Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/5bf0de05-8542-3b7d-b26e-1d78aa01fbce.roa
File:                     5bf0de05-8542-3b7d-b26e-1d78aa01fbce.roa (raw, json)
Hash identifier:          BcRBxu/nSW1UieIOKF2D0vAdGVh8bS5g8h7TmppYoYE=
Subject key identifier:   B1:11:DC:DB:6B:67:E9:B5:27:EF:F9:39:64:74:41:E3:71:C9:19:A0
Certificate issuer:       /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Certificate serial:       010D0C9F4328584F8842EB34BAAE46AA920CB400
Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/5bf0de05-8542-3b7d-b26e-1d78aa01fbce.roa
Signing time:             Sat 17 Oct 2026 13:00:12 +0000
ROA not before:           Sat 17 Oct 2026 13:00:12 +0000
ROA not after:            Fri 15 Jan 2027 14:00:12 +0000
asID:                     13335
IP address blocks:        23.167.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:88:42:eb:34:ba:ae:46:aa:92:0c:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
        Validity
            Not Before: Oct 17 13:00:12 2026 GMT
            Not After : Jan 15 14:00:12 2027 GMT
        Subject: CN=abf4e298-b417-4ba7-8e02-05c96fcc6b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:ba:c2:d8:06:e9:43:3d:fe:c8:08:98:cb:
                    74:32:52:57:74:db:62:27:da:b3:3c:c2:79:75:7f:
                    15:98:18:79:7e:a6:e8:d9:f7:e1:80:8c:52:6c:ca:
                    56:ae:b3:e2:47:48:f0:57:65:81:0f:c6:74:9e:94:
                    af:9b:d2:75:27:e1:de:29:5d:e8:12:6e:60:e6:79:
                    9c:1a:42:e2:91:3d:31:f2:a9:06:f4:1f:de:a8:c4:
                    9d:cb:5e:b6:42:27:c6:34:73:05:67:08:19:6e:8c:
                    d2:4a:da:52:9a:35:2b:a9:46:12:a1:b8:d7:f0:fd:
                    f0:ef:19:4a:4e:b5:ea:81:64:37:ce:e3:cd:88:af:
                    f7:e4:cf:ba:eb:05:5b:ed:9f:96:55:b6:a0:8e:1e:
                    65:c4:47:c9:14:0a:d0:7b:c0:f5:4f:bd:d8:16:e6:
                    bc:57:2c:f1:1e:7c:7d:e0:37:a6:27:fe:cc:2c:e1:
                    db:06:b7:62:03:f3:ae:6b:5a:47:30:7f:15:8d:be:
                    08:9c:16:80:70:ba:1b:c4:c9:86:68:76:b7:c0:c6:
                    52:b7:1e:5a:82:05:b4:69:63:c1:e0:78:29:ca:eb:
                    7a:e1:8c:cf:e1:80:06:94:71:19:e4:02:a7:cd:c1:
                    91:64:9c:ee:88:24:8d:3f:13:d1:8d:ac:d2:54:df:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:11:DC:DB:6B:67:E9:B5:27:EF:F9:39:64:74:41:E3:71:C9:19:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/5bf0de05-8542-3b7d-b26e-1d78aa01fbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl

            X509v3 Authority Key Identifier:
                keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:84:15:8c:87:c7:65:0a:0e:c9:25:c3:60:e8:71:14:5f:c8:
