Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e459ff50-4aa6-3e87-9bbd-eb31595f5d68.roa
File:                     e459ff50-4aa6-3e87-9bbd-eb31595f5d68.roa (raw, json)
Hash identifier:          YJL7f1YVrmm5LxBThY1lKwl9MORQ3+M5wylYSrh83bA=
Subject key identifier:   80:62:49:19:27:2C:35:E1:8F:DF:E8:9C:FC:F3:6F:56:2F:93:64:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4112B90771583E98DCBBEE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e459ff50-4aa6-3e87-9bbd-eb31595f5d68.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.46.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b9:07:71:58:3e:98:dc:bb:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=5c35825f-1fbf-4170-84c0-3437be729678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:fd:60:96:b1:6d:a3:12:91:3c:c2:d1:a9:
                    b5:d2:2a:6c:02:2f:36:c4:f6:2a:84:ae:db:b5:7f:
                    1d:6a:88:44:41:fa:4b:6a:49:47:49:4c:8b:76:b3:
                    7e:6a:f9:1b:0f:2f:33:68:53:83:e2:81:66:e3:2d:
                    d9:31:5c:e3:7a:2c:a9:b9:d5:a3:7c:1f:ab:fd:15:
                    c8:fc:55:df:c0:d9:76:7f:c1:e9:eb:17:95:98:df:
                    7b:b8:23:73:e1:4e:28:b3:db:d4:95:a4:72:5f:08:
                    fb:28:52:6c:06:67:e0:b8:09:fc:63:2f:fa:76:28:
                    f3:57:f0:e2:dc:42:18:88:62:42:36:2e:64:bd:90:
                    37:7a:3d:10:95:82:31:7d:58:e8:fe:36:d5:64:09:
                    ea:32:fc:e7:73:2f:d7:a1:8d:6a:02:86:ba:bb:22:
                    6f:e3:b1:ab:ba:e5:d4:be:6d:59:19:36:01:42:5c:
                    08:6c:f7:d0:ce:9e:b8:14:b2:85:b1:d9:4a:ad:b8:
                    98:cd:50:8b:8d:ff:0b:94:91:08:13:14:06:3a:81:
                    54:d3:a5:3f:8c:7b:f6:d3:81:d2:72:bc:e6:d5:be:
                    0a:f2:f9:91:00:bf:21:84:f7:b5:80:ef:6c:de:1b:
                    6b:ca:a5:f4:d9:e4:d5:dc:0f:30:88:b1:4e:ec:18:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:49:19:27:2C:35:E1:8F:DF:E8:9C:FC:F3:6F:56:2F:93:64:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e459ff50-4aa6-3e87-9bbd-eb31595f5d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:8f:68:83:cc:36:d0:9a:8e:37:49:4e:74:84:c8:8f:8c:
         be:8d:12:df:f4:75:d3:5e:8c:8e:85:4d:9a:aa:25:e1:93:18:
         84:14:dd:58:ad:07:cf:20:38:4d:91:13:13:0e:1a:ed:c9:81:
         5d:c6:af:ff:1d:f9:3e:bd:3f:50:8d:e7:c7:77:e0:a4:14:57:
         bc:88:b7:3d:f0:39:74:74:a3:a7:16:ad:07:31:4d:5d:9d:61:
         db:3a:31:ba:59:6c:5a:c3:71:d1:10:b2:32:40:26:98:00:f4:
         a0:46:76:55:63:f3:5e:f6:47:c9:13:f3:18:a4:b1:a1:3f:e5:
         e7:80:07:3f:19:b0:81:70:70:30:1e:f0:4e:66:39:76:b5:eb:
         aa:2f:07:ec:4a:d6:6e:4d:55:6c:6f:b6:60:37:7b:67:61:00:
         ea:bf:50:aa:cf:36:c3:aa:b4:7b:21:2a:5c:84:0d:21:1f:9b:
         3a:d5:8f:36:e9:98:f5:77:4b:35:19:db:92:49:f5:d6:df:02:
         24:a3:a2:97:fb:a2:94:a9:09:88:aa:11:99:39:62:d7:69:8d:
         f0:a2:0b:96:44:9e:3f:36:5f:7c:0c:2a:d4:fc:4d:80:da:3e:
         bb:c5:98:bf:84:94:d4:71:dd:53:3a:39:49:87:58:1b:60:8b:
         20:6c:72:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErkHcVg+mNy77gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NWMzNTgyNWYtMWZiZi00MTcwLTg0YzAtMzQzN2JlNzI5Njc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEL9YJaxbaMSkTzC0am10ipsAi82xPYqhK7b
tX8daohEQfpLaklHSUyLdrN+avkbDy8zaFOD4oFm4y3ZMVzjeiypudWjfB+r/RXI
/FXfwNl2f8Hp6xeVmN97uCNz4U4os9vUlaRyXwj7KFJsBmfguAn8Yy/6dijzV/Di
3EIYiGJCNi5kvZA3ej0QlYIxfVjo/jbVZAnqMvzncy/XoY1qAoa6uyJv47GruuXU
vm1ZGTYBQlwIbPfQzp64FLKFsdlKrbiYzVCLjf8LlJEIExQGOoFU06U/jHv204HS
crzm1b4K8vmRAL8hhPe1gO9s3htryqX02eTV3A8wiLFO7BgJtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBiSRknLDXhj9/onPzzb1Yvk2QwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ1OWZmNTAtNGFhNi0z
ZTg3LTliYmQtZWIzMTU5NWY1ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFy4GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7aj2iDzDbQmo43SU50hMiPjL6NEt/0ddNejI6FTZqqJeGTGIQU3Vit
B88gOE2RExMOGu3JgV3Gr/8d+T69P1CN58d34KQUV7yItz3wOXR0o6cWrQcxTV2d
Yds6MbpZbFrDcdEQsjJAJpgA9KBGdlVj8172R8kT8xiksaE/5eeABz8ZsIFwcDAe
8E5mOXa166ovB+xK1m5NVWxvtmA3e2dhAOq/UKrPNsOqtHshKlyEDSEfmzrVjzbp
mPV3SzUZ25JJ9dbfAiSjopf7opSpCYiqEZk5YtdpjfCiC5ZEnj82X3wMKtT8TYDa
PrvFmL+ElNRx3VM6OUmHWBtgiyBscts=
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:06:05 2026 by rpki-client