Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/766c93f0-e38d-3f45-a0a8-afa417386caf.roa
File:                     766c93f0-e38d-3f45-a0a8-afa417386caf.roa (raw, json)
Hash identifier:          amSCH3lDdHK3eThex6bf24M1mAunAcF4nEIvMFY/i8s=
Subject key identifier:   EF:23:D5:D8:1F:D1:86:3F:62:29:B1:5B:5B:7F:83:D0:83:F9:92:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4985733C734F0055BDD6A8C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/766c93f0-e38d-3f45-a0a8-afa417386caf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.192.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:73:3c:73:4f:00:55:bd:d6:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cdd84850-9447-4025-b26e-9ca442a7b8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:69:c8:51:25:e3:c0:aa:ca:a2:f3:aa:4a:
                    92:68:68:ca:1c:95:6f:2f:85:5e:95:ae:47:36:9b:
                    ad:24:6f:5a:94:7a:08:17:de:2e:0e:77:72:d0:a2:
                    1b:2a:ed:2e:48:cd:f2:62:a8:41:93:95:b0:52:4b:
                    16:25:97:f8:e8:ae:0b:e7:97:bf:d2:ed:20:37:6b:
                    02:21:e9:73:cd:8f:88:93:36:10:be:0c:3d:3a:bb:
                    27:f8:fc:69:d7:d2:23:4a:03:f1:db:c1:f8:65:07:
                    5d:b2:3b:bd:24:4d:5e:d0:c8:41:fb:b7:9a:fd:bc:
                    53:84:ca:b1:83:36:88:df:9e:7e:ef:af:e7:1c:23:
                    14:65:59:7c:0f:ec:b6:49:fd:3d:58:61:d0:8a:44:
                    2e:8c:c8:b5:ca:c5:f2:23:04:58:ef:32:50:ab:7c:
                    62:55:a2:1b:26:7e:9d:a3:b1:81:e8:aa:31:0b:0f:
                    43:2f:d8:eb:a8:68:e5:0c:dc:7d:d8:14:d8:3a:56:
                    2b:dc:89:dd:7b:64:33:8c:2f:4c:68:ec:fb:a7:80:
                    eb:b3:ff:e6:13:7b:45:06:d9:d0:84:86:d8:90:7c:
                    8a:21:ea:be:c0:1a:27:61:3b:74:e7:32:fe:23:d2:
                    7b:2d:60:c0:36:ec:ae:21:b6:f3:35:01:0a:fe:82:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:23:D5:D8:1F:D1:86:3F:62:29:B1:5B:5B:7F:83:D0:83:F9:92:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/766c93f0-e38d-3f45-a0a8-afa417386caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:bf:95:b6:91:2b:21:f4:f5:76:20:bf:0f:44:b4:cc:89:
         19:3e:d8:c5:d9:22:d8:f3:1d:b5:9c:f8:2d:d5:11:81:c9:91:
         fe:1d:fb:14:fc:a9:d6:e3:a1:9a:41:ea:70:cf:34:95:86:73:
         c5:2a:3e:9c:94:70:c8:90:07:7d:e2:6e:10:bf:95:b9:61:85:
         31:d9:5e:70:58:f3:08:aa:8b:d6:f2:58:c1:14:e7:81:b0:35:
         69:ac:b8:62:67:13:8b:8c:32:eb:04:55:47:0c:a0:8d:3e:34:
         1c:01:5a:0a:b4:89:44:49:9f:fc:bd:61:73:1e:26:b1:a2:6e:
         5b:40:b9:03:89:e2:30:1f:1e:c0:21:2a:1c:b7:56:b0:c8:21:
         4c:ed:aa:ba:07:3d:b7:d9:d9:7f:42:eb:13:19:59:05:43:19:
         6b:8c:6a:07:4a:8f:85:44:a5:f1:2b:ff:d3:45:b8:43:1d:ca:
         38:52:0e:e6:4a:c3:5a:69:1f:e4:33:27:a2:53:4c:45:ec:92:
         10:07:fd:ed:73:e7:68:cf:a8:f5:91:cd:f7:2d:97:16:f4:19:
         03:36:e5:51:c1:0e:65:b4:b3:15:a0:e7:2d:51:00:0b:b4:9b:
         f2:2b:11:c3:9b:df:bd:fc:36:3a:77:0d:da:c7:ae:67:f6:bb:
         26:70:5e:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhXM8c08AVb3WqMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2RkODQ4NTAtOTQ0Ny00MDI1LWIyNmUtOWNhNDQyYTdiOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ppyFEl48CqyqLzqkqSaGjKHJVvL4Vela5H
NputJG9alHoIF94uDndy0KIbKu0uSM3yYqhBk5WwUksWJZf46K4L55e/0u0gN2sC
IelzzY+IkzYQvgw9Orsn+Pxp19IjSgPx28H4ZQddsju9JE1e0MhB+7ea/bxThMqx
gzaI355+76/nHCMUZVl8D+y2Sf09WGHQikQujMi1ysXyIwRY7zJQq3xiVaIbJn6d
o7GB6KoxCw9DL9jrqGjlDNx92BTYOlYr3Inde2QzjC9MaOz7p4Drs//mE3tFBtnQ
hIbYkHyKIeq+wBonYTt05zL+I9J7LWDANuyuIbbzNQEK/oKApwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8j1dgf0YY/YimxW1t/g9CD+ZILMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzY2YzkzZjAtZTM4ZC0z
ZjQ1LWEwYTgtYWZhNDE3Mzg2Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8BQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFv/v5W2kSsh9PV2IL8PRLTMiRk+2MXZItjzHbWc+C3VEYHJkf4d+xT8
qdbjoZpB6nDPNJWGc8UqPpyUcMiQB33ibhC/lblhhTHZXnBY8wiqi9byWMEU54Gw
NWmsuGJnE4uMMusEVUcMoI0+NBwBWgq0iURJn/y9YXMeJrGibltAuQOJ4jAfHsAh
Khy3VrDIIUztqroHPbfZ2X9C6xMZWQVDGWuMagdKj4VEpfEr/9NFuEMdyjhSDuZK
w1ppH+QzJ6JTTEXskhAH/e1z52jPqPWRzfctlxb0GQM25VHBDmW0sxWg5y1RAAu0
m/IrEcOb3738Njp3DdrHrmf2uyZwXuM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:24:57 2026 by rpki-client