Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/45f5cb58-72a8-3898-abe2-3604045d3bbd.roa
File:                     45f5cb58-72a8-3898-abe2-3604045d3bbd.roa (raw, json)
Hash identifier:          O3WrIQ7U/AxT/XdlJA4zTtiYaBcbbWbweNOCvteU9i0=
Subject key identifier:   A5:AA:4D:88:68:25:EC:6E:62:42:9B:04:0B:D0:05:BC:34:5B:9D:BF
Certificate issuer:       /CN=8ad994c2-ccdf-4c40-b066-c7595e9a492c
Certificate serial:       010D0C9F4328584DB1DAD5FF160AB45DAC2585C0
Authority key identifier: 8C:38:B7:D8:DF:45:86:B4:17:E6:21:A5:DC:07:6D:D8:57:C6:7C:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/45f5cb58-72a8-3898-abe2-3604045d3bbd.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     214483
IP address blocks:        23.185.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d5:ff:16:0a:b4:5d:ac:25:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad994c2-ccdf-4c40-b066-c7595e9a492c
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=87a338b7-f105-4013-912d-f8510156902c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:b9:17:25:54:e5:39:0d:c7:c5:16:42:3b:
                    b3:9b:57:f0:7a:6e:f9:67:5e:45:ce:25:b4:3c:13:
                    1f:d5:14:82:ed:1f:7d:46:fd:54:a9:ef:55:a2:65:
                    72:68:5e:c3:6b:54:8b:60:90:2f:61:9e:a6:1b:18:
                    7a:47:0c:65:b4:dd:cf:ac:3f:65:9e:d4:57:43:50:
                    d9:00:a9:6c:7b:de:de:f2:97:7a:bf:5c:cd:eb:54:
                    2e:94:0f:3c:8e:43:b3:b7:b5:49:dc:6a:95:49:45:
                    ea:3f:43:41:65:c3:1e:d0:71:4b:47:bb:3d:09:5b:
                    ae:73:18:1c:94:0f:01:44:e0:a1:29:89:d5:36:5f:
                    e7:0c:2e:37:8f:83:d7:e8:90:26:85:62:13:14:46:
                    89:11:e2:df:21:bb:a2:7c:b4:ca:56:ca:40:d7:82:
                    c7:d8:c8:50:1c:47:13:75:62:36:3f:e6:95:06:dc:
                    3e:ae:12:64:cd:75:07:69:9c:a2:92:bf:b2:50:79:
                    10:33:18:1d:9f:bd:1c:eb:be:33:00:9d:2e:62:69:
                    b1:13:7a:3e:8b:10:19:a4:b5:94:56:a8:ab:63:a9:
                    4e:25:de:8d:eb:1b:00:8e:d8:54:22:a5:da:96:9a:
                    aa:52:66:2a:57:ca:f4:35:6e:92:84:f5:ea:9d:f6:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AA:4D:88:68:25:EC:6E:62:42:9B:04:0B:D0:05:BC:34:5B:9D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/45f5cb58-72a8-3898-abe2-3604045d3bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl

            X509v3 Authority Key Identifier:
                keyid:8C:38:B7:D8:DF:45:86:B4:17:E6:21:A5:DC:07:6D:D8:57:C6:7C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:16:95:01:a5:db:54:a7:60:b1:dd:4b:1d:d3:a8:b5:19:a7:
