Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8c6d732d-9e0e-3455-8055-cb409014e1b1.roa
File:                     8c6d732d-9e0e-3455-8055-cb409014e1b1.roa (raw, json)
Hash identifier:          AO7mJ9UT8qp719P/EFqKxnF/e0oqsZWJ6oYzRlUqR/I=
Subject key identifier:   81:93:3C:BD:DB:4D:3C:BA:A2:84:88:3C:52:C5:F9:91:BF:C3:94:C6
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584E8B24F741C1D6BD1345E46FE0
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8c6d732d-9e0e-3455-8055-cb409014e1b1.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     11870
IP address blocks:        167.23.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f7:41:c1:d6:bd:13:45:e4:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=284f3146-06ec-4a6b-b06d-af32b8671530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:35:3b:9b:e4:31:18:8a:cf:77:3d:e5:b8:
                    db:d5:48:c8:a3:3d:97:3a:aa:8b:86:d5:ce:fc:c8:
                    2f:21:06:45:40:c7:77:7d:c2:35:e6:a9:a0:a8:ba:
                    58:ba:2f:1e:56:b1:5a:c3:68:ec:04:5c:5d:b2:d8:
                    07:ac:6c:aa:43:c8:1a:64:cc:e8:a6:b8:15:35:d3:
                    0d:3a:db:93:99:7a:ca:e3:d0:f0:4e:39:3e:c7:79:
                    a0:56:c6:bd:94:ad:ac:fc:6b:2d:ce:65:f9:4b:4b:
                    ae:95:60:d2:2c:40:ad:9b:2e:95:4f:3e:8c:37:52:
                    ed:d6:dd:65:1a:26:6b:2f:2a:df:33:ed:5a:40:b4:
                    3c:ba:75:41:8d:5d:33:15:11:b8:bd:05:bd:4e:99:
                    90:68:b3:f0:d1:56:82:f0:14:26:94:f0:3d:dd:b1:
                    11:35:1c:29:09:89:f1:21:fe:ed:03:1f:a3:25:ff:
                    fa:1d:56:2b:79:66:ba:e2:4b:ae:f1:06:a4:65:bb:
                    81:a4:0e:1c:96:5e:e4:3a:c9:52:08:7e:d9:f0:11:
                    ee:2e:49:23:37:5f:ea:d1:44:6e:ec:aa:ad:b0:77:
                    51:86:a4:86:78:b7:b7:5c:ba:3d:96:45:a4:42:92:
                    00:b1:cf:4b:48:ea:07:83:b8:d9:74:ae:ae:1c:6a:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:93:3C:BD:DB:4D:3C:BA:A2:84:88:3C:52:C5:F9:91:BF:C3:94:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8c6d732d-9e0e-3455-8055-cb409014e1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d7:ae:0b:43:a7:ad:2a:13:0d:fa:a6:aa:d3:05:d2:02:39:
         9e:9a:99:30:36:fd:3a:66:b6:c4:da:f5:a3:1a:f6:9f:53:41:
         6e:a4:be:a5:50:da:18:de:81:87:e0:65:35:0e:8b:c0:26:e8:
         7d:4b:a0:8d:bf:e1:ac:aa:b8:20:14:ae:66:3c:97:84:5c:fd:
         1a:d6:cc:87:e7:39:e1:5c:c8:63:c8:34:a2:15:58:ae:2a:6c:
         92:d0:b0:f8:28:4d:6c:01:e2:89:43:4d:07:03:66:97:20:2f:
         0d:fc:6f:08:97:41:a8:c0:fd:4e:10:27:81:e7:64:62:df:a7:
         f1:09:9c:49:a8:6b:58:ab:ce:b3:ef:3f:df:31:c9:d7:0c:05:
         6e:58:08:7e:dd:df:44:31:bb:1d:36:b0:bb:81:31:ba:4a:43:
         41:fb:2c:a3:b4:8d:a1:18:c9:37:63:43:2a:62:31:9d:c7:f1:
         e8:c5:e1:1b:17:25:0e:64:7f:c6:37:b6:4e:8a:44:33:70:c6:
         bc:46:2e:2b:ee:8a:10:e0:7f:17:0d:71:ee:c1:fa:a2:90:15:
         8c:14:54:92:8b:f7:02:75:e6:05:9f:d2:30:d8:a8:ec:3d:43:
         da:db:25:f2:03:4d:f0:c9:91:e0:9b:31:e6:e8:05:18:7d:a2:
         9a:91:81:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJPdBwda9E0Xkb+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm
OGM0MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
Mjg0ZjMxNDYtMDZlYy00YTZiLWIwNmQtYWYzMmI4NjcxNTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSY1O5vkMRiKz3c95bjb1UjIoz2XOqqLhtXO
/MgvIQZFQMd3fcI15qmgqLpYui8eVrFaw2jsBFxdstgHrGyqQ8gaZMzoprgVNdMN
OtuTmXrK49DwTjk+x3mgVsa9lK2s/GstzmX5S0uulWDSLECtmy6VTz6MN1Lt1t1l
GiZrLyrfM+1aQLQ8unVBjV0zFRG4vQW9TpmQaLPw0VaC8BQmlPA93bERNRwpCYnx
If7tAx+jJf/6HVYreWa64kuu8QakZbuBpA4cll7kOslSCH7Z8BHuLkkjN1/q0URu
7KqtsHdRhqSGeLe3XLo9lkWkQpIAsc9LSOoHg7jZdK6uHGrzWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGTPL3bTTy6ooSIPFLF+ZG/w5TGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1
OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvOGM2ZDczMmQtOWUwZS0z
NDU1LTgwNTUtY2I0MDkwMTRlMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5
NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz
ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw
YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxdYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvXrgtDp60qEw36pqrTBdICOZ6amTA2/TpmtsTa9aMa9p9TQW6kvqVQ
2hjegYfgZTUOi8Am6H1LoI2/4ayquCAUrmY8l4Rc/RrWzIfnOeFcyGPINKIVWK4q
bJLQsPgoTWwB4olDTQcDZpcgLw38bwiXQajA/U4QJ4HnZGLfp/EJnEmoa1irzrPv
P98xydcMBW5YCH7d30Qxux02sLuBMbpKQ0H7LKO0jaEYyTdjQypiMZ3H8ejF4RsX
JQ5kf8Y3tk6KRDNwxrxGLivuihDgfxcNce7B+qKQFYwUVJKL9wJ15gWf0jDYqOw9
Q9rbJfIDTfDJkeCbMeboBRh9opqRgWQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:16:52 2026 by rpki-client