Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/f001fb97-bf47-3a73-99e5-f036eae0ac7e.roa
File:                     f001fb97-bf47-3a73-99e5-f036eae0ac7e.roa (raw, json)
Hash identifier:          9+WDXRTapR/Skp4+hiC1syyf0Y9k1l7tEXZG2fQaju0=
Subject key identifier:   4A:8B:11:34:81:0F:23:10:36:85:1E:56:7B:2D:DA:7B:93:82:CE:6F
Certificate issuer:       /CN=a4a5ba5d-c707-479a-82b6-0d1735321896
Certificate serial:       010D0C9F4328584E95BBD2121675FA714E9AA260
Authority key identifier: F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/f001fb97-bf47-3a73-99e5-f036eae0ac7e.roa
Signing time:             Wed 22 Jul 2026 16:02:23 +0000
ROA not before:           Wed 22 Jul 2026 16:02:23 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     396904
IP address blocks:        23.226.124.0/24 maxlen: 24
                          23.226.126.0/24 maxlen: 24
                          23.226.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:bb:d2:12:16:75:fa:71:4e:9a:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a5ba5d-c707-479a-82b6-0d1735321896
        Validity
            Not Before: Jul 22 16:02:23 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=8108f73d-461c-48d0-8389-0774bd6ca617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:0b:17:51:b2:4c:87:3d:af:fe:ff:16:ac:
                    e1:14:ce:3e:a2:90:2b:65:8a:24:75:9b:69:e8:ea:
                    c4:84:a5:38:d0:4f:cc:f7:bf:b6:d9:e2:9c:f8:c3:
                    eb:7d:fd:84:4d:44:fd:1b:ce:50:f4:81:d3:59:e1:
                    15:39:19:06:f7:aa:8e:18:8f:ef:55:1d:a9:5d:ff:
                    d0:75:64:cb:3c:9e:02:82:4b:1e:9b:36:99:20:52:
                    90:8e:c9:65:64:34:2d:04:bf:12:a4:c0:76:91:99:
                    f5:aa:c2:4a:a2:01:8a:9c:86:b2:64:84:45:57:7c:
                    72:99:64:55:21:ee:2f:ce:a9:21:5d:26:74:4d:2b:
                    96:3f:e9:6c:b4:5c:90:94:ec:2e:ab:f9:b1:8e:dc:
                    a1:89:1a:fb:d4:02:42:7a:ee:d6:30:55:2e:d0:c0:
                    cb:9c:08:0d:69:f1:76:1d:60:28:6d:a4:d0:e7:5f:
                    83:36:ce:41:10:7e:48:52:74:dc:e6:23:f1:20:19:
                    78:ca:66:06:a5:e5:15:ad:bd:ac:6b:e7:ea:d4:72:
                    4e:dc:f3:4d:66:c9:26:ca:5d:df:90:25:b2:11:0f:
                    84:c0:73:52:3b:c0:a9:4b:3c:53:82:b7:4e:e9:07:
                    60:84:fc:1c:85:af:de:f7:ec:02:06:7d:ef:82:99:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8B:11:34:81:0F:23:10:36:85:1E:56:7B:2D:DA:7B:93:82:CE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/f001fb97-bf47-3a73-99e5-f036eae0ac7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl

            X509v3 Authority Key Identifier:
                keyid:F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.124.0/24