         59:e7:30:87:11:40:9a:7b:55:59:56:da:4f:a1:3a:a2:11:cc:
         ad:27:87:dc:09:ee:52:db:47:cd:31:bb:d3:76:f1:4c:45:bd:
         19:03:d1:b0:90:3a:86:15:07:2e:41:c4:9b:d5:46:6d:4d:d6:
         db:1b:36:40:ac:e0:69:e2:73:0c:60:af:3a:7c:50:54:a4:2f:
         97:97:41:cd:2d:ac:5d:b0:ea:b4:e1:37:87:63:5d:7a:33:0c:
         29:39:73:1d:2e:16:11:68:a3:79:67:a4:e4:8a:13:c8:37:73:
         0b:9d:00:ab:bd:5a:da:db:81:fc:ad:e8:bf:82:40:21:76:cf:
         e9:02:15:c0:75:75:26:89:96:76:98:91:5a:7a:57:58:58:f0:
         4d:43:5f:51:be:48:aa:ca:0d:f7:3a:3b:1c:a4:65:fd:8d:67:
         05:81:0d:6d:2a:1e:3d:d4:ca:90:f4:b9:1e:62:e9:c6:ae:52:
         41:66:42:f6:6f:05:e1:c3:6f:0c:16:6e:4a:97:4b:6e:4d:a3:
         84:65:2b:ba:61:ce:c1:d7:32:34:31:1c:9c:d9:3e:75:d4:25:
         53:c5:2e:e3:15:af:b5:e9:59:73:1c:aa:85:20:dc:68:be:b0:
         40:a6:a5:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+IQus0uq5GqpIMtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQyMWM3NGMtYWQwYi00M2I5LTllYTMtYmRhYzRiZjZi
YzdiMB4XDTI2MTAxNzEzMDAxMloXDTI3MDExNTE0MDAxMlowLzEtMCsGA1UEAxMk
YWJmNGUyOTgtYjQxNy00YmE3LThlMDItMDVjOTZmY2M2YjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGC6wtgG6UM9/sgImMt0MlJXdNtiJ9qzPMJ5
dX8VmBh5fqbo2ffhgIxSbMpWrrPiR0jwV2WBD8Z0npSvm9J1J+HeKV3oEm5g5nmc
GkLikT0x8qkG9B/eqMSdy162QifGNHMFZwgZbozSStpSmjUrqUYSobjX8P3w7xlK
TrXqgWQ3zuPNiK/35M+66wVb7Z+WVbagjh5lxEfJFArQe8D1T73YFua8VyzxHnx9
4DemJ/7MLOHbBrdiA/Oua1pHMH8Vjb4InBaAcLobxMmGaHa3wMZStx5aggW0aWPB
4Hgpyut64YzP4YAGlHEZ5AKnzcGRZJzuiCSNPxPRjazSVN8yZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLER3NtrZ+m1J+/5OWR0QeNxyRmgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNDIx
Yzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFjNGJmNmJjN2IvNWJmMGRlMDUtODU0Mi0z
YjdkLWIyNmUtMWQ3OGFhMDFmYmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzQyMWM3NGMtYWQwYi00M2I5LTll
YTMtYmRhYzRiZjZiYzdiLzM0MjFjNzRjLWFkMGItNDNiOS05ZWEzLWJkYWM0YmY2
YmM3Yi5jcmwwHwYDVR0jBBgwFoAU8Py5nS1n03RsdNT9KVvXSB5soqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNDIxYzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFj
NGJmNmJjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAeEFYyHx2UKDsklw2DocRRfyFnnMIcRQJp7VVlW2k+hOqIRzK0nh9wJ
7lLbR80xu9N28UxFvRkD0bCQOoYVBy5BxJvVRm1N1tsbNkCs4Gnicwxgrzp8UFSk
L5eXQc0trF2w6rThN4djXXozDCk5cx0uFhFoo3lnpOSKE8g3cwudAKu9Wtrbgfyt
6L+CQCF2z+kCFcB1dSaJlnaYkVp6V1hY8E1DX1G+SKrKDfc6OxykZf2NZwWBDW0q
Hj3UypD0uR5i6cauUkFmQvZvBeHDbwwWbkqXS25No4RlK7phzsHXMjQxHJzZPnXU
JVPFLuMVr7XpWXMcqoUg3Gi+sECmpd8=
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:44:52 2026 by rpki-client