Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa
File:                     14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa (raw, json)
Hash identifier:          0Q9dfiFupYjp7/NJB+/iRN6ufZaFYS9CtKCRMBLkcus=
Subject key identifier:   D8:D2:1A:FA:DA:FF:09:5D:BE:B1:B1:7A:44:FC:BD:35:A8:0F:85:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDB022C3A38887D1FDD486D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     16625
IP address blocks:        23.42.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:2c:3a:38:88:7d:1f:dd:48:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=2e8429ed-14dc-434a-a3a7-6637ccc095b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:d2:67:e5:1f:55:90:39:da:1e:6d:39:75:
                    a5:0c:51:1f:aa:4c:c3:b4:89:9d:c1:0a:14:3a:37:
                    7c:20:ed:2a:85:fb:84:ce:f5:68:4b:7d:f2:ba:fc:
                    69:0c:46:a8:d9:77:43:10:c1:36:20:e4:db:15:0b:
                    3f:0b:64:15:eb:ef:22:e4:9f:d8:07:6b:af:25:79:
                    89:24:86:62:4d:8e:1f:fb:a8:01:e2:06:09:45:97:
                    12:34:a2:6e:30:f8:80:17:dd:ce:97:8a:28:97:c1:
                    b9:a0:5f:c1:cc:2e:a3:8e:f9:bc:e7:99:5c:97:14:
                    10:8a:bd:d4:34:fa:c4:c1:9c:3e:49:ab:21:46:3f:
                    60:a3:c5:3a:89:3d:d7:8a:47:6f:ac:7c:af:3a:b5:
                    27:ee:47:23:bf:01:fc:4b:e3:91:95:f0:69:b8:85:
                    be:c5:40:85:d5:80:9d:54:eb:48:50:b0:cf:b2:18:
                    34:ba:4c:19:22:91:5e:07:12:c5:40:42:c1:e3:a7:
                    b8:da:d7:9d:8a:0f:9c:af:75:7d:d9:b2:97:c0:74:
                    83:6f:bf:b0:7f:61:0b:34:84:d4:27:e1:18:2e:40:
                    c6:66:e2:5a:ed:82:7b:85:44:f6:9b:63:6a:95:20:
                    b1:be:85:a4:74:8c:d1:15:84:0d:74:72:f2:46:45:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:1A:FA:DA:FF:09:5D:BE:B1:B1:7A:44:FC:BD:35:A8:0F:85:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.42.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:01:4f:81:21:72:36:23:5c:87:fa:eb:50:a5:a0:fc:be:3f:
         07:60:f2:e1:e9:91:49:64:09:f8:11:36:78:0e:02:a4:37:0b:
         4f:cc:32:3a:f1:12:3c:b1:ee:fe:73:b6:5a:55:83:9b:0e:0e:
         e8:bb:fb:89:f2:83:e7:85:17:cc:11:65:7b:0c:14:7a:3d:4f:
         61:12:13:77:cd:4a:74:b9:24:ea:79:d5:5e:bc:3f:02:8d:f3:
         30:af:36:7a:9d:56:7d:c8:70:57:39:a6:17:d0:26:1c:04:9e:
         a6:43:30:5f:49:08:c4:31:5f:67:18:7b:23:49:99:74:9f:56:
         ee:b7:09:3a:fe:0f:3f:9a:68:f3:81:54:8d:ff:21:c0:9d:5c:
         f8:76:0f:73:4a:ad:56:bc:c8:be:e7:17:fa:e6:28:de:94:be:
         6a:b6:9e:80:81:71:58:91:51:51:3c:aa:51:23:ac:76:45:34:
         31:65:04:e3:07:21:33:35:a6:d6:d0:f5:0b:a1:a8:69:8d:de:
         30:40:e4:9a:43:c6:0b:33:6b:78:16:61:67:63:c9:85:57:11:
         6d:d3:ac:ba:94:ed:f2:9d:83:bf:9c:33:30:c3:fd:fd:ae:70:
         85:fb:cf:d0:2c:5c:e3:5d:20:a1:c8:ec:6d:20:cd:f7:b9:45:
         33:85:86:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAiw6OIh9H91IbWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
MmU4NDI5ZWQtMTRkYy00MzRhLWEzYTctNjYzN2NjYzA5NWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QHSZ+UfVZA52h5tOXWlDFEfqkzDtImdwQoU
Ojd8IO0qhfuEzvVoS33yuvxpDEao2XdDEME2IOTbFQs/C2QV6+8i5J/YB2uvJXmJ
JIZiTY4f+6gB4gYJRZcSNKJuMPiAF93Ol4ool8G5oF/BzC6jjvm855lclxQQir3U
NPrEwZw+SashRj9go8U6iT3XikdvrHyvOrUn7kcjvwH8S+ORlfBpuIW+xUCF1YCd
VOtIULDPshg0ukwZIpFeBxLFQELB46e42tedig+cr3V92bKXwHSDb7+wf2ELNITU
J+EYLkDGZuJa7YJ7hUT2m2NqlSCxvoWkdIzRFYQNdHLyRkVqPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjSGvra/wldvrGxekT8vTWoD4U0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTRkMTNlYmMtM2U2Mi0z
MmM0LTllNWEtN2E5YzFmYjk1NjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyrwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYBT4EhcjYjXIf661CloPy+Pwdg8uHpkUlkCfgRNngOAqQ3C0/MMjrx
Ejyx7v5ztlpVg5sODui7+4nyg+eFF8wRZXsMFHo9T2ESE3fNSnS5JOp51V68PwKN
8zCvNnqdVn3IcFc5phfQJhwEnqZDMF9JCMQxX2cYeyNJmXSfVu63CTr+Dz+aaPOB
VI3/IcCdXPh2D3NKrVa8yL7nF/rmKN6Uvmq2noCBcViRUVE8qlEjrHZFNDFlBOMH
ITM1ptbQ9QuhqGmN3jBA5JpDxgsza3gWYWdjyYVXEW3TrLqU7fKdg7+cMzDD/f2u
cIX7z9AsXONdIKHI7G0gzfe5RTOFhps=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:55 2026 by rpki-client