Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
File:                     dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa (raw, json)
Hash identifier:          VzxSZ5d22KQIc2TpGj0V7833o90He6+bfMgKG0kAix0=
Subject key identifier:   B2:B5:27:6E:F6:85:CB:08:85:36:A6:17:4F:FB:BE:17:86:78:7E:E5
Certificate issuer:       /CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Certificate serial:       010D0C9F4328584E6F3A37BBCFBBBA8B8E6EE200
Authority key identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     53654
IP address blocks:        23.171.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:37:bb:cf:bb:ba:8b:8e:6e:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8de5f184-aae0-49ca-8cc0-61a6f55791cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:74:a6:a2:c5:7d:81:ee:1b:25:50:24:e0:
                    22:41:dc:da:4f:19:bc:4a:4a:f9:b9:25:35:c9:71:
                    a3:10:83:a2:af:04:f0:e8:a6:b8:2d:4e:33:f8:ba:
                    b0:1a:75:41:f0:1f:71:fa:ec:ab:f6:15:fe:8b:85:
                    e5:fd:f1:5c:a0:8d:24:32:f7:42:d6:93:c2:6c:2e:
                    82:0e:f3:0c:3b:a7:bc:e0:a4:64:a4:93:9f:2e:82:
                    2d:3b:c9:1a:8e:44:77:43:15:0e:01:01:21:55:78:
                    da:77:df:1f:4d:92:6e:0a:33:e1:b8:75:22:dc:e1:
                    37:06:f9:6f:4e:60:8a:24:f6:37:ee:fb:f6:cd:6a:
                    d8:dd:2d:5a:32:41:64:63:a5:9a:4b:59:3f:4e:03:
                    fa:53:fc:34:c7:6e:3b:e5:46:f2:fd:a0:6e:9e:a6:
                    13:e9:31:73:3e:8d:f8:a5:f7:b6:4b:d1:4f:4a:a6:
                    77:39:d0:a6:5e:7c:64:e8:47:ac:ec:80:34:06:a3:
                    fa:bc:fa:aa:6e:e7:b2:e0:97:e8:57:2a:97:b0:60:
                    f1:5e:cb:74:f6:43:56:cb:68:3d:a9:c9:81:8c:17:
                    96:de:d9:dd:c1:1b:75:89:36:12:4f:97:4a:b8:71:
                    6b:bf:84:f7:14:12:bb:d9:2c:74:c2:75:d0:7f:12:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B5:27:6E:F6:85:CB:08:85:36:A6:17:4F:FB:BE:17:86:78:7E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl

            X509v3 Authority Key Identifier:
                keyid:F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7b:75:e1:09:59:f2:f2:5f:bb:aa:80:a4:e5:3b:9a:96:b4:
         09:11:bd:10:85:21:09:1c:22:93:1b:0b:6a:c7:06:b5:1a:8b:
         61:f5:aa:a0:71:96:8e:a6:60:a1:4a:5d:ee:0a:d1:2c:4e:da:
         66:5c:4d:12:a0:7e:52:9b:79:f9:66:c0:d7:2c:91:0c:b5:5e:
         e2:0c:27:cc:dd:84:c1:50:a6:5d:58:b8:37:1b:2f:4d:fb:b4:
         fe:29:6d:fd:b7:22:94:62:7c:ed:9b:46:6f:fa:ea:3e:6f:30:
         5e:c6:53:0d:24:e6:55:60:1a:c0:db:3e:ea:ea:46:f8:b6:ae:
         c8:2e:a4:38:e3:75:15:8c:e9:e1:26:88:5f:d7:e7:2f:ae:47:
         a0:1d:81:44:61:9a:6a:ae:89:a4:cd:67:09:1b:cc:e9:fc:49:
         4f:0f:f6:39:a3:e4:21:de:d7:c2:07:e1:25:37:40:c4:db:65:
         d5:2a:e2:53:55:30:77:52:cf:2c:12:44:e8:76:27:83:d7:c3:
         1a:fd:ee:f4:c4:db:2b:28:01:fe:90:6b:7a:a8:82:7c:98:77:
         db:c2:93:fe:10:7f:97:6e:32:f9:71:ed:47:fa:5e:18:2f:76:
         7a:c2:91:3d:23:02:b0:8e:18:91:e6:70:7c:a1:09:b8:9c:54:
         69:25:38:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOje7z7u6i45u4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRmNmJjYWYtYzA2OC00NzM3LWJjZTQtMTVhNDg5ZGM1
NGY4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
OGRlNWYxODQtYWFlMC00OWNhLThjYzAtNjFhNmY1NTc5MWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvp0pqLFfYHuGyVQJOAiQdzaTxm8Skr5uSU1
yXGjEIOirwTw6Ka4LU4z+LqwGnVB8B9x+uyr9hX+i4Xl/fFcoI0kMvdC1pPCbC6C
DvMMO6e84KRkpJOfLoItO8kajkR3QxUOAQEhVXjad98fTZJuCjPhuHUi3OE3Bvlv
TmCKJPY37vv2zWrY3S1aMkFkY6WaS1k/TgP6U/w0x2475Uby/aBunqYT6TFzPo34
pfe2S9FPSqZ3OdCmXnxk6Ees7IA0BqP6vPqqbuey4JfoVyqXsGDxXst09kNWy2g9
qcmBjBeW3tndwRt1iTYST5dKuHFrv4T3FBK72Sx0wnXQfxIQYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLK1J272hcsIhTamF0/7vheGeH7lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNGY2
YmNhZi1jMDY4LTQ3MzctYmNlNC0xNWE0ODlkYzU0ZjgvZGJjNzc3YmEtZThiZC0z
ODg1LThmY2QtNDc1ZThkYzUwODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTRmNmJjYWYtYzA2OC00NzM3LWJj
ZTQtMTVhNDg5ZGM1NGY4L2E0ZjZiY2FmLWMwNjgtNDczNy1iY2U0LTE1YTQ4OWRj
NTRmOC5jcmwwHwYDVR0jBBgwFoAU8QxapLejbseUcsfeIxkoi7GTs5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hNGY2YmNhZi1jMDY4LTQ3MzctYmNlNC0xNWE0
ODlkYzU0ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6sYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIN7deEJWfLyX7uqgKTlO5qWtAkRvRCFIQkcIpMbC2rHBrUai2H1qqBx
lo6mYKFKXe4K0SxO2mZcTRKgflKbeflmwNcskQy1XuIMJ8zdhMFQpl1YuDcbL037
tP4pbf23IpRifO2bRm/66j5vMF7GUw0k5lVgGsDbPurqRvi2rsgupDjjdRWM6eEm
iF/X5y+uR6AdgURhmmquiaTNZwkbzOn8SU8P9jmj5CHe18IH4SU3QMTbZdUq4lNV
MHdSzywSROh2J4PXwxr97vTE2ysoAf6Qa3qognyYd9vCk/4Qf5duMvlx7Uf6Xhgv
dnrCkT0jArCOGJHmcHyhCbicVGklOPw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:15 2026 by rpki-client