Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
File:                     cfaae5c8-a32a-3937-8b38-0909380010e1.roa (raw, json)
Hash identifier:          y9r5APinocUjyc3VFcCiVybgaGiScm75ct8D+gS5YuI=
Subject key identifier:   92:FF:DC:DF:84:43:7A:AF:3C:36:E9:FE:FE:AB:31:88:8E:3F:C5:EA
Certificate issuer:       /CN=8deb6383-7043-43c4-b39c-395a97ee0114
Certificate serial:       010D0C9F4328584DC135C270F5C9E212EBDF7C00
Authority key identifier: E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     13925
IP address blocks:        23.131.160.0/24 maxlen: 24
                          23.131.161.0/24 maxlen: 24
                          2620:138:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c2:70:f5:c9:e2:12:eb:df:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8deb6383-7043-43c4-b39c-395a97ee0114
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=434bc5be-4f98-4877-8d55-5f16bd2fa3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:6b:1b:51:a2:06:b9:1d:16:86:9b:c2:5b:
                    3a:c5:ab:41:33:3e:1c:b0:49:e5:0e:5b:21:59:4e:
                    f6:87:9b:32:17:da:49:92:f7:8e:3b:b3:e4:95:a7:
                    96:c7:7f:ba:1a:c7:77:6f:aa:21:fb:4f:4e:a1:79:
                    73:83:0e:80:95:76:f9:96:28:65:18:ee:51:43:bf:
                    3e:3f:a7:0a:f3:66:84:9a:9d:c3:18:9e:cd:77:78:
                    9b:b9:86:7b:97:fe:fa:39:44:09:c7:5b:b9:dd:68:
                    aa:d5:9b:84:6b:5c:1a:32:35:73:25:04:16:6c:b2:
                    4f:c9:d6:91:a4:31:60:c3:4e:68:e2:00:8d:00:de:
                    df:a3:49:61:54:57:b3:a8:db:8d:c7:30:3b:a5:eb:
                    63:28:88:0f:75:00:67:98:b5:bc:c9:18:00:50:f8:
                    81:c7:d9:8c:cd:0b:4d:9d:09:c0:ab:b8:b1:8c:6d:
                    6e:24:ea:fd:99:c1:4f:50:09:43:51:5a:8d:c8:7e:
                    19:49:2b:3c:71:59:e9:ca:f7:22:1f:8d:87:b1:0d:
                    25:cc:2b:a2:fe:04:37:51:ff:9e:f3:39:9d:8b:8a:
                    b5:7b:4d:0f:78:2e:87:f1:f2:3e:77:61:2f:fb:41:
                    db:d3:2e:b8:52:d4:f4:0e:d9:10:df:0d:70:50:55:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FF:DC:DF:84:43:7A:AF:3C:36:E9:FE:FE:AB:31:88:8E:3F:C5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl

            X509v3 Authority Key Identifier:
                keyid:E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.160.0/23
                IPv6:
                  2620:138:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:6b:88:e4:4f:09:5d:33:47:73:bd:2e:bf:94:23:da:91:
         bb:7f:14:e0:cb:71:a9:0c:d0:7d:27:41:f0:2d:47:42:a8:59:
         d2:d7:9d:65:39:be:59:fb:89:0a:78:c4:b4:57:59:39:9c:62:
         f0:7c:51:8f:ed:c4:57:68:89:e0:a7:5b:3c:93:61:6d:4d:cd:
         01:e4:c9:4a:4a:cc:e5:51:ad:cd:61:52:82:ba:93:0a:39:46:
         70:1a:56:ed:79:4b:03:91:6d:7a:8a:dc:0d:7f:43:48:87:0c:
         de:e6:40:69:c9:a4:b1:42:e5:d2:76:07:1c:8f:50:5f:3a:20:
         32:5d:eb:78:9c:db:10:13:12:76:08:8f:c2:96:90:4e:4c:cd:
         bc:c9:0d:dc:5a:55:97:70:39:8e:d9:b7:0c:cc:16:18:03:e5:
         05:73:e0:93:8f:e1:83:64:ca:db:d0:f1:cd:fb:d3:c7:56:55:
         dc:ea:3b:62:95:f9:f2:dd:a3:96:8c:7f:77:40:c4:4a:ac:01:
         45:52:70:9e:d9:f0:55:a4:c3:73:39:13:9b:d3:41:e6:9f:77:
         58:d9:c5:7b:9b:d5:90:b2:d3:f4:12:23:83:99:ff:03:bb:9c:
         26:6a:ab:53:56:b3:9d:c2:b7:0a:6c:b3:83:6f:96:29:f8:44:
         93:4e:ca:19
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE3BNcJw9cniEuvffAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRlYjYzODMtNzA0My00M2M0LWIzOWMtMzk1YTk3ZWUw
MTE0MB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk
NDM0YmM1YmUtNGY5OC00ODc3LThkNTUtNWYxNmJkMmZhM2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2khrG1GiBrkdFoabwls6xatBMz4csEnlDlsh
WU72h5syF9pJkveOO7PklaeWx3+6Gsd3b6oh+09OoXlzgw6AlXb5lihlGO5RQ78+
P6cK82aEmp3DGJ7Nd3ibuYZ7l/76OUQJx1u53Wiq1ZuEa1waMjVzJQQWbLJPydaR
pDFgw05o4gCNAN7fo0lhVFezqNuNxzA7petjKIgPdQBnmLW8yRgAUPiBx9mMzQtN
nQnAq7ixjG1uJOr9mcFPUAlDUVqNyH4ZSSs8cVnpyvciH42HsQ0lzCui/gQ3Uf+e
8zmdi4q1e00PeC6H8fI+d2Ev+0Hb0y64UtT0DtkQ3w1wUFWGyQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJL/3N+EQ3qvPDbp/v6rMYiOP8XqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGVi
NjM4My03MDQzLTQzYzQtYjM5Yy0zOTVhOTdlZTAxMTQvY2ZhYWU1YzgtYTMyYS0z
OTM3LThiMzgtMDkwOTM4MDAxMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRlYjYzODMtNzA0My00M2M0LWIz
OWMtMzk1YTk3ZWUwMTE0LzhkZWI2MzgzLTcwNDMtNDNjNC1iMzljLTM5NWE5N2Vl
MDExNC5jcmwwHwYDVR0jBBgwFoAU6W//RnPZ9uE0VumNjwSN0GAc6KgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZGViNjM4My03MDQzLTQzYzQtYjM5Yy0zOTVh
OTdlZTAxMTQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF4OgMA8E
AgACMAkDBwQmIAE4UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlmtriORPCV0zR3O9Lr+UI9qRu38U4Mtx
qQzQfSdB8C1HQqhZ0tedZTm+WfuJCnjEtFdZOZxi8HxRj+3EV2iJ4KdbPJNhbU3N
AeTJSkrM5VGtzWFSgrqTCjlGcBpW7XlLA5FteorcDX9DSIcM3uZAacmksULl0nYH
HI9QXzogMl3reJzbEBMSdgiPwpaQTkzNvMkN3FpVl3A5jtm3DMwWGAPlBXPgk4/h
g2TK29DxzfvTx1ZV3Oo7YpX58t2jlox/d0DESqwBRVJwntnwVaTDczkTm9NB5p93
WNnFe5vVkLLT9BIjg5n/A7ucJmqrU1azncK3Cmyzg2+WKfhEk07KGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:22:48 2026 by rpki-client