Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa
File:                     41b495a1-3627-3667-af41-d2072d5d9889.roa (raw, json)
Hash identifier:          GyZuoF5dgarM52tYsEW4DlCcBYyaXXSUzEy6ixrgtnI=
Subject key identifier:   06:26:25:16:B0:D0:63:29:EE:6C:67:84:09:B5:71:7E:CE:87:15:93
Certificate issuer:       /CN=38ec4694-a70f-4329-b713-f4da59e49973
Certificate serial:       010D0C9F4328584E66DA08FDDCF51A59E7B66480
Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        23.247.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:08:fd:dc:f5:1a:59:e7:b6:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=0ace887e-9ddb-4018-86e0-9ed4f2f93ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:c0:b5:db:5f:aa:49:e0:ca:15:de:3f:07:
                    b9:ec:2a:58:50:bc:ec:f1:f0:ba:51:7b:cb:c2:fa:
                    fc:f6:fd:a4:2c:f5:9b:f5:e1:8b:74:71:27:e9:88:
                    a6:f0:f8:27:5b:0a:d5:09:70:a1:c8:89:c7:3a:79:
                    7e:eb:d2:34:09:d2:82:b3:c5:0a:4e:d6:b9:72:e9:
                    e1:f5:83:82:7f:9e:55:e5:47:72:69:9c:a7:e7:04:
                    2d:85:23:15:1a:df:23:80:36:4a:77:4b:d8:c4:37:
                    c1:3e:7a:87:93:10:db:4c:df:81:4f:e3:ef:5e:6b:
                    da:aa:cd:73:52:e3:3e:b2:20:c2:b3:41:12:93:ed:
                    92:56:12:2a:96:af:d6:30:33:e7:fa:d1:15:6a:8c:
                    eb:9e:f1:27:bd:16:00:f8:78:8e:b1:bb:be:a8:75:
                    ae:f9:5d:20:c2:81:33:e7:b8:08:d5:7f:08:f8:64:
                    df:35:42:59:65:e1:ba:b7:33:51:7e:b9:e6:64:6f:
                    8b:3a:f9:3f:33:66:f4:0d:95:c1:0b:ef:e1:a2:a2:
                    e1:ef:98:c5:06:1d:cd:ec:93:73:12:b0:87:f4:fb:
                    32:ad:8e:1b:83:5a:70:70:04:2b:98:90:41:5c:59:
                    c0:a6:60:7f:ea:cd:8c:05:22:97:9c:7b:3f:7e:04:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:26:25:16:B0:D0:63:29:EE:6C:67:84:09:B5:71:7E:CE:87:15:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl

            X509v3 Authority Key Identifier:
                keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:94:0f:21:94:b7:c2:e9:1c:29:9c:4e:a6:50:dd:3a:11:f4:
         04:92:56:74:6c:b0:21:68:17:bb:53:bb:0a:25:e9:43:d1:93:
         25:90:bb:18:66:3b:81:9e:35:9d:f2:12:88:6d:90:a6:13:b2:
         65:72:e1:7e:7f:e3:bf:64:12:5a:68:71:ba:43:7e:c1:58:c2:
         66:ba:e5:2e:73:4b:a5:1d:aa:91:c1:87:fd:18:99:cb:8b:74:
         cf:dc:5e:46:49:cc:78:ec:38:f2:2b:3c:21:7a:9b:2f:07:ee:
         5c:34:ea:5a:1b:32:54:b8:f8:6d:7b:8e:c7:6e:70:eb:62:93:
         82:f9:ad:1c:b3:87:30:2b:52:aa:20:ca:ba:48:d9:88:0d:59:
         77:b9:c3:46:aa:3a:7f:71:b1:7d:2e:b3:e9:7f:6a:b0:d3:fd:
         e9:37:b0:e9:40:e6:13:2f:8d:5d:83:83:c1:c6:3a:69:9b:39:
         ff:1f:90:e9:07:70:cb:d1:52:ab:6a:66:1d:5d:d6:ce:13:4d:
         04:d6:98:fc:60:25:a4:81:f5:75:95:27:03:89:f5:08:3d:9f:
         e9:dc:11:f3:ad:06:89:43:ca:ba:27:bc:3e:41:46:0c:b2:10:
         e7:6a:75:4f:6c:19:de:f6:c6:69:4b:2b:d9:6d:3f:ac:23:04:
         e0:c3:5e:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gj93PUaWee2ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5
OTczMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
MGFjZTg4N2UtOWRkYi00MDE4LTg2ZTAtOWVkNGYyZjkzZGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4DAtdtfqkngyhXePwe57CpYULzs8fC6UXvL
wvr89v2kLPWb9eGLdHEn6Yim8PgnWwrVCXChyInHOnl+69I0CdKCs8UKTta5cunh
9YOCf55V5UdyaZyn5wQthSMVGt8jgDZKd0vYxDfBPnqHkxDbTN+BT+PvXmvaqs1z
UuM+siDCs0ESk+2SVhIqlq/WMDPn+tEVaozrnvEnvRYA+HiOsbu+qHWu+V0gwoEz
57gI1X8I+GTfNUJZZeG6tzNRfrnmZG+LOvk/M2b0DZXBC+/hoqLh75jFBh3N7JNz
ErCH9PsyrY4bg1pwcAQrmJBBXFnApmB/6s2MBSKXnHs/fgQJvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYmJRaw0GMp7mxnhAm1cX7OhxWTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj
NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvNDFiNDk1YTEtMzYyNy0z
NjY3LWFmNDEtZDIwNzJkNWQ5ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3
MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0
OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh
NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCUDyGUt8LpHCmcTqZQ3ToR9ASSVnRssCFoF7tTuwol6UPRkyWQuxhm
O4GeNZ3yEohtkKYTsmVy4X5/479kElpocbpDfsFYwma65S5zS6UdqpHBh/0YmcuL
dM/cXkZJzHjsOPIrPCF6my8H7lw06lobMlS4+G17jsducOtik4L5rRyzhzArUqog
yrpI2YgNWXe5w0aqOn9xsX0us+l/arDT/ek3sOlA5hMvjV2Dg8HGOmmbOf8fkOkH
cMvRUqtqZh1d1s4TTQTWmPxgJaSB9XWVJwOJ9Qg9n+ncEfOtBolDyronvD5BRgyy
EOdqdU9sGd72xmlLK9ltP6wjBODDXgU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:46 2026 by rpki-client