Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
File:                     553b08e2-7500-3d55-b607-b218b8a593e2.roa (raw, json)
Hash identifier:          RWTFnLBwug4T4peODVamRJqfkkxS6Nnm+VLDygmQfZ8=
Subject key identifier:   F4:52:5E:7F:CC:72:F8:C2:EB:69:11:40:BB:D7:CB:2F:0A:46:73:36
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584E8C8A47B082D19FA3A45A6860
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     394285
IP address blocks:        23.88.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:47:b0:82:d1:9f:a3:a4:5a:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=0af9f658-17a1-45cc-9391-cee6c79d67c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:97:f7:ed:5c:60:97:dd:75:ba:2c:8e:fb:04:
                    7f:bc:2c:9d:fe:e8:5f:80:9d:4f:aa:8a:a6:0a:67:
                    72:9d:72:ca:59:17:63:c6:a3:a4:95:b1:c0:67:04:
                    98:5e:f8:7e:8a:71:0c:46:c5:e4:bd:a0:e1:76:ad:
                    c4:19:63:55:b3:ab:2f:47:ea:3a:20:ba:a2:23:84:
                    05:86:be:6e:35:21:e8:9c:3a:29:78:8a:26:23:df:
                    e2:0b:12:b8:18:f4:7f:96:65:53:2e:3a:94:aa:9a:
                    04:5e:a9:04:b2:b0:61:b3:5b:4e:44:47:62:23:69:
                    2f:16:bb:9e:0c:fd:90:f7:17:d8:af:28:f0:2a:e6:
                    19:8d:fb:0c:9d:f9:23:61:20:d5:2f:7f:b9:d9:87:
                    e6:b2:fe:59:cd:74:d0:ae:64:9f:78:c6:81:d2:34:
                    25:8c:f4:a8:00:63:6c:5a:6a:96:e8:f2:e7:46:c7:
                    c6:bf:30:dc:84:db:3a:bd:2f:97:2d:b4:4e:ea:48:
                    ab:fc:b1:0b:f2:a0:dc:59:c9:9c:eb:eb:51:0b:16:
                    0b:66:a6:c5:03:5e:9e:5c:3a:00:88:d8:96:65:1a:
                    b4:96:c7:36:09:7a:61:2f:92:48:08:fc:15:72:ad:
                    9b:91:1f:0b:cf:f4:df:12:3a:a9:ad:1a:71:43:c8:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:5E:7F:CC:72:F8:C2:EB:69:11:40:BB:D7:CB:2F:0A:46:73:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:98:c5:40:fc:3b:45:ba:bf:2d:d5:25:69:d2:31:37:0f:26:
         fa:e5:e7:b5:af:72:8d:02:2b:0a:6e:b8:a3:56:b5:ce:0b:c4:
         56:76:d2:e8:3c:ea:d9:f4:ca:db:91:ca:34:ae:09:1a:29:03:
         04:5b:b0:00:46:5b:ac:12:a6:88:91:c5:3d:be:1b:dc:2d:ea:
         3c:ee:9f:e1:8d:9d:45:9d:ed:92:54:4f:2f:ae:bd:b2:50:ea:
         5f:27:5a:48:50:8a:7f:cf:17:f9:aa:b3:10:99:b6:7f:70:f0:
         0a:ed:a2:1a:52:94:f5:ee:db:78:22:d0:7b:62:7d:d6:5b:df:
         8c:73:93:2c:e1:01:8d:08:f1:ae:11:f0:8f:98:31:4f:fd:ee:
         f9:7b:1f:bd:7b:78:87:14:e7:15:80:d2:61:04:fa:44:e8:46:
         d0:d8:82:06:ff:35:3d:f7:bf:1c:5c:51:af:c5:4f:56:22:0d:
         0f:b6:03:5a:a5:16:d5:97:5a:e5:13:00:a3:64:fe:5b:c5:3f:
         b4:d4:9e:cf:3f:3d:d2:70:66:c3:86:57:ef:ef:4b:dc:ef:22:
         7d:6c:21:79:46:38:cf:fa:0c:05:44:ef:32:2c:61:69:38:8e:
         fd:bf:a6:fe:31:c9:01:63:a3:e1:8a:69:2b:fa:99:1c:c0:b5:
         a0:11:fe:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MikewgtGfo6RaaGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk
MGFmOWY2NTgtMTdhMS00NWNjLTkzOTEtY2VlNmM3OWQ2N2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Zf37Vxgl911uiyO+wR/vCyd/uhfgJ1Pqoqm
CmdynXLKWRdjxqOklbHAZwSYXvh+inEMRsXkvaDhdq3EGWNVs6svR+o6ILqiI4QF
hr5uNSHonDopeIomI9/iCxK4GPR/lmVTLjqUqpoEXqkEsrBhs1tOREdiI2kvFrue
DP2Q9xfYryjwKuYZjfsMnfkjYSDVL3+52Yfmsv5ZzXTQrmSfeMaB0jQljPSoAGNs
WmqW6PLnRsfGvzDchNs6vS+XLbRO6kir/LEL8qDcWcmc6+tRCxYLZqbFA16eXDoA
iNiWZRq0lsc2CXphL5JICPwVcq2bkR8Lz/TfEjqprRpxQ8i1nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRSXn/McvjC62kRQLvXyy8KRnM2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNTUzYjA4ZTItNzUwMC0z
ZDU1LWI2MDctYjIxOGI4YTU5M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1iwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOYxUD8O0W6vy3VJWnSMTcPJvrl57Wvco0CKwpuuKNWtc4LxFZ20ug8
6tn0ytuRyjSuCRopAwRbsABGW6wSpoiRxT2+G9wt6jzun+GNnUWd7ZJUTy+uvbJQ
6l8nWkhQin/PF/mqsxCZtn9w8ArtohpSlPXu23gi0HtifdZb34xzkyzhAY0I8a4R
8I+YMU/97vl7H717eIcU5xWA0mEE+kToRtDYggb/NT33vxxcUa/FT1YiDQ+2A1ql
FtWXWuUTAKNk/lvFP7TUns8/PdJwZsOGV+/vS9zvIn1sIXlGOM/6DAVE7zIsYWk4
jv2/pv4xyQFjo+GKaSv6mRzAtaAR/iI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:17 2026 by rpki-client