Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa
File:                     27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa (raw, json)
Hash identifier:          Dgvh5K3iF+pHG4vWJCCx5GYOpfyfBKYgmg4a4MZoCjA=
Subject key identifier:   D1:4B:60:DF:B0:57:5B:2D:7B:40:F1:4A:81:75:8F:CF:6A:BB:18:19
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584F2957B4742DCAB70AE85DD7C0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13807
IP address blocks:        24.223.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b4:74:2d:ca:b7:0a:e8:5d:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=6808d130-cf59-46e6-ac77-043c8a119070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:c3:ec:c3:76:b8:3c:62:cf:bb:7e:f9:29:
                    e3:3c:d8:b5:88:33:ea:7d:52:49:82:c1:c3:5f:17:
                    80:c9:e7:36:89:55:fc:3f:38:a9:72:3c:ce:28:7c:
                    8b:f8:47:03:05:73:bc:fc:15:be:ae:9d:c9:92:87:
                    79:1a:5c:1c:fe:27:89:13:bb:e0:78:a3:3b:69:85:
                    10:c3:ba:71:4f:48:a6:2f:86:30:be:8c:ed:f8:e8:
                    b1:e0:48:96:de:12:29:03:86:88:0b:87:9c:14:90:
                    3c:bb:67:21:48:60:46:f2:86:60:26:79:c8:c0:24:
                    84:8e:1d:ca:e9:cf:d9:d1:04:14:27:f1:76:c9:a5:
                    5c:17:e8:11:06:55:90:a9:3d:88:4c:d1:53:f2:9e:
                    fb:7f:fe:29:75:52:b4:44:02:23:50:64:5d:96:a4:
                    65:8b:7e:7f:a1:a0:4e:51:06:9a:c2:b5:c7:e6:4f:
                    1d:65:b8:8e:e6:48:dd:a5:89:c0:1d:0c:52:7f:53:
                    5d:5a:87:3a:13:01:74:46:22:b7:50:cb:66:ea:31:
                    ed:dc:56:dd:6a:93:3a:60:a7:1f:1e:50:d3:90:14:
                    86:12:18:5a:ff:a0:57:43:7e:16:49:2f:25:2f:7c:
                    79:16:9a:62:92:d2:df:e5:38:72:22:2a:48:3a:d4:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4B:60:DF:B0:57:5B:2D:7B:40:F1:4A:81:75:8F:CF:6A:BB:18:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.223.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:ea:2f:1e:73:0d:c0:6a:6b:da:66:99:ba:d6:2b:99:18:
         8e:59:70:7b:4e:d2:83:50:37:13:cf:fb:99:bc:ea:a0:be:70:
         26:db:99:a5:b2:0c:a3:fb:2f:4b:4a:90:d8:ae:d7:bb:0c:3d:
         b7:5c:22:19:84:de:a4:41:a7:0a:78:bb:66:8e:34:a9:3a:65:
         9a:9b:88:eb:dc:79:30:20:c7:a1:f8:2e:5f:5c:49:66:24:f1:
         de:51:a3:ab:ae:81:22:a7:87:c4:1e:2c:5f:b9:ed:6f:d0:b9:
         ac:6e:41:77:df:1b:5b:90:51:f4:cb:9a:e8:66:b7:9f:89:cc:
         df:c8:19:39:e0:4a:cc:2a:9c:0a:c6:8b:16:ed:65:04:f1:9d:
         c9:66:fb:1a:1c:2f:59:90:6d:57:91:28:d9:56:cc:35:01:cd:
         5c:50:97:ec:6e:4b:c0:84:e4:4d:5e:d0:b3:8e:ab:02:a7:8c:
         07:01:fd:70:8e:18:26:8e:69:c3:ab:63:c1:67:91:dd:b3:fa:
         fb:1f:78:8f:bb:d7:2e:9b:91:59:c7:1c:00:8e:c1:6d:54:3d:
         1a:67:ab:ad:36:64:4a:c8:e5:6e:49:60:07:c5:ab:63:34:46:
         6d:b6:15:b2:34:9b:4f:aa:22:ae:51:1a:1e:4c:e5:98:dd:44:
         86:a6:38:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7R0Lcq3Cuhd18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
NjgwOGQxMzAtY2Y1OS00NmU2LWFjNzctMDQzYzhhMTE5MDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkrD7MN2uDxiz7t++SnjPNi1iDPqfVJJgsHD
XxeAyec2iVX8PzipcjzOKHyL+EcDBXO8/BW+rp3Jkod5Glwc/ieJE7vgeKM7aYUQ
w7pxT0imL4Ywvozt+Oix4EiW3hIpA4aIC4ecFJA8u2chSGBG8oZgJnnIwCSEjh3K
6c/Z0QQUJ/F2yaVcF+gRBlWQqT2ITNFT8p77f/4pdVK0RAIjUGRdlqRli35/oaBO
UQaawrXH5k8dZbiO5kjdpYnAHQxSf1NdWoc6EwF0RiK3UMtm6jHt3FbdapM6YKcf
HlDTkBSGEhha/6BXQ34WSS8lL3x5FppiktLf5ThyIipIOtRsNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNFLYN+wV1ste0DxSoF1j89quxgZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMjdkYzE1MmQtOTFhMy0z
YTFkLWE5MzQtOGNhMmM3OGUyNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGN9gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7I6i8ecw3AamvaZpm61iuZGI5ZcHtO0oNQNxPP+5m86qC+cCbbmaWy
DKP7L0tKkNiu17sMPbdcIhmE3qRBpwp4u2aONKk6ZZqbiOvceTAgx6H4Ll9cSWYk
8d5Ro6uugSKnh8QeLF+57W/QuaxuQXffG1uQUfTLmuhmt5+JzN/IGTngSswqnArG
ixbtZQTxnclm+xocL1mQbVeRKNlWzDUBzVxQl+xuS8CE5E1e0LOOqwKnjAcB/XCO
GCaOacOrY8Fnkd2z+vsfeI+71y6bkVnHHACOwW1UPRpnq602ZErI5W5JYAfFq2M0
Rm22FbI0m0+qIq5RGh5M5ZjdRIamOAk=
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:59:03 2026 by rpki-client