9a:64:1c:09:e6:c5:d0:6f:81:
                    1f:a0:05:73:dc:f6:f2:02:c5:78:b0:db:37:3e:89:
                    68:c8:33:c0:62:8e:bb:a3:85:a9:0a:17:0c:d8:cb:
                    e7:34:77:59:07:2d:ee:0b:5d:a3:cc:69:b4:e3:10:
                    91:fc:d4:4f:e2:55:a0:e4:db:0a:ec:56:e0:2b:10:
                    27:12:3a:e2:07:c7:09:53:12:3b:4c:8e:c3:d5:eb:
                    13:5f:ec:ba:1b:91:b7:14:22:00:d3:2d:9e:2b:a2:
                    31:a0:e5:d0:3a:43:cb:50:a4:18:97:45:6d:ee:52:
                    54:6d:74:58:7c:30:f8:9f:02:d9:75:f7:22:c2:87:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D1:EA:82:EC:7B:8D:44:98:80:91:0E:75:32:E7:AF:B9:20:8B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86b1a190-3178-39ad-b3a8-0ff69b33ba3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:04:c7:4c:50:aa:cc:6f:03:d6:f6:02:73:14:ea:ef:44:9c:
         9c:ac:aa:39:98:98:1f:b4:44:a0:42:d4:8c:c5:a6:5a:f2:d7:
         2f:03:a8:f5:90:19:a9:a6:a6:11:32:4a:25:34:e3:82:6e:37:
         e6:26:08:37:61:53:49:c1:c8:33:0d:e3:96:c2:2e:24:53:38:
         e0:45:41:ff:fd:3a:d1:76:6f:47:b0:25:0e:76:e4:b1:82:be:
         f0:bc:a1:8f:c6:82:bd:fb:a1:2d:e6:bb:c9:26:b4:c4:97:b9:
         84:6c:0e:11:c0:f2:6f:e6:10:6e:52:65:1d:8d:eb:52:45:8e:
         23:44:7b:a2:74:68:66:78:0c:97:72:2a:e9:ce:52:0a:32:72:
         2f:23:68:42:dc:b9:84:be:ff:89:08:cf:7e:29:fd:95:e7:41:
         51:59:a1:b5:f9:2a:77:14:08:ff:2f:50:de:49:ea:25:38:7b:
         4c:15:d1:1f:d5:61:02:cf:d3:36:4d:ec:6c:66:a6:59:28:fa:
         9a:82:bd:8f:64:d9:74:b5:24:4d:3e:8d:14:85:f4:70:a2:05:
         96:25:88:15:40:9e:24:4d:5d:85:16:2d:e7:57:c6:31:f2:a3:
         7b:ca:b2:3e:cf:fb:bc:9c:15:f4:41:fc:0a:37:5a:70:c1:2e:
         f8:21:36:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhbO9Ysx2sY3hlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmUxNzY3YTgtNmY5Yi00ZWQwLWI5NzMtZWQ2ZmE5NDM3ZDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlK54NQLEDNwU4aCA3ojfD8ehuvLamyWaQzE
1MU8EpP8RsOsqJZ3S064tG1GB1xUrsvMrU2+uq9hm5y3Hi3gNMHqc2Z6XCGh3X9o
uJR1/DTJ5ml0SHuFaps6AdUND89fBm2jzCrFIcBCxNKjdeZ2lQpDsutBNQbLPDD+
8+uaZBwJ5sXQb4EfoAVz3PbyAsV4sNs3PoloyDPAYo67o4WpChcM2MvnNHdZBy3u
C12jzGm04xCR/NRP4lWg5NsK7FbgKxAnEjriB8cJUxI7TI7D1esTX+y6G5G3FCIA
0y2eK6IxoOXQOkPLUKQYl0Vt7lJUbXRYfDD4nwLZdfciwofG7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfR6oLse41EmICRDnUy56+5IIuvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZiMWExOTAtMzE3OC0z
OWFkLWIzYTgtMGZmNjliMzNiYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkEx0xQqsxvA9b2AnMU6u9EnJysqjmYmB+0RKBC1IzFplry1y8DqPWQ
GammphEySiU044JuN+YmCDdhU0nByDMN45bCLiRTOOBFQf/9OtF2b0ewJQ525LGC
vvC8oY/Ggr37oS3mu8kmtMSXuYRsDhHA8m/mEG5SZR2N61JFjiNEe6J0aGZ4DJdy
KunOUgoyci8jaELcuYS+/4kIz34p/ZXnQVFZobX5KncUCP8vUN5J6iU4e0wV0R/V
YQLP0zZN7Gxmplko+pqCvY9k2XS1JE0+jRSF9HCiBZYliBVAniRNXYUWLedXxjHy
o3vKsj7P+7ycFfRB/Ao3WnDBLvghNro=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:40:28 2026 by rpki-client