Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/23005aa1-9eb9-35c9-b569-01b7bca3357d.roa
File:                     23005aa1-9eb9-35c9-b569-01b7bca3357d.roa (raw, json)
Hash identifier:          Qgkpr5kvXmhXp9nWtYOvikp/UI5SncOFPAVF8Sn9Wu4=
Subject key identifier:   8D:59:E2:2C:CC:A7:FB:69:61:13:40:B1:45:3B:EF:B3:A5:93:57:32
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584DEB15FA110CFEBAB4C437B830
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/23005aa1-9eb9-35c9-b569-01b7bca3357d.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     19901
IP address blocks:        9.196.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:fa:11:0c:fe:ba:b4:c4:37:b8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=b6398bc1-d39a-40e1-9cbd-37426b5b7592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:cb:32:7e:5f:e1:e6:0f:7b:07:fd:fb:32:
                    cd:b0:05:4a:1d:1b:1e:d3:48:b3:a7:0d:07:59:d7:
                    5c:70:62:ed:b6:07:10:47:1c:da:d0:20:0d:01:74:
                    51:bf:6d:38:80:c9:65:1d:00:d1:a1:11:13:71:97:
                    9e:6f:66:31:05:1f:b5:67:f6:30:21:f2:91:d0:65:
                    18:d6:4c:49:33:48:06:9c:97:67:84:4d:dd:27:bd:
                    3c:f7:59:a1:f4:a6:f5:22:2a:2b:93:7f:f9:94:c3:
                    b1:d3:60:57:83:0f:28:4c:78:0b:10:da:1b:d5:14:
                    c0:79:9f:3f:4a:1d:f7:8a:0a:0d:4a:c3:d0:6f:ee:
                    a1:2f:51:36:b9:05:7d:a2:8e:43:c5:4a:34:f0:bf:
                    3f:4b:73:d9:96:91:b2:bd:0a:e2:33:a1:a7:84:bd:
                    5a:78:9d:6f:cc:60:3a:4b:5f:86:03:64:bb:c3:c4:
                    c9:f2:f0:7a:de:62:8a:55:06:4a:19:23:2f:a7:9d:
                    66:f7:94:d6:b7:33:f9:a6:ac:0d:c9:51:83:54:e9:
                    f5:29:73:6a:93:d9:32:64:e7:eb:90:0e:38:1c:20:
                    a1:9f:06:7d:c6:2f:87:4c:4a:69:56:45:06:ca:d5:
                    6e:0e:e4:7f:2d:50:0d:86:ab:c5:e9:88:a8:c5:31:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:E2:2C:CC:A7:FB:69:61:13:40:B1:45:3B:EF:B3:A5:93:57:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/23005aa1-9eb9-35c9-b569-01b7bca3357d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.196.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:c1:36:fa:e3:b2:61:3c:1b:72:50:2f:0e:43:d2:74:33:
         a8:8e:dd:94:0e:b5:7a:dc:24:97:cb:f4:d8:32:db:2a:0f:19:
         0f:be:48:2e:42:a8:81:1b:47:b8:fd:33:07:85:0f:88:72:0e:
         a2:6f:3e:7f:b7:b9:a4:a5:26:c1:fd:9c:46:fe:c8:63:36:22:
         18:84:28:9e:46:f9:58:e0:28:f3:4b:c8:1d:80:9e:cd:d9:4d:
         6d:b1:b8:55:88:ae:5a:3d:27:1a:15:44:1b:69:b9:af:8d:0f:
         ee:c0:af:eb:a9:90:2c:39:1e:a7:d2:ab:fe:75:18:da:19:84:
         6d:37:b3:13:21:e4:28:fa:f9:3a:12:9f:f1:16:d4:c3:2f:1e:
         29:ed:60:7a:77:54:fb:7d:23:92:0e:c2:08:29:61:92:16:61:
         ad:38:89:e2:58:cc:d6:d8:a4:a5:f0:0b:76:bd:49:2d:e9:65:
         de:1b:5f:2f:0c:ca:b6:fc:0b:5f:fb:7a:93:1b:84:d2:a4:ce:
         a1:85:44:f2:b4:68:0a:cd:6f:3f:b6:b4:64:ad:f8:e3:b3:b8:
         e8:b2:11:24:83:41:31:76:cf:22:12:c9:fd:46:8d:89:73:ce:
         36:f9:f7:0f:7c:35:4f:f3:ec:2f:a6:07:76:90:17:93:ae:b3:
         92:ae:77:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3rFfoRDP66tMQ3uDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI2MDUyMjEzMDAzMVoXDTI2MDgyMDEzMDAzMVowLzEtMCsGA1UEAxMk
YjYzOThiYzEtZDM5YS00MGUxLTljYmQtMzc0MjZiNWI3NTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXLLMn5f4eYPewf9+zLNsAVKHRse00izpw0H
WddccGLttgcQRxza0CANAXRRv204gMllHQDRoRETcZeeb2YxBR+1Z/YwIfKR0GUY
1kxJM0gGnJdnhE3dJ70891mh9Kb1Iiork3/5lMOx02BXgw8oTHgLENob1RTAeZ8/
Sh33igoNSsPQb+6hL1E2uQV9oo5DxUo08L8/S3PZlpGyvQriM6GnhL1aeJ1vzGA6
S1+GA2S7w8TJ8vB63mKKVQZKGSMvp51m95TWtzP5pqwNyVGDVOn1KXNqk9kyZOfr
kA44HCChnwZ9xi+HTEppVkUGytVuDuR/LVANhqvF6YioxTERBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1Z4izMp/tpYRNAsUU777Olk1cyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvMjMwMDVhYTEtOWViOS0z
NWM5LWI1NjktMDFiN2JjYTMzNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECcQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG31wTb647JhPBtyUC8OQ9J0M6iO3ZQOtXrcJJfL9Ngy2yoPGQ++SC5C
qIEbR7j9MweFD4hyDqJvPn+3uaSlJsH9nEb+yGM2IhiEKJ5G+VjgKPNLyB2Ans3Z
TW2xuFWIrlo9JxoVRBtpua+ND+7Ar+upkCw5HqfSq/51GNoZhG03sxMh5Cj6+ToS
n/EW1MMvHintYHp3VPt9I5IOwggpYZIWYa04ieJYzNbYpKXwC3a9SS3pZd4bXy8M
yrb8C1/7epMbhNKkzqGFRPK0aArNbz+2tGSt+OOzuOiyESSDQTF2zyISyf1GjYlz
zjb59w98NU/z7C+mB3aQF5Ous5Kud50=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:11 2026 by rpki-client