Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa
File:                     426b412f-a43c-3d09-aae6-0833d218aefc.roa (raw, json)
Hash identifier:          8MuBmqk5jaO5sCKuGifQIcD8z7RuZK3GeWWVx47C4Xw=
Subject key identifier:   02:B8:E9:08:D2:7B:83:D6:6F:F1:29:91:B5:15:7D:E5:1F:4B:A2:11
Certificate issuer:       /CN=1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce
Certificate serial:       010D0C9F4328584D1F4A4066FE929AB040D84F80
Authority key identifier: 14:02:82:72:64:93:A9:34:A5:AF:26:C3:0B:CF:B8:FB:49:37:40:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     46515
IP address blocks:        23.155.152.0/24 maxlen: 24
                          2620:ad:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:40:66:fe:92:9a:b0:40:d8:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=19fa28f3-214d-47af-98ca-2ebd3f148812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:a9:1a:d1:e3:c9:1d:59:08:57:56:d0:d4:
                    40:31:fc:da:a7:10:9e:f5:86:49:d5:2c:f3:d2:b1:
                    f0:39:10:0d:04:db:ad:fa:cb:9d:09:a3:a1:54:42:
                    df:69:12:6d:90:a7:26:c3:e9:7a:97:11:1d:23:ed:
                    6a:98:73:1c:6e:08:14:24:97:59:ab:86:0c:9b:cc:
                    40:a2:12:21:09:57:c8:9d:e2:a4:ca:4b:57:6d:dd:
                    0a:e5:12:42:b2:00:0b:96:0a:e7:84:07:a2:9a:01:
                    8b:de:93:92:86:fb:ec:b8:96:18:e0:67:21:c5:7c:
                    86:29:7e:b8:76:a5:fb:32:10:04:b4:76:83:ca:bf:
                    4a:a0:3b:37:8c:93:b6:1c:ec:6e:5c:1b:2e:19:3e:
                    ae:52:cd:d1:1f:b9:ee:03:27:4c:b8:91:9d:4f:f4:
                    d4:2d:aa:6a:32:ff:db:84:98:c8:20:bc:24:44:b7:
                    e0:42:5a:81:40:01:25:23:e5:d7:b2:00:5b:c0:70:
                    2c:96:dd:f2:68:1b:fb:8c:28:55:c4:b8:11:af:f1:
                    42:d6:7f:8b:2a:ea:28:b8:bb:ff:81:05:89:9b:90:
                    36:46:ad:97:34:8a:ee:33:46:82:5d:c4:dd:47:82:
                    f8:93:a6:ed:cd:2a:f6:38:de:97:a3:f7:1c:44:e7:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B8:E9:08:D2:7B:83:D6:6F:F1:29:91:B5:15:7D:E5:1F:4B:A2:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl

            X509v3 Authority Key Identifier:
                keyid:14:02:82:72:64:93:A9:34:A5:AF:26:C3:0B:CF:B8:FB:49:37:40:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.152.0/24
                IPv6:
                  2620:ad:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:88:9a:b2:c0:93:62:e8:4a:85:f4:2f:a2:7c:c1:dc:28:6e:
         2a:ff:f3:9f:59:93:4c:2c:ba:fd:3e:99:b6:a3:f6:d8:a5:31:
         1c:de:72:1a:1b:9d:ad:0d:4c:7b:31:48:45:30:8c:8f:60:35:
         04:7d:b6:e5:5c:76:b7:2b:8f:13:a4:c9:e3:df:ea:6e:da:e8:
         28:17:d3:54:dd:5b:a3:dc:dc:07:0c:50:d8:26:6c:cf:0f:6d:
         35:5f:07:84:53:34:3e:94:b0:42:61:c3:bf:0a:04:4c:6a:0c:
         05:36:42:88:cc:89:64:c8:08:14:9b:84:95:f3:bf:d9:a2:aa:
         52:06:6d:8d:48:84:85:cb:fe:5f:d7:6a:31:09:53:3b:19:ce:
         0b:00:9a:4d:5b:1d:f2:3b:ad:f4:d8:96:22:fe:48:65:ad:75:
         9c:74:8b:13:0c:61:45:76:98:01:69:23:06:d3:bc:a3:87:15:
         79:dd:68:69:6c:fd:7c:ef:52:1e:70:15:c1:de:20:ad:96:05:
         fc:82:91:35:ed:83:2e:f0:d9:aa:1a:15:0c:56:b7:4f:0b:07:
         85:4d:90:b1:2e:c8:fc:69:e7:ac:4c:ae:0c:08:b7:f5:1d:df:
         07:ca:3f:00:f2:00:17:49:77:d4:a2:38:be:60:74:9e:f2:7d:
         f8:80:0b:67
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0fSkBm/pKasEDYT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkNWQ5ZDItZDc0YS00YmEwLWI4YTUtN2Y1OTAwMTlm
NGNlMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
MTlmYTI4ZjMtMjE0ZC00N2FmLTk4Y2EtMmViZDNmMTQ4ODEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FOpGtHjyR1ZCFdW0NRAMfzapxCe9YZJ1Szz
0rHwORANBNut+sudCaOhVELfaRJtkKcmw+l6lxEdI+1qmHMcbggUJJdZq4YMm8xA
ohIhCVfIneKkyktXbd0K5RJCsgALlgrnhAeimgGL3pOShvvsuJYY4GchxXyGKX64
dqX7MhAEtHaDyr9KoDs3jJO2HOxuXBsuGT6uUs3RH7nuAydMuJGdT/TULapqMv/b
hJjIILwkRLfgQlqBQAElI+XXsgBbwHAslt3yaBv7jChVxLgRr/FC1n+LKuoouLv/
gQWJm5A2Rq2XNIruM0aCXcTdR4L4k6btzSr2ON6Xo/ccROdWmQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFAK46QjSe4PWb/EpkbUVfeUfS6IRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWQ1
ZDlkMi1kNzRhLTRiYTAtYjhhNS03ZjU5MDAxOWY0Y2UvNDI2YjQxMmYtYTQzYy0z
ZDA5LWFhZTYtMDgzM2QyMThhZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFkNWQ5ZDItZDc0YS00YmEwLWI4
YTUtN2Y1OTAwMTlmNGNlLzFhZDVkOWQyLWQ3NGEtNGJhMC1iOGE1LTdmNTkwMDE5
ZjRjZS5jcmwwHwYDVR0jBBgwFoAUFAKCcmSTqTSlrybDC8+4+0k3QDowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWQ1ZDlkMi1kNzRhLTRiYTAtYjhhNS03ZjU5
MDAxOWY0Y2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5uYMA8E
AgACMAkDBwQmIACtIAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI4iassCTYuhKhfQvonzB3ChuKv/zn1mT
TCy6/T6ZtqP22KUxHN5yGhudrQ1MezFIRTCMj2A1BH225Vx2tyuPE6TJ49/qbtro
KBfTVN1bo9zcBwxQ2CZszw9tNV8HhFM0PpSwQmHDvwoETGoMBTZCiMyJZMgIFJuE
lfO/2aKqUgZtjUiEhcv+X9dqMQlTOxnOCwCaTVsd8jut9NiWIv5IZa11nHSLEwxh
RXaYAWkjBtO8o4cVed1oaWz9fO9SHnAVwd4grZYF/IKRNe2DLvDZqhoVDFa3TwsH
hU2QsS7I/GnnrEyuDAi39R3fB8o/APIAF0l31KI4vmB0nvJ9+IALZw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:38 2026 by rpki-client