Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/feee2faa-2c17-3ba4-932b-e7c7ccc34462.roa
File:                     feee2faa-2c17-3ba4-932b-e7c7ccc34462.roa (raw, json)
Hash identifier:          pEh4eZLTbxcBk83bThtiN8McKqim1h4D/uP98UIzRHo=
Subject key identifier:   06:3C:88:B1:0D:D4:9E:3A:73:1F:FB:80:00:E7:A2:36:C0:20:88:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D19B4CD3C1C5C7909AE706700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/feee2faa-2c17-3ba4-932b-e7c7ccc34462.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16625
IP address blocks:        23.206.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:cd:3c:1c:5c:79:09:ae:70:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=a3f7f297-c66c-461a-b901-25e282aa06e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:c8:e9:96:3f:3a:e0:89:fd:e5:c8:e5:94:
                    2f:6c:83:2d:36:d4:35:ff:08:d2:25:8f:d1:4c:55:
                    a4:e7:39:bd:06:c4:3c:db:dc:80:c2:e7:05:18:b0:
                    9b:56:b0:ad:8e:bd:b5:6b:4a:79:93:e3:4f:99:d8:
                    6b:b3:64:0f:07:e2:37:4d:f9:7d:7a:ba:c7:e4:1e:
                    b1:9d:11:b6:04:1c:01:aa:64:2a:9a:aa:2a:9a:be:
                    51:a8:c1:1b:42:95:4f:08:8a:ae:bc:e4:20:e1:2a:
                    ef:e2:70:81:ee:b3:6b:bb:78:2e:1b:e2:95:90:a3:
                    12:1c:eb:85:03:91:1a:e7:8c:2e:ff:ca:47:99:9f:
                    c0:44:02:b0:7c:20:7a:33:e9:13:98:a5:62:04:75:
                    fd:d3:33:36:cd:13:f0:ed:ea:a7:78:ef:66:10:8b:
                    05:1e:04:be:b0:1f:ae:c3:cf:3f:63:33:57:89:70:
                    26:31:9f:80:b5:6f:2b:a0:35:25:d0:08:d1:e9:d8:
                    f5:ae:e0:99:04:bc:3b:8d:fe:0c:85:8c:66:7c:c2:
                    1e:e8:c1:b8:3a:4a:ee:ed:03:a1:15:e5:d1:f8:6b:
                    9f:99:6e:7f:db:94:e2:6f:c6:04:57:cf:39:77:8b:
                    84:7b:d2:5e:4f:ca:42:0e:31:00:db:32:9e:f8:8b:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:88:B1:0D:D4:9E:3A:73:1F:FB:80:00:E7:A2:36:C0:20:88:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/feee2faa-2c17-3ba4-932b-e7c7ccc34462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:05:c0:3c:b7:81:79:fa:9d:1f:e7:03:6e:4d:1b:4d:f9:79:
         19:29:da:56:43:73:fd:95:f5:99:71:3d:2d:f1:17:62:73:6b:
         72:5e:f5:f3:13:54:66:62:89:4b:5f:f3:61:0c:28:2d:d6:e0:
         b1:9a:ee:07:99:a1:e8:6f:77:94:28:31:fa:87:0a:8b:62:40:
         4c:18:d6:9b:a5:44:b3:9f:67:02:6e:73:b5:f0:5b:88:29:20:
         68:b3:0c:e6:1a:d5:1d:9b:4e:d6:8b:1b:46:3a:61:18:ca:96:
         41:57:0e:e5:b1:1e:73:0d:ee:88:7a:b1:3a:8b:82:47:97:ca:
         c7:71:b6:b9:89:b6:95:0d:e1:fa:f5:76:85:fe:c3:95:9f:bc:
         3e:62:27:2f:7d:eb:94:1e:e1:76:58:d0:24:8b:5d:84:55:79:
         af:ca:d5:28:16:07:31:41:df:74:2a:5a:d4:f0:30:95:8d:8e:
         32:e3:d7:0d:2e:85:ab:2d:10:35:02:79:4c:e8:4c:cf:6c:d0:
         49:b7:d8:e6:19:30:1a:39:f0:af:1c:8c:0d:5f:8a:9d:b2:41:
         07:05:ab:f2:80:dd:52:95:e6:dc:7b:b4:22:3e:00:24:aa:32:
         c5:22:2f:28:3a:81:f8:fa:ca:f0:15:55:63:51:4a:3b:ad:72:
         81:f3:a1:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtM08HFx5Ca5wZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
YTNmN2YyOTctYzY2Yy00NjFhLWI5MDEtMjVlMjgyYWEwNmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqrI6ZY/OuCJ/eXI5ZQvbIMtNtQ1/wjSJY/R
TFWk5zm9BsQ829yAwucFGLCbVrCtjr21a0p5k+NPmdhrs2QPB+I3Tfl9errH5B6x
nRG2BBwBqmQqmqoqmr5RqMEbQpVPCIquvOQg4Srv4nCB7rNru3guG+KVkKMSHOuF
A5Ea54wu/8pHmZ/ARAKwfCB6M+kTmKViBHX90zM2zRPw7eqneO9mEIsFHgS+sB+u
w88/YzNXiXAmMZ+AtW8roDUl0AjR6dj1ruCZBLw7jf4MhYxmfMIe6MG4Okru7QOh
FeXR+GufmW5/25Tib8YEV885d4uEe9JeT8pCDjEA2zKe+IvJ6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAY8iLEN1J46cx/7gADnojbAIIjeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmVlZTJmYWEtMmMxNy0z
YmE0LTkzMmItZTdjN2NjYzM0NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF87cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIFwDy3gXn6nR/nA25NG035eRkp2lZDc/2V9ZlxPS3xF2Jza3Je9fMT
VGZiiUtf82EMKC3W4LGa7geZoehvd5QoMfqHCotiQEwY1pulRLOfZwJuc7XwW4gp
IGizDOYa1R2bTtaLG0Y6YRjKlkFXDuWxHnMN7oh6sTqLgkeXysdxtrmJtpUN4fr1
doX+w5WfvD5iJy9965Qe4XZY0CSLXYRVea/K1SgWBzFB33QqWtTwMJWNjjLj1w0u
hastEDUCeUzoTM9s0Em32OYZMBo58K8cjA1fip2yQQcFq/KA3VKV5tx7tCI+ACSq
MsUiLyg6gfj6yvAVVWNRSjutcoHzoRw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client