Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/b3160d6d-0d4c-37b6-b4ad-75248f237603.roa
File:                     b3160d6d-0d4c-37b6-b4ad-75248f237603.roa (raw, json)
Hash identifier:          uIYkV2REMz4hIFva+1LZOxxw2uQlgQCSXTqerrohRnI=
Subject key identifier:   28:BB:F7:1A:66:4D:41:20:16:3A:FE:13:6B:AF:D1:28:F2:89:33:9E
Certificate issuer:       /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db
Certificate serial:       010D0C9F4328584F3E47FFB16365FEC1745ED030
Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/b3160d6d-0d4c-37b6-b4ad-75248f237603.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     60223
IP address blocks:        23.132.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ff:b1:63:65:fe:c1:74:5e:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=93c4cd9e-e1f2-44b8-956a-7fb3c49f8a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:b3:cf:b6:df:0f:78:46:6f:0d:4b:6d:82:
                    91:f1:49:e2:78:08:8d:1d:37:51:4b:3f:ff:49:f4:
                    f7:ba:67:a1:85:4d:7a:49:da:d2:4f:b0:10:08:24:
                    90:4c:a1:49:15:81:59:07:4d:37:e9:74:1b:09:39:
                    c2:63:4b:b2:7b:7f:0a:42:34:cf:cb:07:5d:db:ce:
                    b1:1d:16:be:4c:d9:ed:fe:96:4c:22:4a:3e:73:9e:
                    c3:75:6b:3d:31:cb:d1:fc:b4:07:cd:31:e3:4d:97:
                    b8:75:b3:1b:6b:c5:42:b0:72:80:3f:02:e4:13:fc:
                    e5:46:e3:42:e8:00:c0:37:36:1f:eb:e4:41:c2:45:
                    35:ea:6d:9e:8a:61:f6:df:3c:1c:ae:b7:cb:38:1a:
                    bd:1a:fb:f1:9c:8c:9f:38:fc:e0:98:2e:2c:94:e8:
                    81:28:7f:b0:64:df:e0:79:1d:f8:53:78:f8:28:d1:
                    33:59:0f:c2:b5:6c:07:7d:ff:2a:66:5c:7f:be:28:
                    01:a8:e5:69:4e:65:6b:f0:9e:82:cb:66:a8:b7:47:
                    bd:c5:4b:09:01:d6:54:42:97:91:fd:99:4d:33:21:
                    3b:60:4a:2e:66:bc:be:06:91:9f:c4:20:af:cb:3b:
                    a6:33:79:72:d9:a8:78:a0:b8:50:37:20:37:0f:03:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:F7:1A:66:4D:41:20:16:3A:FE:13:6B:AF:D1:28:F2:89:33:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/b3160d6d-0d4c-37b6-b4ad-75248f237603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c9:57:1b:0e:aa:84:59:ec:ee:6d:cd:ba:f9:5e:5e:0d:b7:
         44:54:d9:0b:13:e3:b8:fb:49:c8:1c:9e:30:6f:50:b5:d3:86:
         d4:0e:dd:19:e0:b5:03:19:89:e0:ad:21:a5:8a:14:c0:5b:ec:
         bc:f6:ff:41:22:59:c9:0e:8e:b6:a2:2f:0d:f3:c6:93:a3:80:
         46:a5:ce:65:9e:a6:b0:e8:88:1b:67:fe:0e:29:4f:aa:0a:b1:
         24:15:2c:af:ad:61:37:77:11:fb:b8:7f:69:d2:f2:e0:ea:4b:
         91:49:6b:2d:17:1d:8d:10:98:e8:5d:2d:b4:c6:43:50:38:1c:
         54:07:24:16:34:b9:f8:bd:1c:ea:70:ad:bd:f6:d5:3d:17:bf:
         f2:f0:69:b3:07:a3:2b:65:4f:d5:76:4f:50:1d:40:bc:c8:91:
         69:50:7c:84:7f:8f:ee:07:d8:6b:79:27:c0:0a:2f:a3:a3:a2:
         a7:3e:3f:8f:ef:f1:ba:ad:35:9a:61:e4:4b:5d:51:59:9d:1e:
         b8:04:39:df:90:18:19:4c:6c:d5:fc:9c:12:aa:f2:12:14:ae:
         38:a7:59:3c:84:90:14:58:17:78:41:2a:65:49:1b:23:99:aa:
         65:d5:2d:4d:9c:3e:a2:2f:be:cd:eb:ef:b7:b8:cb:01:ad:a1:
         90:58:ed:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/+xY2X+wXRe0DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjllODc0NjgtMzc3MC00NGI4LTljZGMtYzBiMGUxMTdm
MmRiMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
OTNjNGNkOWUtZTFmMi00NGI4LTk1NmEtN2ZiM2M0OWY4YTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNyzz7bfD3hGbw1LbYKR8UnieAiNHTdRSz//
SfT3umehhU16SdrST7AQCCSQTKFJFYFZB0036XQbCTnCY0uye38KQjTPywdd286x
HRa+TNnt/pZMIko+c57DdWs9McvR/LQHzTHjTZe4dbMba8VCsHKAPwLkE/zlRuNC
6ADANzYf6+RBwkU16m2eimH23zwcrrfLOBq9GvvxnIyfOPzgmC4slOiBKH+wZN/g
eR34U3j4KNEzWQ/CtWwHff8qZlx/vigBqOVpTmVr8J6Cy2aot0e9xUsJAdZUQpeR
/ZlNMyE7YEouZry+BpGfxCCvyzumM3ly2ah4oLhQNyA3DwMOSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCi79xpmTUEgFjr+E2uv0SjyiTOeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4
NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIwZTExN2YyZGIvYjMxNjBkNmQtMGQ0Yy0z
N2I2LWI0YWQtNzUyNDhmMjM3NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjllODc0NjgtMzc3MC00NGI4LTlj
ZGMtYzBiMGUxMTdmMmRiL2Y5ZTg3NDY4LTM3NzAtNDRiOC05Y2RjLWMwYjBlMTE3
ZjJkYi5jcmwwHwYDVR0jBBgwFoAUXhqU2pFWua1qL4NMi+jiD+FEjrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIw
ZTExN2YyZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbJVxsOqoRZ7O5tzbr5Xl4Nt0RU2QsT47j7ScgcnjBvULXThtQO3Rng
tQMZieCtIaWKFMBb7Lz2/0EiWckOjraiLw3zxpOjgEalzmWeprDoiBtn/g4pT6oK
sSQVLK+tYTd3Efu4f2nS8uDqS5FJay0XHY0QmOhdLbTGQ1A4HFQHJBY0ufi9HOpw
rb321T0Xv/LwabMHoytlT9V2T1AdQLzIkWlQfIR/j+4H2Gt5J8AKL6Ojoqc+P4/v
8bqtNZph5EtdUVmdHrgEOd+QGBlMbNX8nBKq8hIUrjinWTyEkBRYF3hBKmVJGyOZ
qmXVLU2cPqIvvs3r77e4ywGtoZBY7Vw=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:09:23 2026 by rpki-client