Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/edc285b8-fb52-31a5-b807-2778523b0f22.roa
File:                     edc285b8-fb52-31a5-b807-2778523b0f22.roa (raw, json)
Hash identifier:          lskXiWABBC5ysqYz66bA+X1+ajaRLEm1hK53AxVYhaE=
Subject key identifier:   49:87:8C:24:8D:35:EC:59:01:69:A1:D2:AF:20:62:BB:52:0F:97:9F
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584F4972AF33292F77FEB6025140
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/edc285b8-fb52-31a5-b807-2778523b0f22.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12202
IP address blocks:        23.154.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:af:33:29:2f:77:fe:b6:02:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5931154f-4e05-4d5c-9a27-14713e5d87d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:19:b0:e8:b9:4f:97:80:02:17:9c:d3:21:
                    8b:0c:40:aa:17:8e:0d:d0:71:b7:4f:eb:b5:b9:ed:
                    ee:a6:a0:84:bd:b2:eb:00:f8:2a:28:57:39:94:84:
                    71:70:fc:63:cb:a0:13:cf:f5:79:4d:29:ff:cc:57:
                    14:16:c0:54:e0:14:1d:49:27:6f:16:9c:49:f9:24:
                    a5:1e:ce:aa:27:98:9c:ba:dd:66:04:c7:5b:14:6f:
                    c1:10:7d:60:3d:90:5e:29:1d:9a:d2:30:44:27:36:
                    0f:c9:37:2c:d3:24:36:06:90:1a:1f:ad:1a:b3:ee:
                    fe:fd:e4:5f:35:aa:92:a6:83:1a:e5:6f:72:05:01:
                    a2:8e:16:53:ce:e7:af:60:02:6a:a7:e8:53:61:d2:
                    62:e7:0c:81:5d:01:1a:cb:8c:c9:3b:ad:71:cf:93:
                    a1:26:1b:a4:eb:00:91:d3:f5:49:97:8d:2a:bb:9f:
                    76:ed:c3:39:2d:69:17:66:3b:1c:fb:47:19:72:20:
                    ca:fa:64:9b:5e:e4:66:59:11:9f:ce:d7:5c:e2:3f:
                    52:0e:d0:89:c1:56:07:96:a6:0d:b2:12:de:27:d1:
                    6f:02:16:dc:dc:97:09:8d:f4:ea:39:f0:00:3c:be:
                    b4:cb:29:82:d3:fc:29:1f:77:a1:89:5a:84:3a:3a:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:87:8C:24:8D:35:EC:59:01:69:A1:D2:AF:20:62:BB:52:0F:97:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/edc285b8-fb52-31a5-b807-2778523b0f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:88:ca:30:eb:27:65:bf:26:c5:1a:b1:c6:e3:c2:09:81:8f:
         f9:b8:e3:fd:b7:c1:12:ad:16:56:3e:8b:da:2b:9c:0d:ac:89:
         cc:74:f8:12:f4:db:ec:e5:32:fa:42:dc:17:8c:5a:58:f7:c8:
         3d:7e:16:cb:2f:ad:4d:5a:90:4e:f5:2b:bc:17:f6:8c:ce:d6:
         89:87:24:0d:98:8f:2a:60:12:03:ef:67:e6:18:9c:04:5d:11:
         49:fb:09:e4:9e:54:f7:04:dc:7d:f3:da:cf:61:ae:3b:75:47:
         78:4a:68:10:8e:19:8c:d6:4c:3d:77:33:71:78:d0:df:bf:de:
         49:5e:bb:90:7e:df:d6:5d:e1:8e:d2:29:11:b6:b5:e3:12:0d:
         fb:34:a5:41:0e:c1:d6:92:6b:42:76:85:ab:08:f0:a3:30:b6:
         8e:a3:48:ca:36:7e:25:01:7a:56:85:e7:21:34:0a:af:71:ef:
         c3:12:81:33:a6:5c:97:71:81:07:08:2b:45:ab:d1:b1:c6:ca:
         22:f0:8b:de:cb:b0:6c:50:ae:2d:29:a5:71:52:07:45:aa:3a:
         d1:1d:1a:37:d1:b7:7a:07:1e:2d:98:91:3a:24:1b:08:16:bd:
         50:91:92:c3:39:66:7f:76:a2:68:37:2e:5b:d2:94:9c:5c:ef:
         62:48:5a:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcq8zKS93/rYCUUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTkzMTE1NGYtNGUwNS00ZDVjLTlhMjctMTQ3MTNlNWQ4N2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8sZsOi5T5eAAhec0yGLDECqF44N0HG3T+u1
ue3upqCEvbLrAPgqKFc5lIRxcPxjy6ATz/V5TSn/zFcUFsBU4BQdSSdvFpxJ+SSl
Hs6qJ5icut1mBMdbFG/BEH1gPZBeKR2a0jBEJzYPyTcs0yQ2BpAaH60as+7+/eRf
NaqSpoMa5W9yBQGijhZTzuevYAJqp+hTYdJi5wyBXQEay4zJO61xz5OhJhuk6wCR
0/VJl40qu5927cM5LWkXZjsc+0cZciDK+mSbXuRmWRGfztdc4j9SDtCJwVYHlqYN
shLeJ9FvAhbc3JcJjfTqOfAAPL60yymC0/wpH3ehiVqEOjrhZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmHjCSNNexZAWmh0q8gYrtSD5efMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvZWRjMjg1YjgtZmI1Mi0z
MWE1LWI4MDctMjc3ODUyM2IwZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaIyjDrJ2W/JsUascbjwgmBj/m44/23wRKtFlY+i9ornA2sicx0+BL0
2+zlMvpC3BeMWlj3yD1+FssvrU1akE71K7wX9ozO1omHJA2YjypgEgPvZ+YYnARd
EUn7CeSeVPcE3H3z2s9hrjt1R3hKaBCOGYzWTD13M3F40N+/3kleu5B+39Zd4Y7S
KRG2teMSDfs0pUEOwdaSa0J2hasI8KMwto6jSMo2fiUBelaF5yE0Cq9x78MSgTOm
XJdxgQcIK0Wr0bHGyiLwi97LsGxQri0ppXFSB0WqOtEdGjfRt3oHHi2YkTokGwgW
vVCRksM5Zn92omg3LlvSlJxc72JIWtI=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:38:03 2026 by rpki-client