Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/af79edf9-fbd3-383b-a006-9f34817dede8.roa
File:                     af79edf9-fbd3-383b-a006-9f34817dede8.roa (raw, json)
Hash identifier:          tLkUClHEWDnbDVKmpuDbhx1oLYJxlB4gOMITIs+RsCE=
Subject key identifier:   1F:33:EB:A3:1C:AF:C4:2E:E5:84:9A:DA:AD:D9:CD:CD:82:DA:08:C8
Certificate issuer:       /CN=0ae79a05-4455-41de-a4a5-312c5d617c94
Certificate serial:       010D0C9F4328584DA11AC055AA63AD9769D74700
Authority key identifier: 7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/af79edf9-fbd3-383b-a006-9f34817dede8.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     400918
IP address blocks:        23.176.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c0:55:aa:63:ad:97:69:d7:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae79a05-4455-41de-a4a5-312c5d617c94
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=b005d9f0-1dfe-4fce-bb30-7d0daf04dae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b9:fd:c2:a6:c6:d9:8a:d0:ea:72:b1:73:18:
                    e9:c6:bd:7f:e8:d0:0f:5a:2e:48:9c:f6:64:15:2d:
                    da:d2:03:fe:bd:3c:f6:bb:44:8f:fb:2d:7c:74:21:
                    04:bf:41:30:b5:02:c0:6e:b3:72:0b:ca:4b:b4:66:
                    fc:07:56:e6:23:5c:85:6d:9e:e5:79:f1:b7:4b:a6:
                    51:1d:99:9e:a7:86:29:8d:ba:c5:6c:5e:f6:32:55:
                    7d:ae:cd:75:41:84:55:2b:f4:bc:8a:1d:48:52:f4:
                    22:26:d2:fa:67:61:9b:35:df:23:24:e8:ba:16:2b:
                    45:20:ea:ec:9e:92:40:3d:76:53:07:5a:a7:9f:6f:
                    df:1f:2c:eb:16:04:79:eb:49:72:15:ce:6b:a1:ee:
                    cc:6a:ca:c6:9d:fc:9a:ae:e6:1f:06:9d:42:59:41:
                    56:22:04:8c:2c:d8:06:dc:75:75:39:82:48:75:34:
                    48:c3:de:1d:86:52:04:c4:f3:dc:cb:e2:8e:08:fc:
                    4e:59:10:8f:88:1a:37:94:23:da:0a:b0:d1:78:8c:
                    44:5a:3a:35:72:ee:94:f8:92:1c:81:8f:8e:c1:a0:
                    89:d7:cd:5f:4c:92:bf:9a:09:b4:9d:75:5e:8f:d7:
                    d4:7a:7c:9a:c5:55:8b:c2:94:27:56:ee:09:f3:f3:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:33:EB:A3:1C:AF:C4:2E:E5:84:9A:DA:AD:D9:CD:CD:82:DA:08:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/af79edf9-fbd3-383b-a006-9f34817dede8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl

            X509v3 Authority Key Identifier:
                keyid:7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:e8:25:c6:7a:1e:50:31:04:2b:65:f1:9c:6c:61:3e:3d:
         f8:89:07:93:7a:57:d6:d5:9f:07:ec:84:d3:a4:f0:02:d7:52:
         de:f3:d2:9c:b2:d9:b3:f5:72:ac:b7:0e:2c:c8:16:ab:f9:f0:
         4e:30:f6:aa:05:eb:51:ee:70:af:86:d5:99:6e:1c:ca:6b:b9:
         b1:bd:83:49:a5:60:8b:86:c8:be:f0:29:ae:08:82:51:46:25:
         4e:1a:19:44:58:a2:84:0e:5a:bd:ae:71:28:e6:47:b2:cc:26:
         89:5c:48:4c:dc:40:cf:e1:f0:9b:af:03:c9:5b:7b:da:91:99:
         d9:23:fc:6a:88:50:0a:fe:f3:6c:59:3b:f0:83:14:43:4b:67:
         11:8e:0e:62:9a:01:d1:11:dd:63:d4:cd:68:94:21:0b:aa:c0:
         96:e1:ef:38:ce:36:c1:b8:d9:41:23:34:f3:66:fe:fd:ac:6c:
         90:37:73:11:9f:14:e3:d9:2e:c3:30:76:23:e5:09:e9:1a:52:
         41:64:d4:d4:00:dc:8b:92:77:85:c0:3e:24:be:a0:c9:42:8a:
         fe:47:1e:7a:91:53:54:92:17:f2:26:85:1c:a0:54:75:dc:71:
         a9:60:b5:c7:ec:f1:c0:4b:13:c2:c3:5f:98:19:a2:91:a7:de:
         a9:b6:8f:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsBVqmOtl2nXRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFlNzlhMDUtNDQ1NS00MWRlLWE0YTUtMzEyYzVkNjE3
Yzk0MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
YjAwNWQ5ZjAtMWRmZS00ZmNlLWJiMzAtN2QwZGFmMDRkYWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbn9wqbG2YrQ6nKxcxjpxr1/6NAPWi5InPZk
FS3a0gP+vTz2u0SP+y18dCEEv0EwtQLAbrNyC8pLtGb8B1bmI1yFbZ7lefG3S6ZR
HZmep4YpjbrFbF72MlV9rs11QYRVK/S8ih1IUvQiJtL6Z2GbNd8jJOi6FitFIOrs
npJAPXZTB1qnn2/fHyzrFgR560lyFc5roe7MasrGnfyaruYfBp1CWUFWIgSMLNgG
3HV1OYJIdTRIw94dhlIExPPcy+KOCPxOWRCPiBo3lCPaCrDReIxEWjo1cu6U+JIc
gY+OwaCJ181fTJK/mgm0nXVej9fUenyaxVWLwpQnVu4J8/MgQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8z66Mcr8Qu5YSa2q3Zzc2C2gjIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wYWU3
OWEwNS00NDU1LTQxZGUtYTRhNS0zMTJjNWQ2MTdjOTQvYWY3OWVkZjktZmJkMy0z
ODNiLWEwMDYtOWYzNDgxN2RlZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGFlNzlhMDUtNDQ1NS00MWRlLWE0
YTUtMzEyYzVkNjE3Yzk0LzBhZTc5YTA1LTQ0NTUtNDFkZS1hNGE1LTMxMmM1ZDYx
N2M5NC5jcmwwHwYDVR0jBBgwFoAUfQiUgLzPhctpInqFSAvcHunJ2SwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wYWU3OWEwNS00NDU1LTQxZGUtYTRhNS0zMTJj
NWQ2MTdjOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7DoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDB6CXGeh5QMQQrZfGcbGE+PfiJB5N6V9bVnwfshNOk8ALXUt7z0pyy
2bP1cqy3DizIFqv58E4w9qoF61HucK+G1ZluHMprubG9g0mlYIuGyL7wKa4IglFG
JU4aGURYooQOWr2ucSjmR7LMJolcSEzcQM/h8JuvA8lbe9qRmdkj/GqIUAr+82xZ
O/CDFENLZxGODmKaAdER3WPUzWiUIQuqwJbh7zjONsG42UEjNPNm/v2sbJA3cxGf
FOPZLsMwdiPlCekaUkFk1NQA3IuSd4XAPiS+oMlCiv5HHnqRU1SSF/ImhRygVHXc
calgtcfs8cBLE8LDX5gZopGn3qm2j2c=
-----END CERTIFICATE-----
Generated at Wed May 13 10:44:30 2026 by rpki-client