Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec4cf3de-20d4-327a-867e-7035415249ec.roa
File:                     ec4cf3de-20d4-327a-867e-7035415249ec.roa (raw, json)
Hash identifier:          mgXXLM2FYhbW3QqFEl0ZdPNoEufYynrP7k31HK7ItUc=
Subject key identifier:   C3:63:48:4B:8E:B2:2F:A7:55:EE:19:10:5E:DA:71:E8:AC:37:C9:6D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDB022E422160080FFDA6C880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec4cf3de-20d4-327a-867e-7035415249ec.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     16625
IP address blocks:        23.36.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:2e:42:21:60:08:0f:fd:a6:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=4e682054-f0e4-4588-b5d4-39f08a7d1dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:46:10:6a:a2:08:bb:95:cb:40:d8:e2:77:
                    6d:80:be:5d:88:b7:13:cf:ca:1e:dc:2c:63:c9:e9:
                    cb:21:5c:f4:93:88:83:0a:1d:ba:0b:bc:fa:f4:90:
                    ad:15:f2:f2:aa:c1:93:fb:90:5d:1d:23:5a:f9:95:
                    47:8e:45:8f:39:1c:55:3b:d5:79:ba:fd:43:66:55:
                    da:f6:86:34:ce:90:d1:38:fd:97:6e:f6:a2:b4:a9:
                    90:45:66:13:95:2d:7d:9e:21:3e:1a:3a:34:7c:4d:
                    ef:f6:1f:51:d2:90:6f:69:e8:8b:84:49:e3:a7:5c:
                    91:dc:1f:ed:29:50:fe:4a:b2:1d:56:8c:33:63:e1:
                    b3:98:81:90:83:e6:3e:c6:9a:80:37:d2:97:f7:64:
                    f8:c2:2f:eb:d4:ce:24:d0:5a:34:7e:80:4b:1a:76:
                    34:c8:21:66:bf:fa:57:d5:84:7d:3c:ce:7b:75:f4:
                    d0:14:cc:12:bd:65:49:11:3c:97:11:83:35:f7:e3:
                    92:67:f8:0a:e5:97:9a:a2:35:65:25:17:07:23:85:
                    24:5e:1b:1d:15:03:c9:0e:5f:fa:a4:0f:11:17:43:
                    c5:42:1b:3d:68:ac:0e:bb:94:08:85:2d:4d:ad:58:
                    cf:d8:0f:7c:71:0f:f0:a3:d6:ca:d8:ae:09:08:4d:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:63:48:4B:8E:B2:2F:A7:55:EE:19:10:5E:DA:71:E8:AC:37:C9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec4cf3de-20d4-327a-867e-7035415249ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:56:bd:4d:b1:d5:fd:5a:e2:eb:51:10:3d:91:bc:b4:89:
         5e:1a:35:74:99:c4:43:94:a6:13:65:9f:2e:a6:02:7b:50:4d:
         22:49:1a:b7:fb:31:b4:39:4a:f6:8e:73:0e:d1:36:eb:05:ed:
         91:2f:eb:72:ac:e4:ed:4e:b3:c9:8d:cf:4f:68:94:11:34:28:
         e7:71:17:87:a7:16:f2:b6:39:6b:da:b9:22:83:ce:7a:df:71:
         1b:0b:a4:52:87:0a:09:d0:8d:99:f3:4c:fe:15:82:b5:67:89:
         d1:46:c1:97:f8:94:d1:bc:49:eb:67:8e:d5:57:49:23:09:db:
         c7:56:66:85:70:cc:d4:31:5f:30:4e:4b:fa:fd:be:07:75:c1:
         c1:52:33:3a:61:c0:93:05:33:51:e0:ba:c2:41:62:0c:68:8c:
         0c:69:4a:8d:b4:2f:f7:07:d1:e1:4e:7d:dd:10:09:4d:91:28:
         48:e2:c4:16:f2:fb:b8:cc:45:ed:6d:ef:4a:70:a1:7d:5d:82:
         2f:d1:a4:78:75:56:2f:6a:2a:15:4a:60:a4:03:30:2e:62:f7:
         eb:26:a7:d4:3a:02:36:52:73:16:6e:02:09:df:30:cd:e7:dd:
         4f:7f:94:2c:e3:5c:11:2e:78:48:70:94:b4:01:96:5b:80:a5:
         6b:f1:1f:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAi5CIWAID/2myIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
NGU2ODIwNTQtZjBlNC00NTg4LWI1ZDQtMzlmMDhhN2QxZGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxRGEGqiCLuVy0DY4ndtgL5diLcTz8oe3Cxj
yenLIVz0k4iDCh26C7z69JCtFfLyqsGT+5BdHSNa+ZVHjkWPORxVO9V5uv1DZlXa
9oY0zpDROP2XbvaitKmQRWYTlS19niE+Gjo0fE3v9h9R0pBvaeiLhEnjp1yR3B/t
KVD+SrIdVowzY+GzmIGQg+Y+xpqAN9KX92T4wi/r1M4k0Fo0foBLGnY0yCFmv/pX
1YR9PM57dfTQFMwSvWVJETyXEYM19+OSZ/gK5ZeaojVlJRcHI4UkXhsdFQPJDl/6
pA8RF0PFQhs9aKwOu5QIhS1NrVjP2A98cQ/wo9bK2K4JCE2T0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNjSEuOsi+nVe4ZEF7aceisN8ltMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM0Y2YzZGUtMjBkNC0z
MjdhLTg2N2UtNzAzNTQxNTI0OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFySoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYvVr1NsdX9WuLrURA9kby0iV4aNXSZxEOUphNlny6mAntQTSJJGrf7
MbQ5SvaOcw7RNusF7ZEv63Ks5O1Os8mNz09olBE0KOdxF4enFvK2OWvauSKDznrf
cRsLpFKHCgnQjZnzTP4VgrVnidFGwZf4lNG8SetnjtVXSSMJ28dWZoVwzNQxXzBO
S/r9vgd1wcFSMzphwJMFM1HgusJBYgxojAxpSo20L/cH0eFOfd0QCU2RKEjixBby
+7jMRe1t70pwoX1dgi/RpHh1Vi9qKhVKYKQDMC5i9+smp9Q6AjZScxZuAgnfMM3n
3U9/lCzjXBEueEhwlLQBlluApWvxH7c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:45 2026 by rpki-client