Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9df540e-b421-3c60-91c3-c97266626da5.roa
File:                     d9df540e-b421-3c60-91c3-c97266626da5.roa (raw, json)
Hash identifier:          SFD16D7T5/VjYuunNKrVbGVjY7M711N+BeqH4LtPkV8=
Subject key identifier:   76:8A:3F:EA:AF:13:6B:7B:A5:8D:8E:93:E7:DE:DB:4D:0C:91:7B:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E20E056A2B0BD2E6D36080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9df540e-b421-3c60-91c3-c97266626da5.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.203.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:0e:05:6a:2b:0b:d2:e6:d3:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=69009148-2704-4b31-a649-4a9434c17b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:f9:37:1f:b7:09:ce:f1:5e:72:33:e6:bc:
                    3b:96:19:86:59:a7:66:56:82:b4:7e:34:91:85:79:
                    f3:b9:56:8b:0b:c5:d8:35:20:1b:a8:ca:1a:53:a3:
                    69:10:6b:47:d5:a9:2c:39:4e:f5:82:6e:da:ac:3e:
                    3e:ac:0f:ef:a5:30:60:62:8d:0d:8f:3b:d2:8b:9b:
                    ce:a4:f5:b8:71:eb:9c:a2:a0:3c:6e:c5:5b:e7:ff:
                    08:c0:86:ba:73:b7:41:4f:45:de:2b:e1:fb:25:d7:
                    a1:b7:5e:4a:8d:7a:3b:a6:fa:0e:95:03:84:bd:41:
                    2f:4e:7f:2a:35:a2:09:50:34:d3:17:9b:02:4c:3f:
                    2f:da:c1:57:50:26:94:70:d4:3e:8c:42:99:10:73:
                    a2:57:27:4c:ea:ea:cc:96:de:23:6d:04:2a:31:c4:
                    1d:fe:fe:f0:c5:e2:f2:56:5c:42:fe:04:06:df:83:
                    05:c6:84:81:ae:8a:cf:c3:4d:fa:24:0f:dd:f0:21:
                    2b:29:40:e3:84:86:71:13:52:d1:72:4e:e0:df:e8:
                    c7:52:43:ea:31:4d:73:40:37:6e:2c:f9:c0:a1:ee:
                    a0:47:a2:7e:e2:60:be:7f:a8:ac:5f:b5:95:58:e2:
                    a3:d2:c1:4f:08:34:a6:36:e9:76:14:2f:ee:fa:ea:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:3F:EA:AF:13:6B:7B:A5:8D:8E:93:E7:DE:DB:4D:0C:91:7B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9df540e-b421-3c60-91c3-c97266626da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.203.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:bf:8b:2e:df:31:56:4a:5a:d0:a2:5d:5b:7f:a9:ac:3f:
         17:c6:d7:9c:68:ec:30:d7:49:2b:f5:72:e3:6c:a8:4a:94:9e:
         5c:9a:1a:cf:57:a5:27:c8:36:a5:e5:14:4a:5e:91:3d:98:b5:
         36:9d:3d:70:42:63:80:8d:21:ba:7f:63:3b:59:55:82:71:d0:
         32:98:de:95:72:f3:ac:4e:e9:8e:8a:26:25:16:62:79:65:c8:
         da:48:c1:66:8e:e3:38:a7:d6:b6:71:6b:a3:ce:96:b5:20:a4:
         f9:40:9e:cc:40:71:63:05:6f:77:ad:c4:33:d4:be:97:19:35:
         50:d0:fa:63:1b:2f:3e:9c:1e:38:70:42:3a:2b:db:23:a8:07:
         14:43:c7:d2:7d:58:9d:a4:2b:3d:e8:3f:22:20:1d:2b:8c:3c:
         ae:e5:8e:c7:de:ef:bc:b4:13:1c:f2:af:7c:5f:29:5f:a4:c6:
         ae:42:be:66:41:e9:b5:46:f6:ac:47:f7:82:98:ed:27:28:c8:
         de:e9:21:ce:e0:3e:2b:ed:95:ac:a7:30:75:cc:e9:4b:51:40:
         3a:e6:92:6b:43:67:66:72:d8:f4:30:c2:dd:c4:99:7a:c2:d3:
         d6:e3:31:e7:b8:31:c1:cf:19:47:8d:e4:2f:ff:26:40:5a:08:
         b6:00:8a:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g4FaisL0ubTYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NjkwMDkxNDgtMjcwNC00YjMxLWE2NDktNGE5NDM0YzE3YjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFH5Nx+3Cc7xXnIz5rw7lhmGWadmVoK0fjSR
hXnzuVaLC8XYNSAbqMoaU6NpEGtH1aksOU71gm7arD4+rA/vpTBgYo0NjzvSi5vO
pPW4ceucoqA8bsVb5/8IwIa6c7dBT0XeK+H7Jdeht15KjXo7pvoOlQOEvUEvTn8q
NaIJUDTTF5sCTD8v2sFXUCaUcNQ+jEKZEHOiVydM6urMlt4jbQQqMcQd/v7wxeLy
VlxC/gQG34MFxoSBrorPw036JA/d8CErKUDjhIZxE1LRck7g3+jHUkPqMU1zQDdu
LPnAoe6gR6J+4mC+f6isX7WVWOKj0sFPCDSmNul2FC/u+uqe1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHaKP+qvE2t7pY2Ok+fe200MkXt0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDlkZjU0MGUtYjQyMS0z
YzYwLTkxYzMtYzk3MjY2NjI2ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8t0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAPv4su3zFWSlrQol1bf6msPxfG15xo7DDXSSv1cuNsqEqUnlyaGs9X
pSfINqXlFEpekT2YtTadPXBCY4CNIbp/YztZVYJx0DKY3pVy86xO6Y6KJiUWYnll
yNpIwWaO4zin1rZxa6POlrUgpPlAnsxAcWMFb3etxDPUvpcZNVDQ+mMbLz6cHjhw
Qjor2yOoBxRDx9J9WJ2kKz3oPyIgHSuMPK7ljsfe77y0Exzyr3xfKV+kxq5CvmZB
6bVG9qxH94KY7ScoyN7pIc7gPivtlaynMHXM6UtRQDrmkmtDZ2Zy2PQwwt3EmXrC
09bjMee4McHPGUeN5C//JkBaCLYAiiY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:30 2025 by rpki-client