Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/996064ee-f522-3156-acaa-945e68c544bb.roa
File:                     996064ee-f522-3156-acaa-945e68c544bb.roa (raw, json)
Hash identifier:          gNSjrd24DTuKpggLpuCLBzSmv/HkwVov6a69Ojyh268=
Subject key identifier:   C0:29:AA:4F:50:DC:81:65:DF:17:80:EB:DA:68:1E:AD:1D:B1:54:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0912AED2FE9D8CA5C78D0700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/996064ee-f522-3156-acaa-945e68c544bb.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.202.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:ae:d2:fe:9d:8c:a5:c7:8d:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=4e4912a0-abff-4f2c-9974-3d13ff861f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:fb:e8:eb:e5:cd:5e:a2:cd:87:6d:f9:dd:
                    f5:57:4e:94:f6:60:3f:67:df:f9:c3:68:7e:90:c4:
                    22:4b:e4:f5:3a:3f:eb:28:d3:6e:37:24:db:e2:ef:
                    fe:c7:e9:2b:91:ac:f6:6a:57:49:a7:02:03:8f:db:
                    e8:67:46:d7:4e:3f:5e:40:6e:2b:eb:e8:9f:3c:76:
                    c8:2c:46:b5:a5:17:9b:80:e4:0b:3c:40:09:f2:a6:
                    00:7b:b6:2a:28:95:98:6d:76:f0:a4:fd:34:76:2a:
                    06:6c:72:79:eb:0d:09:4e:68:26:90:d0:13:ff:0e:
                    c3:38:cf:ac:6f:eb:bf:27:d0:9f:c4:95:5b:ab:a9:
                    75:7f:44:58:b4:46:8d:e0:42:30:58:b8:e5:47:fd:
                    b5:33:14:e5:55:78:24:13:c4:02:a2:59:18:d5:4b:
                    2a:e3:50:b8:f5:5f:67:85:6f:b1:25:99:7f:35:25:
                    58:f1:84:01:36:69:d1:d3:9b:e3:e0:ab:77:ba:c6:
                    55:3f:6c:a5:10:f1:36:a1:32:08:f2:5c:bb:ad:61:
                    33:eb:31:60:f2:5f:02:dc:7b:d9:39:e1:4e:de:32:
                    df:04:8b:55:46:c8:89:a6:53:c1:1e:62:64:c5:a5:
                    7d:26:7a:f7:48:36:b0:57:a1:1b:e9:1a:53:22:73:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:29:AA:4F:50:DC:81:65:DF:17:80:EB:DA:68:1E:AD:1D:B1:54:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/996064ee-f522-3156-acaa-945e68c544bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:ca:4b:a7:78:49:aa:34:03:ae:08:35:35:e1:e2:c2:e4:
         14:fd:3f:8c:fe:24:57:46:a6:b0:e3:4c:b5:8a:37:35:20:f0:
         c0:5b:7f:12:bd:6e:1a:f3:90:d2:84:71:24:2e:d4:f1:31:d6:
         a3:dd:a9:e6:7f:a5:00:2f:29:a3:05:c6:72:5b:ec:8e:60:0c:
         45:ee:da:61:a9:e5:76:d2:bd:1a:32:ce:53:a0:b7:be:bf:ca:
         07:f8:57:75:39:8d:61:a6:90:50:a7:63:c9:bd:14:cb:78:ed:
         4f:a0:15:6c:0f:cc:6d:95:36:93:97:1d:58:8b:0f:79:d5:9b:
         18:11:28:66:96:e5:14:39:ea:8c:6e:e4:98:c1:be:70:2e:99:
         b4:9e:ea:d0:27:f3:1b:28:67:89:95:8d:9a:ed:3a:91:e2:3b:
         2e:ff:8d:f2:a3:35:1b:6f:55:3e:68:1a:c9:b0:ae:24:2a:68:
         9a:4d:9d:b7:85:a4:fd:c5:1e:d0:b7:e4:ed:b0:f9:f0:1e:62:
         b2:6b:79:28:47:f8:da:2c:01:c4:f3:d4:14:3b:07:af:f2:21:
         0c:6f:b9:ce:24:d2:d0:3e:ca:ab:cc:ef:4a:f1:8e:82:17:b1:
         7e:2e:b6:9f:ce:67:97:dc:58:54:97:4e:27:7e:3e:b2:c5:b7:
         ba:de:90:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEq7S/p2MpceNBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
NGU0OTEyYTAtYWJmZi00ZjJjLTk5NzQtM2QxM2ZmODYxZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIP76OvlzV6izYdt+d31V06U9mA/Z9/5w2h+
kMQiS+T1Oj/rKNNuNyTb4u/+x+krkaz2aldJpwIDj9voZ0bXTj9eQG4r6+ifPHbI
LEa1pRebgOQLPEAJ8qYAe7YqKJWYbXbwpP00dioGbHJ56w0JTmgmkNAT/w7DOM+s
b+u/J9CfxJVbq6l1f0RYtEaN4EIwWLjlR/21MxTlVXgkE8QColkY1Usq41C49V9n
hW+xJZl/NSVY8YQBNmnR05vj4Kt3usZVP2ylEPE2oTII8ly7rWEz6zFg8l8C3HvZ
OeFO3jLfBItVRsiJplPBHmJkxaV9Jnr3SDawV6Eb6RpTInOGsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMApqk9Q3IFl3xeA69poHq0dsVSpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk2MDY0ZWUtZjUyMi0z
MTU2LWFjYWEtOTQ1ZTY4YzU0NGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8qQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNqykuneEmqNAOuCDU14eLC5BT9P4z+JFdGprDjTLWKNzUg8MBbfxK9
bhrzkNKEcSQu1PEx1qPdqeZ/pQAvKaMFxnJb7I5gDEXu2mGp5XbSvRoyzlOgt76/
ygf4V3U5jWGmkFCnY8m9FMt47U+gFWwPzG2VNpOXHViLD3nVmxgRKGaW5RQ56oxu
5JjBvnAumbSe6tAn8xsoZ4mVjZrtOpHiOy7/jfKjNRtvVT5oGsmwriQqaJpNnbeF
pP3FHtC35O2w+fAeYrJreShH+NosAcTz1BQ7B6/yIQxvuc4k0tA+yqvM70rxjoIX
sX4utp/OZ5fcWFSXTid+PrLFt7rekM0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:11 2026 by rpki-client