Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b98322db-9473-3a3d-81cc-0e8d302f9ef4.roa
File:                     b98322db-9473-3a3d-81cc-0e8d302f9ef4.roa (raw, json)
Hash identifier:          1Xc2sk8vj1s0jvM50JzBrtnVw2HNHpt1+eKIi7I+zFE=
Subject key identifier:   CA:C5:D3:B5:D4:C8:F7:1E:0C:3F:0C:A3:2A:75:6F:1B:7A:A5:8D:B3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F427822A19AB24E822E43ED80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b98322db-9473-3a3d-81cc-0e8d302f9ef4.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        23.47.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:22:a1:9a:b2:4e:82:2e:43:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=c40a7a6b-e143-4826-ad49-382238c124d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:e2:73:49:d5:f0:65:f4:03:d7:7c:6e:31:
                    b3:78:bb:b0:2d:d0:14:2d:f4:c1:fe:2f:d1:57:df:
                    75:7f:42:24:98:af:63:5e:b3:82:fb:c3:f3:56:d8:
                    51:2e:95:6e:83:c5:1d:0d:1d:23:1a:d1:74:1f:fe:
                    2b:83:db:4a:24:14:55:6e:de:ae:21:4e:83:9e:1b:
                    08:c1:09:b3:2b:e7:40:02:9d:18:6e:11:f4:ad:45:
                    5e:98:a9:bd:9b:99:c8:0e:f3:f6:63:6c:46:fa:ed:
                    fc:da:46:4a:b9:41:2e:a0:95:7f:39:f0:37:41:23:
                    d8:c2:1e:07:7b:55:b1:2c:45:3c:a4:fc:a3:cc:79:
                    73:e0:76:41:32:6e:8b:fe:47:41:da:70:94:b0:e9:
                    f2:ee:09:77:5c:13:08:4e:26:7c:58:ea:ed:6f:98:
                    28:7c:6a:8c:f3:3f:95:50:a4:e7:1e:8a:0e:b0:43:
                    a5:94:dd:bc:07:3e:eb:92:5f:68:f9:6b:76:6b:ca:
                    ed:1c:1c:0e:d1:1a:fc:f9:23:fa:81:14:16:0f:b2:
                    52:a3:f7:cc:74:af:88:b9:2c:f3:db:7f:3f:a6:ea:
                    7d:72:06:7d:6c:8f:6b:9d:2a:1d:95:f6:f6:85:75:
                    c1:0e:16:56:ac:87:35:7e:1c:86:ad:66:ee:e7:69:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C5:D3:B5:D4:C8:F7:1E:0C:3F:0C:A3:2A:75:6F:1B:7A:A5:8D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b98322db-9473-3a3d-81cc-0e8d302f9ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:55:ae:83:6e:1c:f7:32:71:ef:54:f8:e5:15:49:2f:2f:1e:
         b0:29:25:01:e6:07:6d:83:01:e5:96:79:20:40:ad:0c:03:d2:
         c0:cb:48:68:38:86:52:7e:c3:68:9c:a0:af:af:9e:67:26:9e:
         07:5f:3f:49:04:eb:db:9d:90:a3:83:35:f9:ff:77:00:81:b5:
         75:de:66:02:7a:a0:75:91:95:e2:d0:94:f4:da:b8:bf:11:c8:
         9b:bc:5a:e4:2f:81:6a:1f:37:23:f8:16:f5:45:c0:38:05:ea:
         20:7c:f3:d1:7e:32:cb:80:9a:b3:59:a3:c7:a0:f6:9c:15:91:
         12:7e:bf:f7:5a:37:3a:7f:64:5d:f9:f5:23:2a:e5:cb:9a:59:
         5c:44:23:be:73:35:7e:f7:a2:21:dc:2e:a2:35:7a:3e:44:99:
         d6:a9:b3:3c:4a:06:91:e1:0f:99:3e:44:7d:10:01:a9:3e:ae:
         6b:1f:29:2c:77:27:99:86:63:f8:d5:c0:8b:eb:3b:42:9a:5b:
         30:f8:e1:a8:19:54:ee:23:af:01:cc:fc:4a:cd:0a:35:f5:97:
         54:2c:fc:3e:e7:fc:d8:b3:37:27:23:71:80:c4:79:af:5f:6c:
         81:50:8d:88:a6:6f:15:f7:e3:ab:fb:a3:fd:9c:b4:13:56:f0:
         78:0e:4c:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCKhmrJOgi5D7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk
YzQwYTdhNmItZTE0My00ODI2LWFkNDktMzgyMjM4YzEyNGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXnic0nV8GX0A9d8bjGzeLuwLdAULfTB/i/R
V991f0IkmK9jXrOC+8PzVthRLpVug8UdDR0jGtF0H/4rg9tKJBRVbt6uIU6DnhsI
wQmzK+dAAp0YbhH0rUVemKm9m5nIDvP2Y2xG+u382kZKuUEuoJV/OfA3QSPYwh4H
e1WxLEU8pPyjzHlz4HZBMm6L/kdB2nCUsOny7gl3XBMITiZ8WOrtb5gofGqM8z+V
UKTnHooOsEOllN28Bz7rkl9o+Wt2a8rtHBwO0Rr8+SP6gRQWD7JSo/fMdK+IuSzz
238/pup9cgZ9bI9rnSodlfb2hXXBDhZWrIc1fhyGrWbu52k1dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrF07XUyPceDD8Moyp1bxt6pY2zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjk4MzIyZGItOTQ3My0z
YTNkLTgxY2MtMGU4ZDMwMmY5ZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFy9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdVroNuHPcyce9U+OUVSS8vHrApJQHmB22DAeWWeSBArQwD0sDLSGg4
hlJ+w2icoK+vnmcmngdfP0kE69udkKODNfn/dwCBtXXeZgJ6oHWRleLQlPTauL8R
yJu8WuQvgWofNyP4FvVFwDgF6iB889F+MsuAmrNZo8eg9pwVkRJ+v/daNzp/ZF35
9SMq5cuaWVxEI75zNX73oiHcLqI1ej5EmdapszxKBpHhD5k+RH0QAak+rmsfKSx3
J5mGY/jVwIvrO0KaWzD44agZVO4jrwHM/ErNCjX1l1Qs/D7n/NizNycjcYDEea9f
bIFQjYimbxX346v7o/2ctBNW8HgOTIw=
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:05:14 2026 by rpki-client