Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/57470067-3aff-38ac-b569-95778e63ad81.roa
File:                     57470067-3aff-38ac-b569-95778e63ad81.roa (raw, json)
Hash identifier:          sLpuvKdaczJDEei43+JlVkYszTZlTnSWfGHyLdxHuXo=
Subject key identifier:   59:56:48:11:A9:4A:8D:EB:8C:78:C7:33:0D:0C:2B:06:07:DA:73:B5
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F42B028D48F38D3F95D6C8240
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/57470067-3aff-38ac-b569-95778e63ad81.roa
Signing time:             Tue 22 Sep 2026 14:53:44 +0000
ROA not before:           Tue 22 Sep 2026 14:53:44 +0000
ROA not after:            Mon 21 Dec 2026 15:53:44 +0000
asID:                     54641
IP address blocks:        23.235.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:b0:28:d4:8f:38:d3:f9:5d:6c:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 22 14:53:44 2026 GMT
            Not After : Dec 21 15:53:44 2026 GMT
        Subject: CN=a512206e-a704-4126-9b4b-27f6d3f712f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:cf:52:d8:73:29:91:46:eb:ac:6d:bb:4f:
                    8f:9b:2a:db:3d:c4:5a:26:9f:25:40:d0:b3:6e:53:
                    ee:ea:45:e8:77:f2:d0:c6:f6:64:44:1e:da:39:ea:
                    83:25:43:e6:0d:8f:b1:14:11:15:4d:cf:c3:5e:f0:
                    75:92:60:9b:d8:0c:a7:a7:2d:35:6f:b3:ab:b8:bb:
                    38:14:20:70:31:51:e7:f5:89:a3:dd:3e:5f:5a:57:
                    30:dc:f5:bf:e5:9b:47:f9:96:df:f1:70:be:45:f5:
                    51:a3:22:5e:ba:e5:d6:c0:81:65:ea:1d:42:99:a8:
                    bc:b9:e8:2d:f2:25:8d:44:fe:e3:70:2e:86:4e:fe:
                    e8:b3:f0:f5:06:44:38:89:2c:66:bd:e5:85:2a:55:
                    76:05:5d:e5:fd:bb:66:78:32:94:82:f0:d5:e2:63:
                    eb:ab:d5:64:42:75:ad:19:2a:79:c3:16:49:02:44:
                    20:e7:51:21:2e:09:55:28:ab:a2:08:45:80:e9:59:
                    d5:8d:7e:1e:ed:18:13:e9:c3:9d:e8:db:61:04:56:
                    50:45:a5:71:8d:9f:9b:4b:d5:78:1a:65:c4:9c:9e:
                    c0:6b:54:7e:a5:b1:b4:d8:73:21:9f:e0:64:5e:0f:
                    00:09:86:3b:14:c2:58:76:9e:a8:d9:1a:c5:71:3f:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:56:48:11:A9:4A:8D:EB:8C:78:C7:33:0D:0C:2B:06:07:DA:73:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/57470067-3aff-38ac-b569-95778e63ad81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:05:e0:dd:50:e0:cb:26:1e:be:c7:ed:b3:4a:1c:34:35:12:
         7b:d4:ac:d2:9a:5c:90:27:96:af:92:0b:12:22:38:ee:b6:8b:
         f8:94:9d:d2:72:87:cf:db:af:b2:7e:b1:9f:e8:1f:8e:f7:f8:
         50:db:5c:50:10:1f:f5:03:68:21:51:8b:67:81:54:56:4d:c5:
         00:de:77:54:c0:27:fc:be:9a:cc:d1:a0:2e:32:3f:48:59:6f:
         2b:50:51:82:17:aa:e3:56:23:23:88:4a:cb:b2:b7:78:5e:3e:
         e4:61:0f:bd:8a:47:99:cd:59:af:20:02:dc:fa:d4:80:a2:cf:
         c4:27:57:f2:4d:47:62:9c:6f:31:0c:fe:b2:dd:2e:2d:14:e1:
         38:9d:e1:b1:58:f0:f0:53:92:51:40:44:27:75:b5:4e:bb:a5:
         58:54:fe:3b:0e:26:7a:f0:80:8f:76:d5:c1:7a:d6:0c:e1:3c:
         e2:a9:0d:35:9c:c5:4d:e0:43:89:98:91:63:2a:63:14:8b:16:
         76:45:93:2f:fc:f4:1b:a3:b2:85:44:9b:a4:b7:64:63:f8:8c:
         1f:f3:d9:6e:5b:1c:ec:3a:70:8d:2c:06:23:4c:61:42:b5:df:
         64:6c:c0:a9:07:e8:29:3c:42:86:43:09:54:9d:7b:e5:7e:1f:
         88:36:62:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CsCjUjzjT+V1sgkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0
ZmFlMB4XDTI2MDkyMjE0NTM0NFoXDTI2MTIyMTE1NTM0NFowLzEtMCsGA1UEAxMk
YTUxMjIwNmUtYTcwNC00MTI2LTliNGItMjdmNmQzZjcxMmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/3PUthzKZFG66xtu0+PmyrbPcRaJp8lQNCz
blPu6kXod/LQxvZkRB7aOeqDJUPmDY+xFBEVTc/DXvB1kmCb2Aynpy01b7OruLs4
FCBwMVHn9Ymj3T5fWlcw3PW/5ZtH+Zbf8XC+RfVRoyJeuuXWwIFl6h1Cmai8uegt
8iWNRP7jcC6GTv7os/D1BkQ4iSxmveWFKlV2BV3l/btmeDKUgvDV4mPrq9VkQnWt
GSp5wxZJAkQg51EhLglVKKuiCEWA6VnVjX4e7RgT6cOd6NthBFZQRaVxjZ+bS9V4
GmXEnJ7Aa1R+pbG02HMhn+BkXg8ACYY7FMJYdp6o2RrFcT+L+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlWSBGpSo3rjHjHMw0MKwYH2nO1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx
MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvNTc0NzAwNjctM2FmZi0z
OGFjLWI1NjktOTU3NzhlNjNhZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll
ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2
NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1
ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+vEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcF4N1Q4MsmHr7H7bNKHDQ1EnvUrNKaXJAnlq+SCxIiOO62i/iUndJy
h8/br7J+sZ/oH473+FDbXFAQH/UDaCFRi2eBVFZNxQDed1TAJ/y+mszRoC4yP0hZ
bytQUYIXquNWIyOISsuyt3hePuRhD72KR5nNWa8gAtz61ICiz8QnV/JNR2KcbzEM
/rLdLi0U4Tid4bFY8PBTklFARCd1tU67pVhU/jsOJnrwgI921cF61gzhPOKpDTWc
xU3gQ4mYkWMqYxSLFnZFky/89BujsoVEm6S3ZGP4jB/z2W5bHOw6cI0sBiNMYUK1
32RswKkH6Ck8QoZDCVSde+V+H4g2Yj4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:51:31 2026 by rpki-client