Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cce31ee9-71cb-386e-b209-674205848eee.roa
File:                     cce31ee9-71cb-386e-b209-674205848eee.roa (raw, json)
Hash identifier:          yNVbbHWiR9DAu9dc2/MDAGvJekcf9k58gVE5BqPzSjs=
Subject key identifier:   C2:CA:F8:AD:1B:82:BC:EA:B7:8A:28:13:95:55:7D:94:79:F6:6A:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D8C2AACCD7F9213B2F1A88700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cce31ee9-71cb-386e-b209-674205848eee.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     16625
IP address blocks:        23.219.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:ac:cd:7f:92:13:b2:f1:a8:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=6a7fee6e-a1d0-455a-9737-a56cf950941d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:1c:48:b6:bb:df:f8:90:ee:25:c4:fb:d3:
                    47:65:36:d2:3c:fa:cc:d8:23:d1:0e:d8:ee:76:82:
                    44:61:47:44:6f:fd:13:cb:e3:1d:72:5f:81:38:3b:
                    a2:9a:98:a2:18:a6:e5:cb:ee:21:90:e6:8f:1b:2e:
                    d4:57:49:10:08:45:39:55:d1:99:2a:aa:64:da:2b:
                    fc:5c:0e:df:c1:df:86:db:4b:86:3a:f6:54:a2:5f:
                    e0:97:0c:6c:ff:d4:41:0b:19:44:22:1e:40:85:aa:
                    b4:5a:15:08:b9:47:7f:90:69:57:01:48:4c:cf:1a:
                    2c:c1:f3:ca:c1:dc:40:bb:f6:c3:95:a3:17:54:14:
                    d8:3d:ba:69:10:b3:a5:0a:8c:4a:72:7a:ec:a2:dc:
                    e6:86:1a:39:8d:d9:80:5b:67:26:29:75:c7:8e:67:
                    cb:7a:e1:47:1a:b7:15:2c:4c:79:b7:d7:82:82:d5:
                    2c:c2:df:7d:e7:2d:37:a2:e4:2a:03:df:57:5c:1e:
                    d5:3b:52:70:f8:b4:93:e4:28:a1:33:ff:66:81:e3:
                    6f:6f:f2:fa:8b:44:c7:cd:68:74:f3:fb:c4:31:bf:
                    6c:ba:53:63:26:c5:c7:70:7c:00:6f:00:a9:33:85:
                    e4:05:5c:b8:90:69:b1:01:39:8e:ac:4c:66:f5:df:
                    ae:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CA:F8:AD:1B:82:BC:EA:B7:8A:28:13:95:55:7D:94:79:F6:6A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cce31ee9-71cb-386e-b209-674205848eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:6a:d4:99:cb:c2:aa:19:c0:d9:31:45:c0:8a:62:be:21:
         21:b6:c8:cd:83:dd:21:9e:12:48:db:cf:ec:7e:b6:7f:58:bf:
         b9:1d:fb:77:26:61:fd:28:ab:bf:8b:ba:3c:ef:54:fc:d2:db:
         64:8c:38:6a:6d:db:ca:91:db:a1:ac:63:17:f8:d3:dd:95:86:
         c1:b8:d7:0b:50:02:10:55:07:bc:fe:96:7a:7f:87:5a:b4:2d:
         a6:7f:85:2c:ff:c3:3e:4e:bd:e8:fa:ac:38:05:2e:02:3f:0f:
         f5:4a:3d:0c:be:87:f2:73:7c:61:0e:77:a2:df:be:29:67:04:
         98:56:c0:7c:2a:4a:a9:3a:08:6f:2f:57:81:6b:64:d7:6b:b0:
         03:98:ed:dd:50:dc:eb:83:b6:cf:b2:d8:60:f6:cc:61:29:f7:
         34:d2:21:12:e7:a4:b7:93:12:5e:ac:e1:49:2e:32:cf:b9:ad:
         b3:26:b9:42:b2:ba:c9:c5:45:50:2a:83:5e:72:95:d7:95:35:
         86:27:18:7f:8f:c1:7c:da:8b:47:e7:6b:a9:24:2a:3e:8f:86:
         92:51:ca:09:da:97:ef:05:15:2b:b7:28:d3:5e:28:61:af:39:
         75:27:3c:02:f9:fe:91:ae:b8:5c:c5:da:e0:69:88:fb:b7:89:
         18:8a:f3:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKqzNf5ITsvGohwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk
NmE3ZmVlNmUtYTFkMC00NTVhLTk3MzctYTU2Y2Y5NTA5NDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmccSLa73/iQ7iXE+9NHZTbSPPrM2CPRDtju
doJEYUdEb/0Ty+Mdcl+BODuimpiiGKbly+4hkOaPGy7UV0kQCEU5VdGZKqpk2iv8
XA7fwd+G20uGOvZUol/glwxs/9RBCxlEIh5Ahaq0WhUIuUd/kGlXAUhMzxoswfPK
wdxAu/bDlaMXVBTYPbppELOlCoxKcnrsotzmhho5jdmAW2cmKXXHjmfLeuFHGrcV
LEx5t9eCgtUswt995y03ouQqA99XXB7VO1Jw+LST5CihM/9mgeNvb/L6i0THzWh0
8/vEMb9sulNjJsXHcHwAbwCpM4XkBVy4kGmxATmOrExm9d+uiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLK+K0bgrzqt4ooE5VVfZR59mrKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2NlMzFlZTktNzFjYi0z
ODZlLWIyMDktNjc0MjA1ODQ4ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9ukMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDdatSZy8KqGcDZMUXAimK+ISG2yM2D3SGeEkjbz+x+tn9Yv7kd+3cm
Yf0oq7+LujzvVPzS22SMOGpt28qR26GsYxf4092VhsG41wtQAhBVB7z+lnp/h1q0
LaZ/hSz/wz5Ovej6rDgFLgI/D/VKPQy+h/JzfGEOd6LfvilnBJhWwHwqSqk6CG8v
V4FrZNdrsAOY7d1Q3OuDts+y2GD2zGEp9zTSIRLnpLeTEl6s4UkuMs+5rbMmuUKy
usnFRVAqg15yldeVNYYnGH+PwXzai0fna6kkKj6PhpJRygnal+8FFSu3KNNeKGGv
OXUnPAL5/pGuuFzF2uBpiPu3iRiK8wE=
-----END CERTIFICATE-----
Generated at Wed May 13 08:54:55 2026 by rpki-client