Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c363ae00-1c34-3a0f-aa78-ab0ca68beb49.roa
File:                     c363ae00-1c34-3a0f-aa78-ab0ca68beb49.roa (raw, json)
Hash identifier:          QcKu589/YVEbw+2ivaaZr/ct7PAwTs2RZK7GEIjSnBo=
Subject key identifier:   14:B2:10:11:46:2A:E6:4C:81:C5:DE:4A:B4:06:E4:CE:88:5E:47:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DADAAE9334F0E454D1B061830
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c363ae00-1c34-3a0f-aa78-ab0ca68beb49.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        23.32.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e9:33:4f:0e:45:4d:1b:06:18:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=8183b6a6-df65-4011-a62a-f34a7819e522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:fb:d3:be:ad:84:4e:41:67:57:37:07:ee:
                    df:c4:05:3e:a6:ce:f3:33:33:07:e4:e2:17:e8:c1:
                    c2:aa:eb:5d:95:b1:6c:e1:89:fc:26:14:78:e3:d7:
                    15:2e:95:9e:08:e4:a1:43:ab:3c:a4:53:85:3a:d4:
                    4d:9b:e8:28:2e:70:c8:46:df:f6:ca:9f:48:b5:ff:
                    8b:98:d8:72:0e:a9:4b:ac:9f:ad:0a:bb:76:bf:67:
                    11:19:d6:5f:8b:a8:5a:78:41:e2:c6:1f:07:f7:22:
                    f6:f6:34:03:57:f9:a0:7a:d3:3d:90:ae:01:a4:eb:
                    a2:68:bb:e7:11:8e:26:60:fd:5a:c8:8a:75:5c:ff:
                    74:91:15:2f:29:f7:55:87:d7:df:86:4c:83:6c:c0:
                    11:10:6e:f0:12:8b:a9:19:f5:87:8b:f5:3b:18:17:
                    c8:6a:43:ad:54:78:11:91:69:4d:28:33:ca:a7:3b:
                    e4:af:87:ed:cd:24:4c:28:15:dd:4d:0d:6e:2b:60:
                    4a:6c:dd:69:1b:1d:a3:12:ec:fd:34:94:24:89:70:
                    7a:be:e3:d4:ca:65:ed:93:a0:e7:ff:3c:8e:85:66:
                    ce:ed:79:9b:de:9f:e3:64:ca:32:d4:97:56:d8:87:
                    cc:85:fe:b4:70:10:1c:8f:4f:de:b4:85:12:2a:52:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B2:10:11:46:2A:E6:4C:81:C5:DE:4A:B4:06:E4:CE:88:5E:47:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c363ae00-1c34-3a0f-aa78-ab0ca68beb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:4c:81:23:5b:7a:ba:4f:d1:02:c4:db:21:bb:88:e8:a4:
         4a:5c:5a:b2:60:01:0a:1b:92:05:5e:63:be:2c:30:64:ab:41:
         ff:43:ea:9b:1c:66:1d:78:4e:ee:17:ff:f4:f4:d2:ef:e0:66:
         14:18:f2:37:c4:19:05:c5:23:5e:f7:3e:a7:06:62:b8:c6:69:
         8a:62:2c:51:b7:4d:b9:3a:4a:22:2e:e4:6a:f8:ee:eb:7e:a8:
         e3:0e:41:da:7d:fc:9d:a9:99:91:60:ad:32:0b:0d:17:bd:f1:
         d3:b9:62:18:e6:a0:c7:6b:2a:7d:65:a3:f6:5f:d3:4b:bd:df:
         24:dd:64:3e:42:0d:b0:b6:b3:30:b4:b9:3e:f6:2e:ce:ec:59:
         b9:f9:e4:17:38:54:e9:12:90:95:66:73:cb:7b:9b:83:57:7f:
         fe:3c:1d:0a:4e:91:09:13:1b:8a:6e:94:b4:a8:0b:f3:6d:5e:
         5b:27:9d:07:ea:6d:1c:40:35:98:a3:e3:37:f7:12:7c:24:fa:
         27:25:52:92:c1:a5:41:63:19:d0:eb:73:4f:e0:b3:b8:37:16:
         4b:f2:87:d1:f7:20:d5:0b:26:32:03:5d:74:dc:7a:da:c2:14:
         3f:11:c8:78:73:42:32:04:17:fc:3f:09:ca:33:dd:ca:73:b8:
         f1:b1:30:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqukzTw5FTRsGGDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk
ODE4M2I2YTYtZGY2NS00MDExLWE2MmEtZjM0YTc4MTllNTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpL7076thE5BZ1c3B+7fxAU+ps7zMzMH5OIX
6MHCqutdlbFs4Yn8JhR449cVLpWeCOShQ6s8pFOFOtRNm+goLnDIRt/2yp9Itf+L
mNhyDqlLrJ+tCrt2v2cRGdZfi6haeEHixh8H9yL29jQDV/mgetM9kK4BpOuiaLvn
EY4mYP1ayIp1XP90kRUvKfdVh9ffhkyDbMAREG7wEoupGfWHi/U7GBfIakOtVHgR
kWlNKDPKpzvkr4ftzSRMKBXdTQ1uK2BKbN1pGx2jEuz9NJQkiXB6vuPUymXtk6Dn
/zyOhWbO7Xmb3p/jZMoy1JdW2IfMhf60cBAcj0/etIUSKlJRKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSyEBFGKuZMgcXeSrQG5M6IXkdTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzM2M2FlMDAtMWMzNC0z
YTBmLWFhNzgtYWIwY2E2OGJlYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyBMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPzTIEjW3q6T9ECxNshu4jopEpcWrJgAQobkgVeY74sMGSrQf9D6psc
Zh14Tu4X//T00u/gZhQY8jfEGQXFI173PqcGYrjGaYpiLFG3Tbk6SiIu5Gr47ut+
qOMOQdp9/J2pmZFgrTILDRe98dO5YhjmoMdrKn1lo/Zf00u93yTdZD5CDbC2szC0
uT72Ls7sWbn55Bc4VOkSkJVmc8t7m4NXf/48HQpOkQkTG4pulLSoC/NtXlsnnQfq
bRxANZij4zf3Enwk+iclUpLBpUFjGdDrc0/gs7g3Fkvyh9H3INULJjIDXXTcetrC
FD8RyHhzQjIEF/w/Ccoz3cpzuPGxMGw=
-----END CERTIFICATE-----
Generated at Wed May 13 10:03:05 2026 by rpki-client