Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53946231-22db-3874-8a5d-4f8e7669d2b0.roa
File:                     53946231-22db-3874-8a5d-4f8e7669d2b0.roa (raw, json)
Hash identifier:          kpAUKGMrIVxUA0CyDpH7JefiraS4RmvtXSxf1UzvC+k=
Subject key identifier:   C8:3F:6C:B1:F2:54:D3:A1:46:4B:BD:EA:86:56:74:4F:E9:98:E0:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E1A3BF11E052D5CB09E644280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53946231-22db-3874-8a5d-4f8e7669d2b0.roa
Signing time:             Mon 08 Jun 2026 10:20:18 +0000
ROA not before:           Mon 08 Jun 2026 10:20:18 +0000
ROA not after:            Sun 06 Sep 2026 10:20:18 +0000
asID:                     32787
IP address blocks:        23.0.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:3b:f1:1e:05:2d:5c:b0:9e:64:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  8 10:20:18 2026 GMT
            Not After : Sep  6 10:20:18 2026 GMT
        Subject: CN=87bece5c-7ea1-4460-b42f-bb21e93b969b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:8a:ec:9c:5c:dc:a1:5d:8c:8c:59:a1:c2:
                    75:99:5e:4a:62:8c:76:98:dc:c8:ac:47:b0:41:bd:
                    1c:8d:40:d1:bd:1c:8f:72:ad:4d:2a:ef:9f:9b:45:
                    4e:f8:19:2a:d5:1d:64:36:52:0d:c7:19:c5:2c:ef:
                    6b:49:2c:c2:de:28:05:0e:c2:69:7c:bc:66:51:cb:
                    bb:86:3a:a8:c2:8f:bb:b2:ed:c3:75:6e:16:77:a3:
                    77:bd:dd:3a:92:49:b7:9e:a8:3c:70:ef:e2:10:0f:
                    ba:9e:2c:a2:e6:b0:9f:0e:d6:c2:75:e1:8f:46:21:
                    94:fb:52:47:91:07:38:c9:a8:24:ee:42:91:c3:fb:
                    d5:0f:ee:d6:13:90:07:25:83:46:ab:5b:f1:2c:14:
                    48:1d:28:4f:8b:94:ab:23:00:c3:e9:39:5d:66:bf:
                    b8:48:9e:36:aa:31:c6:9d:01:b4:e2:5c:af:24:55:
                    93:45:dc:d1:ed:a0:2c:9e:3a:84:d4:9c:c7:24:d7:
                    a8:e5:b9:fa:aa:a2:32:c5:f1:34:59:e0:89:5d:c7:
                    28:9d:0d:73:7d:eb:ca:18:d8:26:d4:b3:a6:18:ad:
                    88:0d:85:2f:68:90:3a:d4:b1:d2:0a:15:97:b9:9d:
                    f0:9e:a3:b5:5b:21:06:74:ce:53:6b:7a:bc:95:ee:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:6C:B1:F2:54:D3:A1:46:4B:BD:EA:86:56:74:4F:E9:98:E0:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53946231-22db-3874-8a5d-4f8e7669d2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.0.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c7:57:78:71:ff:5d:82:98:fb:0d:ec:3d:0e:99:23:24:78:
         b0:05:ab:bc:5c:52:0a:b8:5c:a5:46:ec:bd:06:97:91:d0:62:
         f5:01:df:b6:f0:37:20:35:48:ae:e5:13:7c:ab:fc:b8:10:cc:
         25:10:64:5d:ca:73:0a:f2:c1:1b:54:ec:93:8a:ac:98:5e:a3:
         e6:19:a7:4a:28:ea:b4:73:3d:99:4b:5f:d9:69:21:d2:3a:af:
         2f:e2:70:e0:d4:80:a1:55:59:f3:8d:f1:67:ba:f9:a2:55:a3:
         b9:0c:16:39:fd:b0:be:71:c8:10:c2:ce:db:1f:d3:5c:79:84:
         15:a0:ec:02:46:86:b8:69:9c:65:4a:3b:03:84:fb:8b:1c:31:
         8b:c2:4c:2f:a9:2c:02:3f:c5:83:96:33:a3:bd:20:7d:a3:c4:
         4a:84:b3:fc:b6:93:09:e5:3b:3f:b8:6f:8f:da:0b:c0:be:0f:
         be:b0:54:eb:ae:e6:d2:8f:22:1b:30:7d:15:27:d1:04:74:b8:
         ae:51:60:0b:cb:93:3b:45:e4:e9:77:10:ba:28:f1:58:a8:c8:
         10:4b:62:ac:71:b6:9c:3e:c5:17:65:34:c0:96:02:d1:4e:40:
         d7:32:ed:ad:e6:3f:7a:77:cd:86:1a:6f:44:61:c3:f0:d5:7a:
         a4:3e:f3:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4aO/EeBS1csJ5kQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYwODEwMjAxOFoXDTI2MDkwNjEwMjAxOFowLzEtMCsGA1UEAxMk
ODdiZWNlNWMtN2VhMS00NDYwLWI0MmYtYmIyMWU5M2I5NjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmOK7Jxc3KFdjIxZocJ1mV5KYox2mNzIrEew
Qb0cjUDRvRyPcq1NKu+fm0VO+Bkq1R1kNlINxxnFLO9rSSzC3igFDsJpfLxmUcu7
hjqowo+7su3DdW4Wd6N3vd06kkm3nqg8cO/iEA+6niyi5rCfDtbCdeGPRiGU+1JH
kQc4yagk7kKRw/vVD+7WE5AHJYNGq1vxLBRIHShPi5SrIwDD6TldZr+4SJ42qjHG
nQG04lyvJFWTRdzR7aAsnjqE1JzHJNeo5bn6qqIyxfE0WeCJXcconQ1zfevKGNgm
1LOmGK2IDYUvaJA61LHSChWXuZ3wnqO1WyEGdM5Ta3q8le4hKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMg/bLHyVNOhRku96oZWdE/pmOADMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM5NDYyMzEtMjJkYi0z
ODc0LThhNWQtNGY4ZTc2NjlkMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwDlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvHV3hx/12CmPsN7D0OmSMkeLAFq7xcUgq4XKVG7L0Gl5HQYvUB37bw
NyA1SK7lE3yr/LgQzCUQZF3KcwrywRtU7JOKrJheo+YZp0oo6rRzPZlLX9lpIdI6
ry/icODUgKFVWfON8We6+aJVo7kMFjn9sL5xyBDCztsf01x5hBWg7AJGhrhpnGVK
OwOE+4scMYvCTC+pLAI/xYOWM6O9IH2jxEqEs/y2kwnlOz+4b4/aC8C+D76wVOuu
5tKPIhswfRUn0QR0uK5RYAvLkztF5Ol3ELoo8VioyBBLYqxxtpw+xRdlNMCWAtFO
QNcy7a3mP3p3zYYab0Rhw/DVeqQ+8yA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:36 2026 by rpki-client