Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f202b662-7846-388f-831d-a0d37004d7e3.roa
File:                     f202b662-7846-388f-831d-a0d37004d7e3.roa (raw, json)
Hash identifier:          GVBnIv/oB544gHn96U8HZJLGSrEpcT8yC0ZDEnyAUsQ=
Subject key identifier:   B3:2B:90:52:12:45:1F:81:17:CF:75:E0:DF:1B:A8:32:A6:EF:FC:90
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4985EBC55FAA3BF43DEB0780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f202b662-7846-388f-831d-a0d37004d7e3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.211.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:eb:c5:5f:aa:3b:f4:3d:eb:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=96438631-6073-4144-a8bc-8430177b0890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ae:28:a8:64:a0:e1:de:7e:60:34:24:15:d8:
                    59:ea:6a:cd:99:bd:c0:92:cb:ca:54:fb:4d:98:4d:
                    91:f9:8b:f7:88:b9:73:c7:75:bd:1a:92:79:30:e3:
                    24:c0:84:48:de:f5:6d:d6:d7:20:e9:e1:b2:7b:fb:
                    0d:93:80:da:32:33:74:a7:84:82:54:e2:c7:5b:97:
                    bd:05:b7:ee:42:88:de:8f:80:6f:eb:e6:60:c2:60:
                    94:e7:d3:c1:e2:69:c8:2c:d0:f7:9e:8e:fb:63:26:
                    eb:ac:f7:0c:b9:fe:02:d9:5a:4f:40:fe:de:b0:91:
                    79:e0:fb:f1:fa:9a:8e:06:a5:93:95:91:69:22:0d:
                    0c:99:38:27:dc:1e:c7:6c:f5:6f:ae:9f:73:58:ea:
                    10:ca:81:be:a4:d6:80:fd:87:81:34:d2:c2:c9:03:
                    87:cb:f0:60:32:91:3a:6d:76:c7:f8:a7:d9:44:81:
                    cb:74:8d:80:18:45:0f:d7:2a:32:73:ef:f4:7a:ae:
                    7b:67:52:03:e6:d7:5a:70:9f:00:f6:7a:46:c6:2b:
                    be:0c:b6:da:9f:42:45:bd:1b:be:dc:49:7f:ad:df:
                    74:ae:ea:b3:62:4e:33:32:c6:f5:da:c7:4b:92:2c:
                    a3:7a:23:83:80:ba:be:ac:05:25:e4:a8:b2:48:bc:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2B:90:52:12:45:1F:81:17:CF:75:E0:DF:1B:A8:32:A6:EF:FC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f202b662-7846-388f-831d-a0d37004d7e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:ba:11:7d:9c:38:d7:7a:46:98:a1:53:fd:49:81:03:95:
         66:f2:08:39:48:62:ae:ce:4c:6b:9b:34:80:2b:83:d6:f2:65:
         b9:4b:bd:e3:96:f2:08:32:67:d9:7e:80:85:10:c6:d5:52:eb:
         86:7f:5e:cd:06:42:ba:2e:eb:7c:23:52:97:84:21:9e:39:dc:
         00:66:56:e8:c3:5f:0a:d8:0a:41:1e:ae:b2:cd:0e:6d:ca:86:
         a9:f3:4e:c2:f1:d9:bb:d2:ac:92:e6:0b:ec:63:9f:f5:c7:37:
         19:fc:cc:d1:f9:fd:25:8c:0b:24:6f:e0:ab:90:12:42:79:c3:
         4f:ae:2e:e0:ca:7b:6e:ef:b9:ae:9e:64:eb:19:64:41:8c:50:
         c0:38:38:83:00:70:5f:05:c3:99:ab:b8:94:eb:13:1f:7c:22:
         d7:5a:35:cc:cc:70:8e:1e:d2:c2:bd:2f:40:33:2c:d4:af:40:
         4b:11:4c:ba:8a:83:28:c1:17:e9:53:77:12:49:5a:7c:ab:ae:
         ff:08:4f:06:83:cc:d7:2f:7e:bc:e4:0e:f4:35:11:db:45:99:
         25:1c:63:19:3f:a1:cc:bf:08:50:99:77:c6:a1:59:41:d6:e6:
         46:7d:40:96:3f:4d:35:c3:96:60:f0:fc:d3:2d:d9:ce:0b:c0:
         be:e5:b9:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhevFX6o79D3rB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTY0Mzg2MzEtNjA3My00MTQ0LWE4YmMtODQzMDE3N2IwODkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh64oqGSg4d5+YDQkFdhZ6mrNmb3AksvKVPtN
mE2R+Yv3iLlzx3W9GpJ5MOMkwIRI3vVt1tcg6eGye/sNk4DaMjN0p4SCVOLHW5e9
BbfuQojej4Bv6+ZgwmCU59PB4mnILND3no77YybrrPcMuf4C2VpPQP7esJF54Pvx
+pqOBqWTlZFpIg0MmTgn3B7HbPVvrp9zWOoQyoG+pNaA/YeBNNLCyQOHy/BgMpE6
bXbH+KfZRIHLdI2AGEUP1yoyc+/0eq57Z1ID5tdacJ8A9npGxiu+DLban0JFvRu+
3El/rd90ruqzYk4zMsb12sdLkiyjeiODgLq+rAUl5KiySLyUBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMrkFISRR+BF8914N8bqDKm7/yQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIwMmI2NjItNzg0Ni0z
ODhmLTgzMWQtYTBkMzcwMDRkN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9NoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAz+uhF9nDjXekaYoVP9SYEDlWbyCDlIYq7OTGubNIArg9byZblLveOW
8ggyZ9l+gIUQxtVS64Z/Xs0GQrou63wjUpeEIZ453ABmVujDXwrYCkEerrLNDm3K
hqnzTsLx2bvSrJLmC+xjn/XHNxn8zNH5/SWMCyRv4KuQEkJ5w0+uLuDKe27vua6e
ZOsZZEGMUMA4OIMAcF8Fw5mruJTrEx98ItdaNczMcI4e0sK9L0AzLNSvQEsRTLqK
gyjBF+lTdxJJWnyrrv8ITwaDzNcvfrzkDvQ1EdtFmSUcYxk/ocy/CFCZd8ahWUHW
5kZ9QJY/TTXDlmDw/NMt2c4LwL7lubU=
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:03:53 2026 by rpki-client