Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/5fc6c77e-6a93-38fa-ac44-8aa6bda20c6d.roa
File:                     5fc6c77e-6a93-38fa-ac44-8aa6bda20c6d.roa (raw, json)
Hash identifier:          sp6ZuVhSMO5dlpsqEi+UTQSw9kcU0fdyiOLbgwt35R4=
Subject key identifier:   AB:44:80:05:CB:24:48:5C:6D:BF:FD:AB:61:A9:F3:F2:F0:39:D8:72
Certificate issuer:       /CN=3d248cf6-52d0-4253-94f4-31abcc5d194b
Certificate serial:       010D0C9F4328584D385EAFE96D313AB83B952200
Authority key identifier: 60:EB:5B:15:2B:62:BA:18:BC:16:C3:81:94:71:92:8C:5F:59:77:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/5fc6c77e-6a93-38fa-ac44-8aa6bda20c6d.roa
Signing time:             Thu 19 Mar 2026 12:37:38 +0000
ROA not before:           Thu 19 Mar 2026 12:37:38 +0000
ROA not after:            Wed 17 Jun 2026 12:37:38 +0000
asID:                     40268
IP address blocks:        23.171.232.0/24 maxlen: 24
                          2602:f97d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/3d248cf6-52d0-4253-94f4-31abcc5d194b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/3d248cf6-52d0-4253-94f4-31abcc5d194b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:5e:af:e9:6d:31:3a:b8:3b:95:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d248cf6-52d0-4253-94f4-31abcc5d194b
        Validity
            Not Before: Mar 19 12:37:38 2026 GMT
            Not After : Jun 17 12:37:38 2026 GMT
        Subject: CN=d94183b1-d609-419f-b747-303ab2929f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:9d:f3:0b:60:a8:66:ce:04:c6:96:38:8b:
                    88:b2:51:61:70:1f:cb:19:e6:08:90:71:6c:10:86:
                    84:f4:4e:9d:5c:6c:3c:b5:b2:1a:ce:74:99:44:4a:
                    b9:f0:3b:f8:6b:5a:b5:fe:3d:a5:cb:39:e4:45:16:
                    95:0d:5c:ed:b3:78:8a:02:03:6b:ec:e2:c8:e6:b0:
                    d7:eb:1a:fc:94:38:2d:36:f9:fa:7f:07:47:e5:65:
                    50:3a:ef:50:ae:de:3d:be:c8:55:86:0c:fb:dd:be:
                    c5:a2:31:d8:89:c9:43:00:e9:2a:0a:66:d2:16:68:
                    08:a3:10:d0:d9:ff:87:f4:19:f4:df:46:b6:d4:11:
                    28:89:8a:4a:1e:d2:78:bc:53:3f:9f:f0:ae:5b:30:
                    15:d4:1a:3c:c7:10:bd:ee:6c:dc:88:ba:e2:49:71:
                    6e:35:87:9f:5f:f4:e9:ea:5c:b4:62:b2:a0:2d:bb:
                    1c:7e:2d:5b:47:b3:0e:7a:82:3e:72:0d:7c:88:2a:
                    af:b1:ee:12:27:25:59:6e:89:86:67:58:2f:8d:c7:
                    78:eb:a8:23:13:58:19:08:df:69:65:9a:58:33:bb:
                    b8:42:ec:2a:c5:60:08:cb:7b:92:96:93:a4:82:61:
                    d3:81:eb:42:0f:aa:18:13:cd:db:a0:24:cb:d4:2b:
                    e8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:80:05:CB:24:48:5C:6D:BF:FD:AB:61:A9:F3:F2:F0:39:D8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/5fc6c77e-6a93-38fa-ac44-8aa6bda20c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/3d248cf6-52d0-4253-94f4-31abcc5d194b.crl

