Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c353eeb3-d4f0-365b-ac94-11deab9eb85f.roa
File:                     c353eeb3-d4f0-365b-ac94-11deab9eb85f.roa (raw, json)
Hash identifier:          wZ4kBtzvcCuWyTBTfVoq9eMnax+0+AuL0QJsmOw+x3s=
Subject key identifier:   7C:BA:A3:DE:6C:D0:D1:5F:79:9F:AA:3B:10:0B:55:12:A2:AE:30:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F549D9D3849C184682736DA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c353eeb3-d4f0-365b-ac94-11deab9eb85f.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.63.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:9d:38:49:c1:84:68:27:36:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=ee7d2295-877b-431f-ad80-99e72cb79afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:da:aa:b4:cf:71:c4:d2:95:d0:57:50:19:
                    6f:0d:1f:ec:73:2a:11:dc:57:f6:c3:08:d1:8f:18:
                    64:9b:8e:3f:a7:22:05:ae:28:ed:01:21:d7:4b:14:
                    4a:d3:6c:cb:4c:3d:a4:b5:ce:f5:81:94:24:fb:37:
                    c4:0a:e4:e9:f5:45:05:76:4f:c3:46:0e:15:38:01:
                    ea:0f:73:39:a9:4d:a2:36:10:92:3c:d9:e3:2a:7b:
                    b9:09:1b:f6:44:c0:80:c0:75:9a:45:c3:c8:cc:74:
                    1a:dd:84:21:49:32:4b:dd:2b:d3:e6:e0:5a:90:fb:
                    bb:8c:36:3a:19:0d:6a:93:8a:79:10:28:fd:21:fe:
                    c4:36:1b:29:b9:17:c3:77:6a:73:03:8e:0e:e5:bc:
                    ba:f9:e1:84:3d:da:e8:a5:18:f7:04:32:d0:65:da:
                    fd:c0:c3:4a:e9:b3:25:d8:04:9a:e2:ab:fd:ce:15:
                    6b:6d:8b:b5:8c:44:40:90:66:55:6a:4f:29:ba:40:
                    3a:3e:42:bb:c2:ac:52:0b:47:9b:cf:51:e5:c1:05:
                    45:32:d0:aa:6b:17:1e:c9:35:6e:2a:86:80:04:fd:
                    cd:70:72:d3:5f:77:e8:74:f6:f2:2f:c6:ba:c2:c4:
                    54:7a:b9:0a:de:4c:ee:f1:c2:c5:78:14:d0:13:cf:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:A3:DE:6C:D0:D1:5F:79:9F:AA:3B:10:0B:55:12:A2:AE:30:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c353eeb3-d4f0-365b-ac94-11deab9eb85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:ad:7e:8b:e7:ab:dd:4d:69:45:f9:33:cb:ae:5f:a3:6d:
         67:86:6d:5e:c4:94:e6:9e:58:43:25:50:21:03:32:4d:cc:57:
         58:8f:6f:ee:53:ed:b2:17:88:15:a0:3f:00:f6:92:ee:58:71:
         51:0b:ef:92:4f:9c:69:38:3d:ea:38:b1:80:3e:4a:a8:22:bc:
         12:18:fc:91:4e:29:cd:1c:05:5c:e6:69:34:ef:fd:7b:c6:54:
         23:94:8f:e1:85:1e:93:17:5d:9e:e6:52:14:d3:93:c3:5d:0a:
         ec:7c:ec:ca:1f:04:e2:cc:27:c2:b1:9f:15:27:eb:16:b9:39:
         f5:95:e4:eb:35:3c:dc:7b:cb:78:72:91:46:e5:9a:ba:3c:52:
         1f:1f:18:52:43:f5:d5:ea:bf:96:f9:65:3b:b2:f9:46:bd:17:
         3e:18:d9:a8:37:a5:1e:a5:d6:90:c0:9f:87:b7:94:08:21:bc:
         34:c9:07:99:ef:0a:d0:e2:d8:59:74:91:9b:36:a8:63:64:04:
         bf:3c:5c:0f:fe:06:bd:06:d1:9e:0c:3c:f9:65:59:56:af:08:
         8a:1e:6b:c5:ce:5d:ec:00:21:53:bd:53:5c:39:6f:9d:2c:e5:
         1a:7c:e0:ff:59:9e:e0:2d:c0:25:de:52:29:14:5c:83:fc:a4:
         0e:2e:2a:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZ04ScGEaCc22gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
ZWU3ZDIyOTUtODc3Yi00MzFmLWFkODAtOTllNzJjYjc5YWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEraqrTPccTSldBXUBlvDR/scyoR3Ff2wwjR
jxhkm44/pyIFrijtASHXSxRK02zLTD2ktc71gZQk+zfECuTp9UUFdk/DRg4VOAHq
D3M5qU2iNhCSPNnjKnu5CRv2RMCAwHWaRcPIzHQa3YQhSTJL3SvT5uBakPu7jDY6
GQ1qk4p5ECj9If7ENhspuRfDd2pzA44O5by6+eGEPdropRj3BDLQZdr9wMNK6bMl
2ASa4qv9zhVrbYu1jERAkGZVak8pukA6PkK7wqxSC0ebz1HlwQVFMtCqaxceyTVu
KoaABP3NcHLTX3fodPbyL8a6wsRUerkK3kzu8cLFeBTQE8/RGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHy6o95s0NFfeZ+qOxALVRKirjBaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzM1M2VlYjMtZDRmMC0z
NjViLWFjOTQtMTFkZWFiOWViODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz/8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxVrX6L56vdTWlF+TPLrl+jbWeGbV7ElOaeWEMlUCEDMk3MV1iPb+5T
7bIXiBWgPwD2ku5YcVEL75JPnGk4Peo4sYA+SqgivBIY/JFOKc0cBVzmaTTv/XvG
VCOUj+GFHpMXXZ7mUhTTk8NdCux87MofBOLMJ8KxnxUn6xa5OfWV5Os1PNx7y3hy
kUblmro8Uh8fGFJD9dXqv5b5ZTuy+Ua9Fz4Y2ag3pR6l1pDAn4e3lAghvDTJB5nv
CtDi2Fl0kZs2qGNkBL88XA/+Br0G0Z4MPPllWVavCIoea8XOXewAIVO9U1w5b50s
5Rp84P9ZnuAtwCXeUikUXIP8pA4uKqc=
-----END CERTIFICATE-----
Generated at Wed Sep 30 07:22:43 2026 by rpki-client