Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef9e3e21-915b-37b1-be73-d1a38b1d746d.roa
File:                     ef9e3e21-915b-37b1-be73-d1a38b1d746d.roa (raw, json)
Hash identifier:          SYkKP1FfLvuicbjzzUvR6gnqLXu/b1vhOV4IN1kkILc=
Subject key identifier:   FC:44:B0:8F:8F:D9:3C:8B:F5:DF:B0:35:71:48:F4:E4:9F:06:A9:A4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D869570FB7459DFF8A0983040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef9e3e21-915b-37b1-be73-d1a38b1d746d.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        23.7.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:70:fb:74:59:df:f8:a0:98:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=8cff9e34-cf29-4f7d-9a2c-29fe3d65b4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:3b:7c:ef:29:6f:4d:c5:5e:4c:43:60:c0:
                    19:15:00:ef:aa:d8:5f:e0:d7:b6:aa:6f:ac:bb:d8:
                    73:c2:1e:db:56:24:58:fe:fa:5a:7b:93:0d:d7:69:
                    0c:e9:4d:24:62:2b:61:75:1f:f9:2a:a5:b7:ea:29:
                    d4:3b:45:e8:74:29:fc:0d:8c:2e:e0:de:22:64:43:
                    0e:9d:cb:72:a6:f4:5b:01:72:35:f4:ad:4f:94:81:
                    df:d7:b5:55:81:c4:03:e3:ca:8f:db:da:13:ec:06:
                    c9:8e:9a:dc:9f:67:fe:00:bc:9b:ad:44:66:f1:d9:
                    1a:66:e6:36:d9:7b:1a:74:43:ae:9c:d7:b6:07:5a:
                    b8:73:71:1d:56:2b:81:f6:41:45:26:7e:35:59:44:
                    f1:df:63:1f:ea:5d:c8:07:cd:d6:9a:6e:52:c5:b2:
                    b3:f2:50:dd:15:33:df:80:ce:a8:76:32:10:44:64:
                    93:1f:1f:e1:c8:8f:84:af:3f:fa:de:0b:53:12:6b:
                    52:51:e3:fa:69:2f:c9:c2:af:68:ba:38:d4:1f:db:
                    3c:b6:00:6e:c0:1e:91:68:e6:56:44:9d:05:da:db:
                    f3:67:77:2e:4a:03:24:37:76:c4:3f:29:8c:bd:8a:
                    f6:8f:a3:64:97:1c:f7:f8:bf:af:c6:5b:3c:67:f2:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:44:B0:8F:8F:D9:3C:8B:F5:DF:B0:35:71:48:F4:E4:9F:06:A9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef9e3e21-915b-37b1-be73-d1a38b1d746d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.7.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:16:ca:c6:51:17:e7:fc:af:3b:81:26:3f:ee:81:46:df:d6:
         0c:12:30:dd:55:99:3b:0a:79:e4:7e:04:30:9e:b2:a8:b8:e7:
         ac:ae:7e:6d:c4:f5:2f:51:14:a7:e2:39:bf:b6:87:08:53:7e:
         2c:04:c0:b4:cd:ae:a6:6f:c7:6a:38:af:39:b9:e7:6d:df:0d:
         2c:03:ba:9f:60:46:60:c2:b8:7b:6f:5e:93:19:94:f7:07:0c:
         3e:64:da:5b:a7:7e:22:e2:fa:ad:68:06:5e:db:e9:da:0d:e4:
         68:e6:de:5d:ce:2e:d9:84:2b:27:53:86:f9:f5:8c:0f:3c:d4:
         3d:81:e2:43:30:dd:5a:eb:4f:ef:17:cf:1f:6a:0f:c4:cc:98:
         f0:28:f9:d7:c7:bd:84:fd:76:67:bc:58:a5:c5:77:a5:7b:e0:
         a5:f5:d0:11:13:7b:81:c0:f3:4a:a4:8f:7e:61:17:97:4b:10:
         77:bc:ab:a7:b0:1c:64:50:96:1e:e2:47:cb:02:70:e2:89:2c:
         23:5c:71:13:a4:dd:04:ac:12:ab:66:13:88:7d:a3:f6:94:5f:
         f5:05:62:48:9f:7d:12:38:25:1b:8c:d4:ad:a0:11:e5:bd:82:
         ff:c0:97:1a:bb:83:ea:70:84:1b:ed:bf:0e:d1:ad:78:d0:1a:
         4e:f2:70:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXD7dFnf+KCYMEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
OGNmZjllMzQtY2YyOS00ZjdkLTlhMmMtMjlmZTNkNjViNGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotA7fO8pb03FXkxDYMAZFQDvqthf4Ne2qm+s
u9hzwh7bViRY/vpae5MN12kM6U0kYithdR/5KqW36inUO0XodCn8DYwu4N4iZEMO
nctypvRbAXI19K1PlIHf17VVgcQD48qP29oT7AbJjprcn2f+ALybrURm8dkaZuY2
2XsadEOunNe2B1q4c3EdViuB9kFFJn41WUTx32Mf6l3IB83Wmm5SxbKz8lDdFTPf
gM6odjIQRGSTHx/hyI+Erz/63gtTEmtSUeP6aS/Jwq9oujjUH9s8tgBuwB6RaOZW
RJ0F2tvzZ3cuSgMkN3bEPymMvYr2j6Nklxz3+L+vxls8Z/IYbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxEsI+P2TyL9d+wNXFI9OSfBqmkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWY5ZTNlMjEtOTE1Yi0z
N2IxLWJlNzMtZDFhMzhiMWQ3NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwewMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8WysZRF+f8rzuBJj/ugUbf1gwSMN1VmTsKeeR+BDCesqi456yufm3E
9S9RFKfiOb+2hwhTfiwEwLTNrqZvx2o4rzm5523fDSwDup9gRmDCuHtvXpMZlPcH
DD5k2lunfiLi+q1oBl7b6doN5Gjm3l3OLtmEKydThvn1jA881D2B4kMw3VrrT+8X
zx9qD8TMmPAo+dfHvYT9dme8WKXFd6V74KX10BETe4HA80qkj35hF5dLEHe8q6ew
HGRQlh7iR8sCcOKJLCNccROk3QSsEqtmE4h9o/aUX/UFYkiffRI4JRuM1K2gEeW9
gv/Alxq7g+pwhBvtvw7RrXjQGk7ycBk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:42 2026 by rpki-client