Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa
File:                     3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa (raw, json)
Hash identifier:          NTe0jmP6z9F+J0aKSiVlTdKJn3Ry2RL1f46dtREhTho=
Subject key identifier:   2B:6A:40:73:19:37:55:DF:D8:AA:D7:8B:56:A9:C6:0A:43:09:99:8B
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584E885A3FF1F7D3EF1B60C52570
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     23154
IP address blocks:        143.116.78.0/23 maxlen: 23
                          143.116.78.0/24 maxlen: 24
                          143.116.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3f:f1:f7:d3:ef:1b:60:c5:25:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=4a898258-79dd-42ca-96b4-ad85c7077fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:ee:52:7a:d8:25:f6:f7:4e:4f:eb:2e:ad:
                    33:fe:0b:e7:df:d1:44:35:4b:a9:c2:7b:0f:fb:1f:
                    eb:0c:c4:e4:51:36:5e:b1:ae:3b:63:db:32:1a:96:
                    53:c4:7b:27:b9:89:33:53:a0:b5:97:7b:2e:11:7e:
                    21:d8:59:61:8f:c1:2b:00:db:b3:e2:c7:10:ac:4e:
                    b7:8c:bb:ae:e2:9a:6f:62:3b:ef:9a:22:77:fe:13:
                    7b:cf:d8:d8:7a:dc:4c:5b:e4:c0:36:f1:7c:ab:f8:
                    9f:8f:c7:0c:c1:12:72:5e:62:50:a5:d1:43:05:83:
                    ef:95:c8:39:e5:77:f4:9b:4a:e2:49:6c:b1:de:99:
                    03:9a:91:31:b5:30:ea:c2:75:cc:bc:cf:63:f6:fb:
                    1b:da:8f:0d:fb:ab:64:0d:bb:c0:c9:d0:8e:2b:17:
                    50:67:b9:3f:2b:c4:3e:01:ff:b4:99:14:c7:73:28:
                    1c:aa:f6:e4:09:43:80:d1:5a:4f:f6:9a:c6:44:bf:
                    e1:d4:56:7a:b6:ad:b4:21:70:b2:0b:09:36:ec:d4:
                    e6:e6:96:c0:ea:5e:b1:9b:8a:52:93:b9:f2:80:a0:
                    01:99:f4:49:62:7f:7b:91:17:c8:b3:58:eb:6c:6f:
                    72:b2:08:f2:4f:70:11:d5:b3:25:83:e6:01:73:ba:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6A:40:73:19:37:55:DF:D8:AA:D7:8B:56:A9:C6:0A:43:09:99:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:2a:ce:3c:9d:24:b7:ab:f9:c0:99:cd:03:70:05:fc:cb:
         dd:2a:5d:11:f3:14:68:ce:3a:ea:22:99:5c:b6:04:27:f0:9b:
         05:3d:8c:fd:83:65:c6:53:b1:56:cb:6f:43:1a:1a:15:32:f3:
         c1:5c:ca:7f:3d:ff:96:22:e9:31:5a:3b:e0:0a:f1:4e:e2:34:
         e1:e7:b3:a7:d0:36:28:25:79:4c:90:08:63:e4:e8:a3:8f:6e:
         57:6b:bc:d3:33:c3:9a:d0:bd:50:5a:85:59:9c:b1:9a:41:f9:
         b9:8a:35:a6:93:c0:91:63:96:b8:6c:e0:4c:2e:0f:c4:c3:62:
         9a:70:d9:40:91:7f:28:73:af:e4:f2:af:2a:49:1b:f4:93:fb:
         c7:30:6d:ab:44:fc:eb:03:d4:18:ed:83:7d:27:3d:0d:20:1b:
         38:7b:78:80:fa:c8:b7:52:19:9c:62:72:7f:2c:c3:33:31:3f:
         ef:72:d7:3f:36:48:ac:73:d8:da:a9:5c:89:52:57:05:32:3d:
         d6:a6:1e:83:0a:37:08:48:71:8a:c9:31:0f:ec:6a:85:fe:27:
         01:2d:07:65:5c:ee:4e:4a:72:8c:f9:8d:79:7b:18:d1:5d:8c:
         95:4c:29:1e:c8:36:99:3b:4f:e2:39:86:c5:00:12:c0:20:23:
         5e:b4:d3:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWj/x99PvG2DFJXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ0YjhkNmItYzZkNC00N2NjLTk5NjYtNzc3MDY1NjA5
ZTkwMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
NGE4OTgyNTgtNzlkZC00MmNhLTk2YjQtYWQ4NWM3MDc3ZmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNjuUnrYJfb3Tk/rLq0z/gvn39FENUupwnsP
+x/rDMTkUTZesa47Y9syGpZTxHsnuYkzU6C1l3suEX4h2Flhj8ErANuz4scQrE63
jLuu4ppvYjvvmiJ3/hN7z9jYetxMW+TANvF8q/ifj8cMwRJyXmJQpdFDBYPvlcg5
5Xf0m0riSWyx3pkDmpExtTDqwnXMvM9j9vsb2o8N+6tkDbvAydCOKxdQZ7k/K8Q+
Af+0mRTHcygcqvbkCUOA0VpP9prGRL/h1FZ6tq20IXCyCwk27NTm5pbA6l6xm4pS
k7nygKABmfRJYn97kRfIs1jrbG9ysgjyT3AR1bMlg+YBc7pZ+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtqQHMZN1Xf2KrXi1apxgpDCZmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRi
OGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03NzcwNjU2MDllOTAvMzg2NGIzNjQtMGZkNy0z
YzBhLWE5MWEtOGY1ZDIzNDc2N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQ0YjhkNmItYzZkNC00N2NjLTk5
NjYtNzc3MDY1NjA5ZTkwL2E0NGI4ZDZiLWM2ZDQtNDdjYy05OTY2LTc3NzA2NTYw
OWU5MC5jcmwwHwYDVR0jBBgwFoAUAbszEM/IbpG9J5hf9i/TfsnLdsAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRiOGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03Nzcw
NjU2MDllOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj3ROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAawKs48nSS3q/nAmc0DcAX8y90qXRHzFGjOOuoimVy2BCfwmwU9jP2D
ZcZTsVbLb0MaGhUy88Fcyn89/5Yi6TFaO+AK8U7iNOHns6fQNigleUyQCGPk6KOP
bldrvNMzw5rQvVBahVmcsZpB+bmKNaaTwJFjlrhs4EwuD8TDYppw2UCRfyhzr+Ty
rypJG/ST+8cwbatE/OsD1Bjtg30nPQ0gGzh7eID6yLdSGZxicn8swzMxP+9y1z82
SKxz2NqpXIlSVwUyPdamHoMKNwhIcYrJMQ/saoX+JwEtB2Vc7k5Kcoz5jXl7GNFd
jJVMKR7INpk7T+I5hsUAEsAgI16002o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:13 2026 by rpki-client