Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99e144b9-d999-3ac5-9683-5b840e1d62e4.roa
File:                     99e144b9-d999-3ac5-9683-5b840e1d62e4.roa (raw, json)
Hash identifier:          QIa+AEKIJVQJ2N28h4DzrUBkvGFYaKLKWhp+qiUqhzc=
Subject key identifier:   F6:DC:55:F9:53:25:3E:AD:0B:1C:69:85:7E:74:EF:DF:85:A0:6C:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CED27AFE56D21D39281855800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99e144b9-d999-3ac5-9683-5b840e1d62e4.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.58.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:af:e5:6d:21:d3:92:81:85:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=dd007dec-1a4e-4413-ba31-a0bb1c0341db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:e9:5f:4e:fe:33:bb:8f:72:89:8c:ff:cb:
                    ae:d1:56:4d:44:eb:4a:e7:76:db:91:af:a8:85:12:
                    d5:9b:f5:1b:0e:f7:c9:e1:96:ee:a9:a8:da:f2:63:
                    60:8b:b2:f7:43:86:e7:be:9d:10:7f:5c:8e:9d:da:
                    02:7b:26:2a:a0:89:2c:ef:4f:e6:9c:d6:8c:8d:9f:
                    2c:7d:64:a8:4b:07:08:41:c3:2e:7f:59:76:44:30:
                    45:d8:c8:44:8e:7c:9e:a1:d1:c2:2f:4b:4f:6d:77:
                    56:e2:a4:3c:ef:a6:72:09:06:85:49:b7:10:10:8d:
                    dc:57:a7:cf:f1:fb:d7:12:63:1f:70:f4:bb:46:e0:
                    2b:ba:18:69:2f:e3:18:ec:be:ad:37:a9:d1:f9:74:
                    26:1a:eb:c6:d5:25:cd:fb:b0:33:79:c5:22:8a:73:
                    22:44:01:7c:03:ca:53:a5:cb:6a:4f:4e:19:7e:71:
                    0c:46:5f:8e:8c:c0:8f:0f:cf:4a:e3:c3:04:7e:33:
                    a4:26:ca:09:a9:23:fe:c8:86:f1:2d:90:4a:aa:38:
                    7f:64:86:7c:09:e9:48:f6:40:86:f3:a5:8d:1b:55:
                    ae:4a:70:da:c4:60:99:f9:76:9c:25:3e:b2:48:dc:
                    d6:dd:3a:70:51:b0:fd:c3:bb:1f:ff:4e:87:40:86:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:55:F9:53:25:3E:AD:0B:1C:69:85:7E:74:EF:DF:85:A0:6C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99e144b9-d999-3ac5-9683-5b840e1d62e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:fe:af:ff:fd:ef:21:02:de:f2:93:91:37:e4:81:78:6a:
         cb:ba:2f:a0:8f:94:ca:f5:ab:c0:97:f7:49:3f:da:eb:ff:fc:
         18:65:69:ae:cc:7f:65:55:37:94:86:64:af:7c:3e:00:76:b7:
         44:e6:52:c4:95:04:aa:2a:00:f4:86:cf:39:6e:5b:cd:d0:a4:
         e1:ba:38:cc:90:3e:ef:94:54:1e:ef:b2:54:37:3b:39:a9:dd:
         fb:54:3e:6b:df:20:11:4d:85:68:6c:cc:68:ae:6c:86:6f:8e:
         b4:7b:b1:71:f9:ce:3a:84:e7:56:a8:73:ce:0e:a6:24:b9:7c:
         2b:33:91:aa:52:ff:37:54:36:cc:cf:a9:fe:b0:1b:70:18:fa:
         57:fa:5c:a6:bf:20:9b:2f:e4:6e:66:67:d8:1f:8e:62:d1:dc:
         98:1b:4a:1d:eb:58:af:40:9d:bf:4a:f4:a4:e0:1f:79:ff:5e:
         87:89:e0:76:fd:1e:22:f8:7b:42:e4:26:26:84:c4:09:0c:97:
         3f:f1:b1:fe:33:8f:a1:84:d1:15:38:81:fb:56:02:98:35:85:
         3f:7b:b2:02:a2:f4:37:71:9b:63:d6:ae:e6:2f:03:bd:61:8e:
         84:39:78:24:93:20:67:30:c9:ed:d6:95:8d:51:c1:42:c5:4b:
         e5:fe:53:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ6/lbSHTkoGFWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZGQwMDdkZWMtMWE0ZS00NDEzLWJhMzEtYTBiYjFjMDM0MWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZnpX07+M7uPcomM/8uu0VZNROtK53bbka+o
hRLVm/UbDvfJ4Zbuqaja8mNgi7L3Q4bnvp0Qf1yOndoCeyYqoIks70/mnNaMjZ8s
fWSoSwcIQcMuf1l2RDBF2MhEjnyeodHCL0tPbXdW4qQ876ZyCQaFSbcQEI3cV6fP
8fvXEmMfcPS7RuAruhhpL+MY7L6tN6nR+XQmGuvG1SXN+7AzecUiinMiRAF8A8pT
pctqT04ZfnEMRl+OjMCPD89K48MEfjOkJsoJqSP+yIbxLZBKqjh/ZIZ8CelI9kCG
86WNG1WuSnDaxGCZ+XacJT6ySNzW3TpwUbD9w7sf/06HQIbpEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbcVflTJT6tCxxphX5079+FoGzkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTllMTQ0YjktZDk5OS0z
YWM1LTk2ODMtNWI4NDBlMWQ2MmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzrYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPU/q///e8hAt7yk5E35IF4asu6L6CPlMr1q8CX90k/2uv//Bhlaa7M
f2VVN5SGZK98PgB2t0TmUsSVBKoqAPSGzzluW83QpOG6OMyQPu+UVB7vslQ3Ozmp
3ftUPmvfIBFNhWhszGiubIZvjrR7sXH5zjqE51aoc84OpiS5fCszkapS/zdUNszP
qf6wG3AY+lf6XKa/IJsv5G5mZ9gfjmLR3JgbSh3rWK9Anb9K9KTgH3n/XoeJ4Hb9
HiL4e0LkJiaExAkMlz/xsf4zj6GE0RU4gftWApg1hT97sgKi9Ddxm2PWruYvA71h
joQ5eCSTIGcwye3WlY1RwULFS+X+U1Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:10 2026 by rpki-client