Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/78b14097-3771-3a71-86c6-3bdae8d2400f.roa
File:                     78b14097-3771-3a71-86c6-3bdae8d2400f.roa (raw, json)
Hash identifier:          WNDh/FeVFa05wYIYIjjYWpFDP/ZHGDGYxlOH58wgRJs=
Subject key identifier:   20:06:87:A4:E8:E9:71:1A:C9:96:32:C6:3A:CD:AE:B6:65:9A:B9:20
Certificate issuer:       /CN=b56e7c58-8673-46d1-820d-7d6bfba44d14
Certificate serial:       010D0C9F4328584F46A7DB96B6DA24F997A1F700
Authority key identifier: 2D:B7:83:F7:7D:00:75:61:C9:FA:BC:E8:97:28:C8:E0:69:E7:2F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/78b14097-3771-3a71-86c6-3bdae8d2400f.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     401994
IP address blocks:        23.144.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:db:96:b6:da:24:f9:97:a1:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56e7c58-8673-46d1-820d-7d6bfba44d14
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=00aeed23-9e49-4631-b83a-bee9ca6aa1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:c2:d5:58:3a:15:44:20:1c:c0:44:0b:ad:
                    38:7c:05:97:3a:b7:7a:36:53:9a:68:2d:93:b8:d1:
                    fc:a3:e0:6c:cd:75:2b:b8:f7:f5:79:a8:ba:ac:6e:
                    98:d3:b9:4c:7b:34:59:7b:76:5d:12:83:bb:2d:75:
                    65:0c:5a:8e:3f:16:20:5d:35:96:54:e5:e5:af:d1:
                    5d:f2:34:20:2d:a1:0f:c8:06:d2:9a:67:e5:22:21:
                    b8:7a:fd:5c:22:b7:b9:1c:e8:e8:72:b9:4d:8c:03:
                    01:e8:ee:20:91:df:a9:17:6c:b9:9a:be:af:75:7a:
                    ee:90:66:02:e5:b0:65:9a:62:9b:77:33:39:21:5b:
                    c1:0b:12:a2:cb:2e:ed:32:74:40:e3:9b:02:cd:eb:
                    ce:ed:59:8b:82:44:a7:99:0a:5e:3c:0c:c3:97:32:
                    8c:6f:98:3f:f3:97:74:05:91:2c:b4:6e:66:82:34:
                    87:5f:76:bf:cc:ef:fb:b3:76:c0:74:c4:a1:18:28:
                    0b:77:91:8e:fb:58:4b:15:0b:f2:b5:39:f7:cf:15:
                    7a:0a:c3:23:f9:6b:58:87:bc:06:29:d1:15:66:53:
                    58:5d:19:1c:15:fa:06:d1:2a:c0:24:73:66:cb:27:
                    2d:22:84:fd:e2:6c:08:45:54:f4:cb:96:83:c4:2a:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:87:A4:E8:E9:71:1A:C9:96:32:C6:3A:CD:AE:B6:65:9A:B9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/78b14097-3771-3a71-86c6-3bdae8d2400f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.crl

            X509v3 Authority Key Identifier:
                keyid:2D:B7:83:F7:7D:00:75:61:C9:FA:BC:E8:97:28:C8:E0:69:E7:2F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:48:7a:86:c6:7c:35:c9:57:1f:cb:f7:d8:d6:75:c1:81:21:
         55:19:50:27:41:d4:d3:86:ab:13:89:82:6f:27:55:4e:19:eb:
         6b:b6:34:c6:f2:1a:81:f5:15:45:ab:6c:8d:5e:ab:48:31:8a:
         bd:19:33:96:5f:e6:c0:97:57:e4:88:c7:5e:b7:8b:c8:43:fa:
         f8:29:a8:c6:af:89:89:71:ac:21:bd:4c:05:38:a7:a9:c3:ef:
         9d:93:54:62:90:10:76:9c:84:8e:be:d9:35:dc:3f:17:44:03:
         61:26:a4:18:d4:85:0c:bc:0d:57:40:8f:ec:18:93:8c:46:e5:
         03:1d:f8:ce:3b:f1:12:6c:62:13:eb:d2:22:1e:75:34:43:b4:
         6e:d1:93:45:9a:4f:89:61:a5:6c:b5:30:44:d0:85:7c:6c:f3:
         12:93:e4:7c:96:37:13:9e:00:c9:5c:90:39:85:18:31:d0:99:
         3a:0e:20:31:03:56:1e:1c:66:b3:c8:e5:24:28:84:8e:35:3e:
         14:af:94:17:2a:29:f8:a3:e0:18:b6:b9:33:61:44:c9:e4:e5:
         06:e4:83:d8:24:0a:1c:16:54:ec:00:f8:03:02:68:ad:a5:0c:
         6c:1b:31:5b:43:1f:a9:a8:0f:0b:fe:04:1c:08:36:3c:ed:72:
         bb:28:43:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp9uWttok+Zeh9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZTdjNTgtODY3My00NmQxLTgyMGQtN2Q2YmZiYTQ0
ZDE0MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
MDBhZWVkMjMtOWU0OS00NjMxLWI4M2EtYmVlOWNhNmFhMWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU7C1Vg6FUQgHMBEC604fAWXOrd6NlOaaC2T
uNH8o+BszXUruPf1eai6rG6Y07lMezRZe3ZdEoO7LXVlDFqOPxYgXTWWVOXlr9Fd
8jQgLaEPyAbSmmflIiG4ev1cIre5HOjocrlNjAMB6O4gkd+pF2y5mr6vdXrukGYC
5bBlmmKbdzM5IVvBCxKiyy7tMnRA45sCzevO7VmLgkSnmQpePAzDlzKMb5g/85d0
BZEstG5mgjSHX3a/zO/7s3bAdMShGCgLd5GO+1hLFQvytTn3zxV6CsMj+WtYh7wG
KdEVZlNYXRkcFfoG0SrAJHNmyyctIoT94mwIRVT0y5aDxCqOpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAGh6To6XEayZYyxjrNrrZlmrkgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iNTZl
N2M1OC04NjczLTQ2ZDEtODIwZC03ZDZiZmJhNDRkMTQvNzhiMTQwOTctMzc3MS0z
YTcxLTg2YzYtM2JkYWU4ZDI0MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjU2ZTdjNTgtODY3My00NmQxLTgy
MGQtN2Q2YmZiYTQ0ZDE0L2I1NmU3YzU4LTg2NzMtNDZkMS04MjBkLTdkNmJmYmE0
NGQxNC5jcmwwHwYDVR0jBBgwFoAULbeD930AdWHJ+rzolyjI4GnnLxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9iNTZlN2M1OC04NjczLTQ2ZDEtODIwZC03ZDZi
ZmJhNDRkMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5DkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlIeobGfDXJVx/L99jWdcGBIVUZUCdB1NOGqxOJgm8nVU4Z62u2NMby
GoH1FUWrbI1eq0gxir0ZM5Zf5sCXV+SIx163i8hD+vgpqMaviYlxrCG9TAU4p6nD
752TVGKQEHachI6+2TXcPxdEA2EmpBjUhQy8DVdAj+wYk4xG5QMd+M478RJsYhPr
0iIedTRDtG7Rk0WaT4lhpWy1METQhXxs8xKT5HyWNxOeAMlckDmFGDHQmToOIDED
Vh4cZrPI5SQohI41PhSvlBcqKfij4Bi2uTNhRMnk5Qbkg9gkChwWVOwA+AMCaK2l
DGwbMVtDH6moDwv+BBwINjztcrsoQ1A=
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:08:48 2026 by rpki-client