            X509v3 Authority Key Identifier:
                keyid:60:EB:5B:15:2B:62:BA:18:BC:16:C3:81:94:71:92:8C:5F:59:77:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.232.0/24
                IPv6:
                  2602:f97d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:39:36:17:06:4d:c9:d8:21:e8:f8:4b:38:e3:91:af:85:78:
         b1:a8:fd:a1:65:5d:e4:63:1a:08:04:8d:b4:33:9f:fa:27:c9:
         85:2c:b8:e6:64:73:e8:92:da:68:2a:ef:c8:e8:2c:46:44:0c:
         0b:64:86:3c:38:ff:2b:cc:ec:12:94:8d:6d:f9:06:11:bd:c5:
         75:18:e1:cc:38:62:d6:05:5c:40:4c:84:63:bb:6a:d2:4b:99:
         28:41:fe:a6:f8:2d:cf:e7:9b:99:39:2a:5c:28:6a:f1:60:bb:
         a9:97:37:d6:59:09:85:80:74:09:b5:be:33:06:9c:a4:b7:b5:
         83:b3:bf:19:0b:b9:15:83:6e:4f:c8:77:2e:82:18:f2:c5:ea:
         3f:2d:3b:a6:e2:34:e7:92:ca:f1:4e:50:c9:a8:04:e3:41:57:
         16:10:67:f9:70:6a:4e:4a:0a:3f:8f:45:71:4a:a1:ba:ff:47:
         08:d4:93:6b:0a:d7:00:5d:89:03:bc:58:2e:85:d6:ee:ea:92:
         77:e7:d2:0e:26:66:34:a5:a1:06:35:e1:24:4f:e9:3b:6e:ca:
         57:06:98:ab:d0:e5:e8:0d:21:a3:87:a5:97:e0:16:31:24:9f:
         ca:bc:b2:a1:6d:f2:6d:69:c9:29:bf:ea:e9:7e:d1:ad:f9:a1:
         24:d1:28:23
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE04Xq/pbTE6uDuVIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyNDhjZjYtNTJkMC00MjUzLTk0ZjQtMzFhYmNjNWQx
OTRiMB4XDTI2MDMxOTEyMzczOFoXDTI2MDYxNzEyMzczOFowLzEtMCsGA1UEAxMk
ZDk0MTgzYjEtZDYwOS00MTlmLWI3NDctMzAzYWIyOTI5Zjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD2d8wtgqGbOBMaWOIuIslFhcB/LGeYIkHFs
EIaE9E6dXGw8tbIaznSZREq58Dv4a1q1/j2lyznkRRaVDVzts3iKAgNr7OLI5rDX
6xr8lDgtNvn6fwdH5WVQOu9Qrt49vshVhgz73b7FojHYiclDAOkqCmbSFmgIoxDQ
2f+H9Bn030a21BEoiYpKHtJ4vFM/n/CuWzAV1Bo8xxC97mzciLriSXFuNYefX/Tp
6ly0YrKgLbscfi1bR7MOeoI+cg18iCqvse4SJyVZbomGZ1gvjcd466gjE1gZCN9p
ZZpYM7u4QuwqxWAIy3uSlpOkgmHTgetCD6oYE83boCTL1CvonwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKtEgAXLJEhcbb/9q2Gp8/LwOdhyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZDI0
OGNmNi01MmQwLTQyNTMtOTRmNC0zMWFiY2M1ZDE5NGIvNWZjNmM3N2UtNmE5My0z
OGZhLWFjNDQtOGFhNmJkYTIwYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2QyNDhjZjYtNTJkMC00MjUzLTk0
ZjQtMzFhYmNjNWQxOTRiLzNkMjQ4Y2Y2LTUyZDAtNDI1My05NGY0LTMxYWJjYzVk
MTk0Yi5jcmwwHwYDVR0jBBgwFoAUYOtbFStiuhi8FsOBlHGSjF9Zd9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZDI0OGNmNi01MmQwLTQyNTMtOTRmNC0zMWFi
Y2M1ZDE5NGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6voMA4E
AgACMAgDBgQmAvl9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+OTYXBk3J2CHo+Es445GvhXixqP2hZV3k
YxoIBI20M5/6J8mFLLjmZHPoktpoKu/I6CxGRAwLZIY8OP8rzOwSlI1t+QYRvcV1
GOHMOGLWBVxATIRju2rSS5koQf6m+C3P55uZOSpcKGrxYLuplzfWWQmFgHQJtb4z
Bpykt7WDs78ZC7kVg25PyHcughjyxeo/LTum4jTnksrxTlDJqATjQVcWEGf5cGpO
Sgo/j0VxSqG6/0cI1JNrCtcAXYkDvFguhdbu6pJ359IOJmY0paEGNeEkT+k7bspX
Bpir0OXoDSGjh6WX4BYxJJ/KvLKhbfJtackpv+rpftGt+aEk0Sgj
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:16:09 2026 by rpki-client