Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ef1d36-b41f-30b3-8cfd-1ba9a46587b9.roa
File:                     d6ef1d36-b41f-30b3-8cfd-1ba9a46587b9.roa (raw, json)
Hash identifier:          x2MhN55Hvgpcxxd/pwGxaogXwNZ8cyQmlqF1G0BdJmM=
Subject key identifier:   EF:39:20:B8:55:01:DE:02:5F:FF:3D:C7:26:0F:45:F9:15:75:5F:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CE4C79015DC5316721B9F7B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ef1d36-b41f-30b3-8cfd-1ba9a46587b9.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.52.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:90:15:dc:53:16:72:1b:9f:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=a90c4969-e512-4665-a540-af225cd1a81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:f9:aa:10:8d:21:37:17:64:b3:d9:5d:46:
                    69:d5:7d:30:64:78:0f:50:28:58:a8:af:4f:7b:3b:
                    e1:e7:34:97:5e:c6:d5:d2:d9:2c:73:06:90:21:d2:
                    9e:29:a3:aa:5d:1e:3c:36:31:87:82:a6:0f:a3:8c:
                    a3:7f:ca:b5:fe:69:66:55:ff:e3:ad:3a:73:80:0d:
                    d3:61:23:30:15:9e:34:e9:2c:ac:df:d0:ee:5f:e9:
                    b3:22:b7:c6:5a:db:1f:d2:2e:b1:92:62:11:a5:d6:
                    0c:2b:1f:af:5e:3b:15:4e:08:db:ce:8d:17:e7:42:
                    ef:e0:6b:7b:fe:04:eb:34:d5:73:70:33:ec:92:e7:
                    7f:4b:06:62:2c:ce:48:db:99:5e:f9:bf:eb:59:c5:
                    96:58:90:66:f9:31:3a:e3:70:0c:96:f0:2c:d8:ec:
                    aa:42:02:17:83:5a:4b:1c:33:fb:62:7e:1b:0a:4a:
                    27:c4:41:dd:ae:d3:9d:cf:bf:03:d5:7b:ee:7e:dd:
                    af:ff:60:f0:be:78:8f:22:a7:0e:f6:8c:0a:93:bf:
                    2e:ae:37:18:b3:ea:33:de:6c:ec:1a:d5:f9:3a:5e:
                    36:b4:5e:23:7a:6e:3d:8e:a3:01:b0:4e:0e:bc:fe:
                    28:22:99:c2:73:81:07:6e:15:ea:82:01:22:76:2e:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:20:B8:55:01:DE:02:5F:FF:3D:C7:26:0F:45:F9:15:75:5F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ef1d36-b41f-30b3-8cfd-1ba9a46587b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:39:71:dd:f8:88:77:2a:48:1c:82:df:1c:67:12:ad:7b:2c:
         0a:91:01:fc:2b:eb:2d:35:21:bc:c0:b9:5a:99:1a:8d:bb:4a:
         b0:0d:9d:aa:7f:5f:b7:e9:19:4a:b6:91:85:1f:f9:54:bf:61:
         8d:12:07:da:55:46:90:89:e5:49:a6:6c:d0:49:66:16:fa:fa:
         18:58:e0:aa:39:17:f5:55:f5:fc:f5:78:0c:39:d5:24:00:6d:
         2c:5e:0b:21:b1:01:b0:b3:70:09:d2:01:d4:b6:30:eb:3a:46:
         db:61:5a:4f:a0:59:35:23:56:01:fc:c2:17:30:04:fc:98:e8:
         e5:9a:5f:d5:4d:f1:c6:51:aa:9a:94:12:0d:86:46:db:cf:ee:
         d2:0a:16:58:2a:50:c9:ab:18:43:95:fa:cd:0e:c9:f7:61:b2:
         3e:57:04:bb:81:dc:87:0f:bc:9a:11:57:24:b8:5f:ce:17:eb:
         18:32:9c:08:82:9f:7d:93:a0:d9:c0:b0:af:9f:7d:21:6b:77:
         83:de:df:04:22:c7:34:f5:9c:47:c6:8a:4e:0a:40:2e:31:e5:
         c9:50:2b:e6:b1:e3:b7:7c:f8:30:4e:f1:2b:fa:b6:6e:2f:2a:
         79:b5:a0:c4:5e:3f:b9:50:4f:a6:18:74:6a:e3:db:01:a9:77:
         9c:b1:76:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx5AV3FMWchufewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk
YTkwYzQ5NjktZTUxMi00NjY1LWE1NDAtYWYyMjVjZDFhODFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOD5qhCNITcXZLPZXUZp1X0wZHgPUChYqK9P
ezvh5zSXXsbV0tkscwaQIdKeKaOqXR48NjGHgqYPo4yjf8q1/mlmVf/jrTpzgA3T
YSMwFZ406Sys39DuX+mzIrfGWtsf0i6xkmIRpdYMKx+vXjsVTgjbzo0X50Lv4Gt7
/gTrNNVzcDPskud/SwZiLM5I25le+b/rWcWWWJBm+TE643AMlvAs2OyqQgIXg1pL
HDP7Yn4bCkonxEHdrtOdz78D1Xvuft2v/2DwvniPIqcO9owKk78urjcYs+oz3mzs
GtX5Ol42tF4jem49jqMBsE4OvP4oIpnCc4EHbhXqggEidi7IKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO85ILhVAd4CX/89xyYPRfkVdV9VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZlZjFkMzYtYjQxZi0z
MGIzLThjZmQtMWJhOWE0NjU4N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzRDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAc5cd34iHcqSByC3xxnEq17LAqRAfwr6y01IbzAuVqZGo27SrANnap/
X7fpGUq2kYUf+VS/YY0SB9pVRpCJ5UmmbNBJZhb6+hhY4Ko5F/VV9fz1eAw51SQA
bSxeCyGxAbCzcAnSAdS2MOs6RtthWk+gWTUjVgH8whcwBPyY6OWaX9VN8cZRqpqU
Eg2GRtvP7tIKFlgqUMmrGEOV+s0Oyfdhsj5XBLuB3IcPvJoRVyS4X84X6xgynAiC
n32ToNnAsK+ffSFrd4Pe3wQixzT1nEfGik4KQC4x5clQK+ax47d8+DBO8Sv6tm4v
Knm1oMReP7lQT6YYdGrj2wGpd5yxdko=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:04:11 2026 by rpki-client