Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2630f6e-eba6-3078-8dd5-eafc3069a1f5.roa
File:                     e2630f6e-eba6-3078-8dd5-eafc3069a1f5.roa (raw, json)
Hash identifier:          br+JaHRznELU+ZNy1KOctQC1DG35fKbzvo0qe5hfaro=
Subject key identifier:   E8:8D:B8:9E:A2:DD:5F:E7:3E:2F:54:13:0A:AB:45:F4:23:17:9A:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E8F54F8EAD51B119CE33C8250
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2630f6e-eba6-3078-8dd5-eafc3069a1f5.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     16625
IP address blocks:        23.33.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f8:ea:d5:1b:11:9c:e3:3c:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=1ed14252-59e5-4821-8635-5d0a67dade1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:d9:ce:03:d1:dc:2f:31:a4:04:e6:12:6e:
                    58:ab:97:4a:65:6c:d8:f1:2f:ce:a6:f0:c6:d2:57:
                    8b:b6:a0:68:82:7c:ea:e9:37:5a:ea:81:bd:7b:89:
                    c9:34:64:b3:d0:95:43:2d:1d:99:27:d9:0f:e0:2f:
                    b9:10:e2:b8:33:a7:0d:a8:f1:91:17:18:9a:74:2e:
                    fd:23:0e:69:b7:79:26:f6:f6:af:c8:dc:89:ed:79:
                    da:7f:30:ee:7e:30:2e:07:47:0c:aa:2d:10:9c:b3:
                    71:c7:e6:b4:bf:44:7d:42:89:fe:7b:fd:fb:32:de:
                    8e:39:3f:5c:82:d2:5f:4d:48:7e:3c:56:14:d4:5e:
                    33:41:43:07:aa:03:3a:4a:80:62:3d:fa:be:b0:82:
                    64:56:da:e0:d5:77:fb:df:c3:9e:9b:30:2a:53:c5:
                    fc:52:fa:a2:d9:5d:ac:f8:b5:c8:00:43:5f:e9:1c:
                    40:bb:43:f8:23:62:f8:25:c4:95:db:bf:fb:11:10:
                    29:fb:74:9e:3a:32:cf:56:30:6a:35:11:dc:ef:bb:
                    88:4d:18:2b:c4:5f:00:a5:8b:51:e5:bb:35:e6:9e:
                    4f:c5:e3:f2:84:bb:84:ae:1a:79:22:3d:db:9a:06:
                    38:39:8e:36:34:02:b3:11:fa:8f:90:d7:72:3f:61:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8D:B8:9E:A2:DD:5F:E7:3E:2F:54:13:0A:AB:45:F4:23:17:9A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2630f6e-eba6-3078-8dd5-eafc3069a1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:10:6f:c1:ab:1b:2e:5c:a9:2b:16:29:c6:e3:ff:c8:2b:1b:
         9c:58:83:66:ab:9c:d6:43:e6:b7:73:66:19:3b:14:ca:bd:dc:
         ba:ad:20:c1:5c:c6:64:06:b2:23:2d:b5:09:41:4c:f8:9c:14:
         ab:7a:f6:6b:f3:ec:78:6f:ab:d4:38:97:45:39:43:6a:de:bc:
         1f:e3:a4:ed:b2:bf:83:52:55:83:6c:9a:d8:1b:4c:35:6c:b7:
         bc:bc:ed:44:b9:8f:40:e9:f6:36:c5:01:dd:26:71:be:23:80:
         20:51:bb:11:67:9f:2f:92:e7:60:70:09:cc:33:d2:6f:e4:01:
         1a:d8:17:ac:34:ef:09:b2:07:b0:86:38:af:90:c4:fe:42:64:
         fb:b8:d8:4d:f5:da:7d:cc:48:4c:9f:67:02:24:2d:89:b4:e0:
         d2:e3:2e:c7:d6:66:6a:c2:56:71:67:f5:b5:00:5e:d0:98:8d:
         21:2b:13:a1:b9:ba:12:fa:15:dc:66:80:65:02:7d:86:9a:7a:
         c9:e0:c6:a0:36:7f:55:53:c0:4c:e1:6e:48:36:d9:ab:40:ab:
         d3:df:3d:13:90:64:90:37:d3:2a:bd:cb:cd:90:aa:a5:e7:d5:
         e7:77:db:09:43:60:63:7b:a3:97:23:19:3a:4e:d7:92:e9:d1:
         d6:25:8d:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPjq1RsRnOM8glAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk
MWVkMTQyNTItNTllNS00ODIxLTg2MzUtNWQwYTY3ZGFkZTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWfZzgPR3C8xpATmEm5Yq5dKZWzY8S/OpvDG
0leLtqBognzq6Tda6oG9e4nJNGSz0JVDLR2ZJ9kP4C+5EOK4M6cNqPGRFxiadC79
Iw5pt3km9vavyNyJ7XnafzDufjAuB0cMqi0QnLNxx+a0v0R9Qon+e/37Mt6OOT9c
gtJfTUh+PFYU1F4zQUMHqgM6SoBiPfq+sIJkVtrg1Xf738OemzAqU8X8Uvqi2V2s
+LXIAENf6RxAu0P4I2L4JcSV27/7ERAp+3SeOjLPVjBqNRHc77uITRgrxF8ApYtR
5bs15p5PxePyhLuErhp5Ij3bmgY4OY42NAKzEfqPkNdyP2F66wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiNuJ6i3V/nPi9UEwqrRfQjF5rKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTI2MzBmNmUtZWJhNi0z
MDc4LThkZDUtZWFmYzMwNjlhMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyGkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUQb8GrGy5cqSsWKcbj/8grG5xYg2arnNZD5rdzZhk7FMq93LqtIMFc
xmQGsiMttQlBTPicFKt69mvz7Hhvq9Q4l0U5Q2revB/jpO2yv4NSVYNsmtgbTDVs
t7y87US5j0Dp9jbFAd0mcb4jgCBRuxFnny+S52BwCcwz0m/kARrYF6w07wmyB7CG
OK+QxP5CZPu42E312n3MSEyfZwIkLYm04NLjLsfWZmrCVnFn9bUAXtCYjSErE6G5
uhL6FdxmgGUCfYaaesngxqA2f1VTwEzhbkg22atAq9PfPROQZJA30yq9y82QqqXn
1ed32wlDYGN7o5cjGTpO15Lp0dYljRw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:15 2026 by rpki-client