Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c238bb06-a682-38fe-8875-9fa37b22aa89.roa
File:                     c238bb06-a682-38fe-8875-9fa37b22aa89.roa (raw, json)
Hash identifier:          0brjkQpGj0nUTO7PfsA9rX5/seFCtuUtuDfwDHcKXw0=
Subject key identifier:   29:A3:AE:59:96:7F:87:04:E9:01:6F:77:B0:1F:32:3E:2A:4C:A6:4B
Certificate issuer:       /CN=c980b322-2706-49ce-9257-188222049479
Certificate serial:       010D0C9F4328584FA2C883931150B2FEC61B26E0
Authority key identifier: 94:77:C8:23:0A:FB:65:21:42:D3:EA:6B:C9:FD:80:E9:C3:52:9C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c238bb06-a682-38fe-8875-9fa37b22aa89.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     401007
IP address blocks:        23.181.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c980b322-2706-49ce-9257-188222049479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c980b322-2706-49ce-9257-188222049479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:83:93:11:50:b2:fe:c6:1b:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c980b322-2706-49ce-9257-188222049479
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=836dd0e2-21bb-4dc4-8830-19e0c417ad00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:20:21:76:2a:cf:5a:a6:d4:f6:a8:d7:cf:
                    45:0a:26:19:ff:c5:76:f5:a8:b3:f7:b9:60:b8:0c:
                    ff:aa:c4:16:3d:96:07:f9:c0:ff:2d:7f:94:7a:1a:
                    e1:10:a3:da:50:99:43:f0:aa:05:f4:f7:ff:7f:01:
                    5b:13:5c:c1:ad:7e:22:43:6c:ad:cb:12:69:e8:67:
                    a5:06:43:ff:7e:5e:bb:0f:95:70:e8:90:51:56:23:
                    89:a8:3e:7c:b2:76:34:10:58:2f:17:0f:ca:62:7b:
                    de:cb:18:b4:2b:61:51:c1:59:ab:1a:f7:41:07:4c:
                    5a:28:2c:2d:fb:fc:29:65:91:f6:f5:ab:6a:ee:4d:
                    1b:aa:a9:cf:ed:ed:97:5d:5c:b8:95:dc:ca:b5:63:
                    e9:8c:87:95:3d:1a:15:a0:d4:ad:36:9e:8d:ea:0e:
                    af:8c:ca:ef:ef:f0:56:b0:1f:99:01:de:fc:5f:c5:
                    89:3d:04:53:c5:ef:b8:fe:ea:0c:60:b3:47:ac:39:
                    34:72:15:da:84:85:f5:34:0b:69:93:b8:a3:61:16:
                    e4:13:91:37:49:64:fa:75:a6:5e:00:cc:54:1a:f6:
                    67:65:fa:c9:bb:99:89:70:cc:64:f2:d5:75:c2:12:
                    4f:86:8d:3e:52:37:40:30:1c:19:1f:00:8d:ef:52:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A3:AE:59:96:7F:87:04:E9:01:6F:77:B0:1F:32:3E:2A:4C:A6:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c238bb06-a682-38fe-8875-9fa37b22aa89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c980b322-2706-49ce-9257-188222049479.crl

            X509v3 Authority Key Identifier:
                keyid:94:77:C8:23:0A:FB:65:21:42:D3:EA:6B:C9:FD:80:E9:C3:52:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:5f:7d:34:f8:4a:b0:9f:77:9a:cd:c3:5d:3f:1d:b7:65:
         d4:aa:55:89:c7:ec:7c:86:a8:86:ec:cb:3f:f6:84:19:7f:7c:
         d1:63:47:28:18:49:d4:91:b4:b5:09:3b:78:65:42:a2:5c:9b:
         1f:90:6d:a9:53:2c:57:67:0e:36:24:02:b9:7d:df:f7:e2:b6:
         42:f1:25:18:e0:c3:33:1a:2a:d4:23:a3:04:f2:27:9c:4c:a5:
         e2:a8:df:1b:0f:f6:9e:73:af:be:e6:d5:5d:9a:97:69:e2:97:
         39:38:23:b5:27:12:dd:66:63:a1:ef:24:11:ca:58:17:c6:93:
         3f:20:dd:fd:41:a5:58:58:c6:c1:d1:f6:67:57:ce:bd:77:b2:
         1a:e6:e3:f7:d6:4c:96:32:ad:5a:a3:2b:2e:6f:f0:19:70:10:
         b0:0a:17:bb:bd:81:b6:0f:03:fa:85:42:5c:9b:5a:5e:ad:6e:
         be:cd:f3:3b:88:5d:a3:b0:53:3b:c2:0d:93:21:09:57:bb:60:
         51:88:30:d7:62:6c:e0:b7:dd:f0:72:e6:5e:ab:2e:b4:9d:58:
         48:94:a3:7d:be:00:07:81:d9:1e:4c:f0:dd:ad:10:0e:e5:8a:
         1b:3b:49:47:ef:44:67:75:a3:60:18:ea:43:f6:87:98:e5:d3:
         4e:d9:60:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyIOTEVCy/sYbJuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk4MGIzMjItMjcwNi00OWNlLTkyNTctMTg4MjIyMDQ5
NDc5MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk
ODM2ZGQwZTItMjFiYi00ZGM0LTg4MzAtMTllMGM0MTdhZDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8UgIXYqz1qm1Pao189FCiYZ/8V29aiz97lg
uAz/qsQWPZYH+cD/LX+UehrhEKPaUJlD8KoF9Pf/fwFbE1zBrX4iQ2ytyxJp6Gel
BkP/fl67D5Vw6JBRViOJqD58snY0EFgvFw/KYnveyxi0K2FRwVmrGvdBB0xaKCwt
+/wpZZH29atq7k0bqqnP7e2XXVy4ldzKtWPpjIeVPRoVoNStNp6N6g6vjMrv7/BW
sB+ZAd78X8WJPQRTxe+4/uoMYLNHrDk0chXahIX1NAtpk7ijYRbkE5E3SWT6daZe
AMxUGvZnZfrJu5mJcMxk8tV1whJPho0+UjdAMBwZHwCN71JHgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmjrlmWf4cE6QFvd7AfMj4qTKZLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jOTgw
YjMyMi0yNzA2LTQ5Y2UtOTI1Ny0xODgyMjIwNDk0NzkvYzIzOGJiMDYtYTY4Mi0z
OGZlLTg4NzUtOWZhMzdiMjJhYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzk4MGIzMjItMjcwNi00OWNlLTky
NTctMTg4MjIyMDQ5NDc5L2M5ODBiMzIyLTI3MDYtNDljZS05MjU3LTE4ODIyMjA0
OTQ3OS5jcmwwHwYDVR0jBBgwFoAUlHfIIwr7ZSFC0+pryf2A6cNSnKcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9jOTgwYjMyMi0yNzA2LTQ5Y2UtOTI1Ny0xODgy
MjIwNDk0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7XwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCcX300+Eqwn3eazcNdPx23ZdSqVYnH7HyGqIbsyz/2hBl/fNFjRygY
SdSRtLUJO3hlQqJcmx+QbalTLFdnDjYkArl93/fitkLxJRjgwzMaKtQjowTyJ5xM
peKo3xsP9p5zr77m1V2al2nilzk4I7UnEt1mY6HvJBHKWBfGkz8g3f1BpVhYxsHR
9mdXzr13shrm4/fWTJYyrVqjKy5v8BlwELAKF7u9gbYPA/qFQlybWl6tbr7N8zuI
XaOwUzvCDZMhCVe7YFGIMNdibOC33fBy5l6rLrSdWEiUo32+AAeB2R5M8N2tEA7l
ihs7SUfvRGd1o2AY6kP2h5jl007ZYB4=
-----END CERTIFICATE-----
Generated at Sun Nov 1 06:17:54 2026 by rpki-client