         27:7b:23:03:35:ac:76:27:c9:f0:80:df:15:60:40:71:ff:93:
         c4:d1:4b:27:90:35:58:d1:38:7b:46:b1:2d:7b:79:80:4f:ec:
         b0:e8:f5:03:35:f7:30:e5:9e:4b:a6:dd:5e:ba:03:36:fd:bf:
         17:d6:5c:c2:c0:b9:55:d6:2f:c3:ec:12:f1:9a:5b:70:e2:ac:
         37:18:28:0c:b0:8b:53:d4:2d:f6:4a:63:09:95:79:4b:fb:1b:
         d7:2f:b1:ef:c9:45:be:0b:26:37:fe:3e:29:cb:97:c6:97:85:
         3b:72:f6:84:a0:c6:af:3b:f6:92:d8:57:1a:36:b0:cb:68:ae:
         61:b6:bb:63:fc:d2:5e:94:c2:f6:bb:08:4c:e5:0b:1d:f1:a3:
         60:e3:9e:c6:90:fd:38:ac:50:6a:1f:48:cb:96:f8:87:76:17:
         af:d2:91:08:3c:e5:06:93:e8:9f:50:b3:61:63:0c:cf:2b:35:
         b3:09:88:40:4c:0b:3e:c8:35:33:5c:6c:fd:e2:6b:98:03:90:
         8f:1e:d5:85:a6:f5:7d:91:b9:20:7c:2c:cf:38:cf:b0:c7:59:
         f2:b9:63:47:61:cb:f0:60:81:b5:80:44:86:d8:96:77:8c:e6:
         2a:db:69:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2tX/Fgq0XawlhcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkOTk0YzItY2NkZi00YzQwLWIwNjYtYzc1OTVlOWE0
OTJjMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk
ODdhMzM4YjctZjEwNS00MDEzLTkxMmQtZjg1MTAxNTY5MDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8y5FyVU5TkNx8UWQjuzm1fwem75Z15FziW0
PBMf1RSC7R99Rv1Uqe9VomVyaF7Da1SLYJAvYZ6mGxh6RwxltN3PrD9lntRXQ1DZ
AKlse97e8pd6v1zN61QulA88jkOzt7VJ3GqVSUXqP0NBZcMe0HFLR7s9CVuucxgc
lA8BROChKYnVNl/nDC43j4PX6JAmhWITFEaJEeLfIbuifLTKVspA14LH2MhQHEcT
dWI2P+aVBtw+rhJkzXUHaZyikr+yUHkQMxgdn70c674zAJ0uYmmxE3o+ixAZpLWU
VqirY6lOJd6N6xsAjthUIqXalpqqUmYqV8r0NW6ShPXqnfbhvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWqTYhoJexuYkKbBAvQBbw0W52/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWQ5
OTRjMi1jY2RmLTRjNDAtYjA2Ni1jNzU5NWU5YTQ5MmMvNDVmNWNiNTgtNzJhOC0z
ODk4LWFiZTItMzYwNDA0NWQzYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFkOTk0YzItY2NkZi00YzQwLWIw
NjYtYzc1OTVlOWE0OTJjLzhhZDk5NGMyLWNjZGYtNGM0MC1iMDY2LWM3NTk1ZTlh
NDkyYy5jcmwwHwYDVR0jBBgwFoAUjDi32N9FhrQX5iGl3Adt2FfGfC0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84YWQ5OTRjMi1jY2RmLTRjNDAtYjA2Ni1jNzU5
NWU5YTQ5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7kQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcWlQGl21SnYLHdSx3TqLUZpyd7IwM1rHYnyfCA3xVgQHH/k8TRSyeQ
NVjROHtGsS17eYBP7LDo9QM19zDlnkum3V66Azb9vxfWXMLAuVXWL8PsEvGaW3Di
rDcYKAywi1PULfZKYwmVeUv7G9cvse/JRb4LJjf+PinLl8aXhTty9oSgxq879pLY
Vxo2sMtormG2u2P80l6Uwva7CEzlCx3xo2DjnsaQ/TisUGofSMuW+Id2F6/SkQg8
5QaT6J9Qs2FjDM8rNbMJiEBMCz7INTNcbP3ia5gDkI8e1YWm9X2RuSB8LM84z7DH
WfK5Y0dhy/BggbWARIbYlneM5irbaao=
-----END CERTIFICATE-----
Generated at Wed May 13 10:13:13 2026 by rpki-client