                  23.226.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c6:69:46:c0:f1:ff:8b:79:08:56:88:b0:18:71:53:91:ff:
         23:83:df:e5:4d:ca:3b:7e:52:e1:f9:42:89:90:f8:76:b7:61:
         7a:0d:1a:5a:80:57:d4:1e:1c:d8:c6:af:cf:78:0a:bf:a0:bf:
         c9:44:98:3f:56:0b:99:75:3a:9b:ba:07:27:4e:c7:3b:62:c5:
         94:55:1b:a4:40:80:07:2d:bb:bf:37:11:d7:1f:1c:04:1b:aa:
         5e:eb:93:5b:73:8e:c3:61:2c:b8:cd:62:03:c3:c6:f7:ec:46:
         d5:0c:ed:b3:e5:c7:96:f1:dc:45:4b:db:04:9b:50:78:6b:94:
         07:ea:5f:cd:ca:e2:fb:1c:63:fd:91:83:5d:36:96:b1:17:51:
         36:3b:e9:6b:bf:f7:4c:64:37:2a:7e:17:cd:12:c3:ac:60:f2:
         37:b7:29:20:24:33:fc:2d:0a:b4:4a:e9:75:eb:e0:80:3b:8c:
         ec:20:b5:b0:e9:99:db:1f:9a:dd:aa:42:b8:04:f6:b4:3e:09:
         53:e5:e6:cd:ca:5e:70:35:36:a1:e7:de:f9:06:36:c3:c0:d0:
         25:ea:bc:fd:98:45:7a:4c:f7:0c:78:24:17:84:cb:23:58:71:
         37:9e:21:ae:b7:36:a7:14:8b:1b:9a:58:96:e3:22:da:61:92:
         2a:f9:7d:91
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6Vu9ISFnX6cU6aomAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRhNWJhNWQtYzcwNy00NzlhLTgyYjYtMGQxNzM1MzIx
ODk2MB4XDTI2MDcyMjE2MDIyM1oXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
ODEwOGY3M2QtNDYxYy00OGQwLTgzODktMDc3NGJkNmNhNjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho4LF1GyTIc9r/7/FqzhFM4+opArZYokdZtp
6OrEhKU40E/M97+22eKc+MPrff2ETUT9G85Q9IHTWeEVORkG96qOGI/vVR2pXf/Q
dWTLPJ4CgksemzaZIFKQjsllZDQtBL8SpMB2kZn1qsJKogGKnIayZIRFV3xymWRV
Ie4vzqkhXSZ0TSuWP+lstFyQlOwuq/mxjtyhiRr71AJCeu7WMFUu0MDLnAgNafF2
HWAobaTQ51+DNs5BEH5IUnTc5iPxIBl4ymYGpeUVrb2sa+fq1HJO3PNNZskmyl3f
kCWyEQ+EwHNSO8CpSzxTgrdO6QdghPwcha/e9+wCBn3vgpkF/wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEqLETSBDyMQNoUeVnst2nuTgs5vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNGE1
YmE1ZC1jNzA3LTQ3OWEtODJiNi0wZDE3MzUzMjE4OTYvZjAwMWZiOTctYmY0Ny0z
YTczLTk5ZTUtZjAzNmVhZTBhYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTRhNWJhNWQtYzcwNy00NzlhLTgy
YjYtMGQxNzM1MzIxODk2L2E0YTViYTVkLWM3MDctNDc5YS04MmI2LTBkMTczNTMy
MTg5Ni5jcmwwHwYDVR0jBBgwFoAU+GYgYKjEaFyTb1Fl00Mwosnp6ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNGE1YmE1ZC1jNzA3LTQ3OWEtODJiNi0wZDE3
MzUzMjE4OTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+J8AwQB
F+J+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABfGaUbA8f+LeQhWiLAYcVOR/yOD3+VNyjt+UuH5QomQ+Ha3
YXoNGlqAV9QeHNjGr894Cr+gv8lEmD9WC5l1Opu6BydOxztixZRVG6RAgActu783
EdcfHAQbql7rk1tzjsNhLLjNYgPDxvfsRtUM7bPlx5bx3EVL2wSbUHhrlAfqX83K
4vscY/2Rg102lrEXUTY76Wu/90xkNyp+F80Sw6xg8je3KSAkM/wtCrRK6XXr4IA7
jOwgtbDpmdsfmt2qQrgE9rQ+CVPl5s3KXnA1NqHn3vkGNsPA0CXqvP2YRXpM9wx4
JBeEyyNYcTeeIa63NqcUixuaWJbjItphkir5fZE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:55 2026 by rpki-client