Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1bc7f37-70b0-3f7b-b755-305552544308.roa
File:                     e1bc7f37-70b0-3f7b-b755-305552544308.roa (raw, json)
Hash identifier:          qE4GjSeMiSR5GW49beOBEopOwMQ/T0GVbchU52dA0Xg=
Subject key identifier:   FE:0A:4F:AF:F2:9A:B6:DA:49:4C:04:F9:4A:59:4E:A9:22:EF:BE:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CF2BCFE22A908D4EF6B37FA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1bc7f37-70b0-3f7b-b755-305552544308.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.208.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:fe:22:a9:08:d4:ef:6b:37:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=205a0ada-4195-4ae7-9a90-1acabd302fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:55:92:6a:fb:de:a0:f7:67:0f:57:0c:1c:
                    a8:3b:0e:23:4b:13:68:6f:df:53:9d:4a:6d:19:a9:
                    5b:17:ec:65:13:f3:d4:77:bf:f5:66:9f:9e:e8:54:
                    c8:bf:e0:c7:ec:41:e7:4a:0c:83:21:75:7c:c2:6d:
                    7b:a4:0c:f6:31:d7:48:06:00:84:47:30:20:eb:1b:
                    28:7b:77:cc:68:c9:c9:37:65:d3:5d:75:0c:70:a2:
                    9a:76:fd:e5:a8:81:3b:6e:e2:72:37:52:91:18:12:
                    a4:86:ef:b1:10:9e:1e:c1:66:e8:12:b0:06:2d:91:
                    6a:22:79:3a:ab:73:7d:93:d6:64:b0:99:6e:d8:ff:
                    f0:51:91:10:9b:8a:9f:81:ff:ea:1a:8e:ac:d1:61:
                    65:25:28:40:68:7e:e6:f0:8c:c4:05:74:da:7b:5d:
                    d6:99:23:d4:e5:d1:6a:c0:e4:a0:cf:96:08:ef:95:
                    e5:8e:ac:f1:0b:47:eb:42:23:45:38:37:07:7d:05:
                    a5:8f:ad:32:d0:ea:f3:cc:65:07:2a:5c:52:08:89:
                    79:0a:9a:ed:c2:d9:41:d4:4d:68:ce:ab:09:ab:f3:
                    7b:00:4c:b4:77:40:0a:a5:0f:c2:48:8a:84:78:85:
                    db:14:c8:0c:f8:df:ee:53:34:2d:3d:08:54:7e:dd:
                    c2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0A:4F:AF:F2:9A:B6:DA:49:4C:04:F9:4A:59:4E:A9:22:EF:BE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1bc7f37-70b0-3f7b-b755-305552544308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.208.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:a7:0c:d0:80:74:5a:de:30:72:22:0a:58:93:8b:17:a3:
         02:dc:1b:60:a1:6e:84:05:9f:cc:c4:06:0b:f0:c2:ef:4b:75:
         df:a6:38:c3:8b:7b:8d:b3:1f:a2:5d:68:98:41:56:29:d3:c7:
         3a:0a:c1:95:76:20:ec:99:09:18:36:59:b9:05:f1:42:d0:43:
         60:c0:cd:f2:11:68:08:cc:57:88:db:9c:a3:6e:b9:e6:5a:68:
         f4:e1:01:85:61:32:3b:4d:3f:31:1e:50:15:48:35:52:87:89:
         8b:54:d8:2d:30:6b:58:a5:17:29:ef:94:75:86:41:89:c6:08:
         2d:11:68:88:ab:43:2b:a8:f1:79:02:e0:0f:b0:ab:10:55:6e:
         b3:e6:a1:d3:95:a2:a1:c5:c4:a1:b5:89:93:e1:60:19:e3:38:
         53:d8:51:ea:97:b5:11:64:1c:12:a0:4b:3b:48:b6:2c:48:7e:
         56:c0:0d:d5:6d:b5:db:38:f4:42:d5:9b:f4:37:2b:9a:ae:c0:
         03:25:8d:96:01:0f:25:6a:98:57:34:a7:69:4b:18:59:d0:4b:
         bb:d2:bf:0e:a2:01:1e:c6:3f:e2:6b:99:cb:04:1b:f6:8e:b0:
         e0:f8:03:16:8c:c3:bf:42:4f:84:0b:55:d3:dc:73:1d:3c:81:
         e1:9e:a3:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvP4iqQjU72s3+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk
MjA1YTBhZGEtNDE5NS00YWU3LTlhOTAtMWFjYWJkMzAyZmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8RVkmr73qD3Zw9XDByoOw4jSxNob99TnUpt
GalbF+xlE/PUd7/1Zp+e6FTIv+DH7EHnSgyDIXV8wm17pAz2MddIBgCERzAg6xso
e3fMaMnJN2XTXXUMcKKadv3lqIE7buJyN1KRGBKkhu+xEJ4ewWboErAGLZFqInk6
q3N9k9ZksJlu2P/wUZEQm4qfgf/qGo6s0WFlJShAaH7m8IzEBXTae13WmSPU5dFq
wOSgz5YI75XljqzxC0frQiNFODcHfQWlj60y0OrzzGUHKlxSCIl5CprtwtlB1E1o
zqsJq/N7AEy0d0AKpQ/CSIqEeIXbFMgM+N/uUzQtPQhUft3C7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4KT6/ymrbaSUwE+UpZTqki775cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTFiYzdmMzctNzBiMC0z
ZjdiLWI3NTUtMzA1NTUyNTQ0MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9DYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACehpwzQgHRa3jByIgpYk4sXowLcG2ChboQFn8zEBgvwwu9Ldd+mOMOL
e42zH6JdaJhBVinTxzoKwZV2IOyZCRg2WbkF8ULQQ2DAzfIRaAjMV4jbnKNuueZa
aPThAYVhMjtNPzEeUBVINVKHiYtU2C0wa1ilFynvlHWGQYnGCC0RaIirQyuo8XkC
4A+wqxBVbrPmodOVoqHFxKG1iZPhYBnjOFPYUeqXtRFkHBKgSztItixIflbADdVt
tds49ELVm/Q3K5quwAMljZYBDyVqmFc0p2lLGFnQS7vSvw6iAR7GP+JrmcsEG/aO
sOD4AxaMw79CT4QLVdPccx08geGeoz8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:51 2026 by rpki-client