Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a231467-34ce-36c3-a195-45dc2aeeea4a.roa
File:                     8a231467-34ce-36c3-a195-45dc2aeeea4a.roa (raw, json)
Hash identifier:          95enP4t8zjCk36Rk//PWlCsK+UjjdHwS222AxfVfJOE=
Subject key identifier:   08:67:2E:83:15:51:1B:3E:FB:F3:3D:7B:AE:8D:88:34:63:C5:AE:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CE4C79296167F645C58C3CA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a231467-34ce-36c3-a195-45dc2aeeea4a.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.53.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:92:96:16:7f:64:5c:58:c3:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=9fdad82e-d2d7-40c6-99e0-ec019b11f7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:c8:39:f8:66:32:61:77:3f:5c:b6:1c:8f:
                    de:24:cf:09:a8:07:01:8c:20:51:06:4c:5e:9e:d9:
                    b1:df:6e:c4:55:61:dd:06:75:68:21:f3:21:24:7e:
                    34:9a:5c:bf:e1:98:e3:36:53:90:75:e2:e2:df:6e:
                    f3:82:cb:a4:b1:b6:e0:90:c8:04:07:74:af:d2:4c:
                    c1:f5:ed:1d:63:84:8b:6a:7b:5d:f1:c1:4a:6d:e4:
                    1c:f5:51:ee:fd:cc:04:87:e2:f3:ca:8e:88:2c:28:
                    5c:92:84:5b:5b:b4:28:db:9b:b5:28:cf:bc:5c:f0:
                    e4:07:85:70:63:e9:a5:40:9e:37:4f:23:ae:8e:cd:
                    1f:0e:67:af:d8:46:e1:73:6c:db:13:2c:4a:4d:93:
                    04:0e:30:f6:2e:52:f7:c6:ea:61:3a:80:82:d3:4e:
                    68:bf:f3:d6:32:76:2c:1e:f6:d9:d4:ac:78:c0:c8:
                    54:83:14:5a:c5:ff:11:be:15:ca:8b:0b:dd:9e:3b:
                    09:b5:d9:06:7a:2f:4a:01:69:f9:e2:fd:46:8b:40:
                    06:77:db:3b:ca:26:b7:e6:64:93:08:f2:61:56:1f:
                    76:a1:22:18:f5:19:e5:5d:7d:bc:55:fd:e7:57:fa:
                    c2:65:9f:88:ca:6e:21:5d:3e:b2:9b:02:66:6c:f7:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:67:2E:83:15:51:1B:3E:FB:F3:3D:7B:AE:8D:88:34:63:C5:AE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a231467-34ce-36c3-a195-45dc2aeeea4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:0b:21:0c:74:cf:5e:db:8c:c0:a1:79:d0:4b:0f:03:4d:
         44:ab:b1:89:01:b0:9e:21:36:8f:34:8a:f7:8d:d5:9f:fe:15:
         14:9b:9d:c6:0c:22:b6:41:28:8a:35:07:7e:1c:bb:25:02:1c:
         91:fd:2e:8b:b5:23:b1:f8:42:df:94:05:9f:9f:85:40:18:20:
         6d:81:17:23:3f:d1:2e:ae:d1:f1:23:af:b0:fa:10:16:95:bd:
         7f:62:c4:56:18:4d:22:ed:61:0c:3f:07:ee:05:8a:22:82:50:
         19:91:47:24:cc:8b:44:46:72:cf:b3:74:f7:ad:4a:2c:a3:8a:
         e5:59:fb:6e:c4:d9:06:ac:40:bb:30:1f:82:e0:ec:84:fe:c1:
         52:79:e8:23:bb:da:b6:2c:60:80:bc:cc:6f:be:b6:79:ae:45:
         43:5a:54:cd:0b:18:d0:6e:4b:31:6d:78:77:a6:89:55:0d:60:
         80:08:80:bb:51:23:e5:7c:64:67:ac:50:32:1f:62:db:ad:c1:
         8f:4d:bd:02:07:cd:c1:9c:36:fa:3b:af:c8:98:68:a2:bb:83:
         e5:a6:e7:fd:f2:c6:9f:9f:32:31:0a:12:dd:b7:d0:ce:48:b2:
         d0:fe:19:ad:94:53:19:15:c3:43:7f:92:0c:2c:14:47:de:41:
         cb:3e:b6:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx5KWFn9kXFjDygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk
OWZkYWQ4MmUtZDJkNy00MGM2LTk5ZTAtZWMwMTliMTFmN2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV7IOfhmMmF3P1y2HI/eJM8JqAcBjCBRBkxe
ntmx327EVWHdBnVoIfMhJH40mly/4ZjjNlOQdeLi327zgsuksbbgkMgEB3Sv0kzB
9e0dY4SLantd8cFKbeQc9VHu/cwEh+Lzyo6ILChckoRbW7Qo25u1KM+8XPDkB4Vw
Y+mlQJ43TyOujs0fDmev2Ebhc2zbEyxKTZMEDjD2LlL3xuphOoCC005ov/PWMnYs
HvbZ1Kx4wMhUgxRaxf8RvhXKiwvdnjsJtdkGei9KAWn54v1Gi0AGd9s7yia35mST
CPJhVh92oSIY9RnlXX28Vf3nV/rCZZ+Iym4hXT6ymwJmbPfLJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhnLoMVURs++/M9e66NiDRjxa7EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGEyMzE0NjctMzRjZS0z
NmMzLWExOTUtNDVkYzJhZWVlYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPtCyEMdM9e24zAoXnQSw8DTUSrsYkBsJ4hNo80iveN1Z/+FRSbncYM
IrZBKIo1B34cuyUCHJH9Lou1I7H4Qt+UBZ+fhUAYIG2BFyM/0S6u0fEjr7D6EBaV
vX9ixFYYTSLtYQw/B+4FiiKCUBmRRyTMi0RGcs+zdPetSiyjiuVZ+27E2QasQLsw
H4Lg7IT+wVJ56CO72rYsYIC8zG++tnmuRUNaVM0LGNBuSzFteHemiVUNYIAIgLtR
I+V8ZGesUDIfYtutwY9NvQIHzcGcNvo7r8iYaKK7g+Wm5/3yxp+fMjEKEt230M5I
stD+Ga2UUxkVw0N/kgwsFEfeQcs+ttg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:32 2026 by rpki-client