Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/1711e95e-2066-3100-8a2c-668f2e327b41.roa
File:                     1711e95e-2066-3100-8a2c-668f2e327b41.roa (raw, json)
Hash identifier:          CmaqQeAVjAKwvD7k+bVlnu0LhKaBgojantTwiD+JI18=
Subject key identifier:   17:A1:8E:A1:53:3C:E6:18:EA:00:F8:DE:93:B7:B2:DB:75:BC:71:C7
Certificate issuer:       /CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
Certificate serial:       010D0C9F4328584F49751E750D54C9BF789FF1C0
Authority key identifier: 1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/1711e95e-2066-3100-8a2c-668f2e327b41.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     197767
IP address blocks:        23.158.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:1e:75:0d:54:c9:bf:78:9f:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ec43c20-75f2-4fea-be73-29eff9e3a325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:b6:a8:68:fd:8f:66:dd:e2:0f:79:fc:72:
                    8f:37:a4:d1:1a:c6:71:33:65:7d:d7:61:9d:68:0b:
                    db:46:18:3a:c2:ed:54:35:16:f0:41:26:e3:0d:60:
                    2f:8c:72:38:a5:4e:42:c2:f3:98:a4:07:d4:51:b1:
                    ce:a7:e1:fd:26:b0:fb:98:89:c3:d7:4e:3d:d8:ed:
                    fc:82:45:fb:e9:02:ae:a1:7c:45:04:77:ef:e6:69:
                    5b:b8:0f:e9:02:7d:44:db:c5:77:95:1a:a1:48:d4:
                    c9:aa:e7:b9:f6:c2:1c:83:38:50:1f:08:7c:d1:2a:
                    97:77:e3:f3:8d:4a:b2:19:1e:c1:0b:6b:64:c0:d0:
                    0d:86:1f:50:c5:e5:59:39:aa:4c:9b:ac:79:ab:fc:
                    3c:1b:38:35:31:9e:5f:fe:a9:d7:12:ac:1e:34:ee:
                    d5:6e:93:a7:10:07:94:32:f1:d3:96:e5:64:43:45:
                    d4:56:75:f7:da:e5:af:53:96:5c:e4:22:db:d5:cf:
                    53:9e:b4:7a:f2:ca:d5:05:58:59:3b:44:69:c7:a7:
                    45:ef:d0:a5:c9:f8:8f:3c:a5:f3:7e:d2:bc:81:e0:
                    fd:d9:52:40:b7:3a:45:e9:22:ba:eb:56:d6:1f:d7:
                    03:51:1b:92:26:d5:d8:7a:28:87:a7:5e:2e:2a:8f:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:8E:A1:53:3C:E6:18:EA:00:F8:DE:93:B7:B2:DB:75:BC:71:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/1711e95e-2066-3100-8a2c-668f2e327b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fc:a5:4f:78:17:b2:7e:0c:f1:dc:61:1e:9d:9c:c2:55:cf:
         f8:5e:17:54:f0:65:ea:fd:53:a2:6b:3c:5a:aa:51:57:63:4a:
         a2:6f:8f:2a:bb:ac:cf:f4:06:3f:0a:d3:fd:27:20:32:4f:70:
         3d:78:e9:4e:20:fa:5c:d0:60:21:df:b6:61:90:69:77:ac:bb:
         24:03:36:b3:60:67:66:e3:14:6d:59:6c:8c:d4:d9:90:d6:b5:
         1c:7f:1c:b1:b8:55:47:f4:20:db:4a:ad:d7:cb:c7:3a:27:a8:
         8c:82:cb:63:28:bf:d9:c5:d3:72:94:52:d5:5e:39:8b:45:57:
         a3:2b:aa:b8:29:23:13:ec:2e:73:1e:74:1d:9c:35:b4:88:76:
         a8:ef:6d:81:5d:1f:04:37:a9:54:30:bb:b2:47:7a:06:4a:93:
         69:32:60:6f:ce:20:82:9c:41:df:39:32:4b:01:36:20:09:09:
         fc:08:34:1e:ce:1a:f4:c2:84:c2:22:98:7b:64:66:33:24:4d:
         92:ed:9a:c7:ed:3d:77:13:ef:02:83:14:a7:59:c7:19:ce:8c:
         24:fe:b0:ba:63:e7:fb:bd:38:ae:d5:45:2c:32:12:cd:67:7c:
         36:3f:3a:aa:81:1f:e4:4e:2d:89:3c:ff:d2:9b:94:08:4a:14:
         f1:2b:0a:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdR51DVTJv3if8cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU1ZjgxMGQtZjJmNS00M2IxLTg4ZTItN2Y3YWE0ODZi
OGQ0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWVjNDNjMjAtNzVmMi00ZmVhLWJlNzMtMjllZmY5ZTNhMzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04C2qGj9j2bd4g95/HKPN6TRGsZxM2V912Gd
aAvbRhg6wu1UNRbwQSbjDWAvjHI4pU5CwvOYpAfUUbHOp+H9JrD7mInD10492O38
gkX76QKuoXxFBHfv5mlbuA/pAn1E28V3lRqhSNTJque59sIcgzhQHwh80SqXd+Pz
jUqyGR7BC2tkwNANhh9QxeVZOapMm6x5q/w8Gzg1MZ5f/qnXEqweNO7VbpOnEAeU
MvHTluVkQ0XUVnX32uWvU5Zc5CLb1c9TnrR68srVBVhZO0Rpx6dF79ClyfiPPKXz
ftK8geD92VJAtzpF6SK661bWH9cDURuSJtXYeiiHp14uKo+67wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBehjqFTPOYY6gD43pO3stt1vHHHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZTVm
ODEwZC1mMmY1LTQzYjEtODhlMi03ZjdhYTQ4NmI4ZDQvMTcxMWU5NWUtMjA2Ni0z
MTAwLThhMmMtNjY4ZjJlMzI3YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGU1ZjgxMGQtZjJmNS00M2IxLTg4
ZTItN2Y3YWE0ODZiOGQ0L2RlNWY4MTBkLWYyZjUtNDNiMS04OGUyLTdmN2FhNDg2
YjhkNC5jcmwwHwYDVR0jBBgwFoAUG63xxDvnF/De3pfMzA6fHfq3OlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZTVmODEwZC1mMmY1LTQzYjEtODhlMi03Zjdh
YTQ4NmI4ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC38pU94F7J+DPHcYR6dnMJVz/heF1TwZer9U6JrPFqqUVdjSqJvjyq7
rM/0Bj8K0/0nIDJPcD146U4g+lzQYCHftmGQaXesuyQDNrNgZ2bjFG1ZbIzU2ZDW
tRx/HLG4VUf0INtKrdfLxzonqIyCy2Mov9nF03KUUtVeOYtFV6MrqrgpIxPsLnMe
dB2cNbSIdqjvbYFdHwQ3qVQwu7JHegZKk2kyYG/OIIKcQd85MksBNiAJCfwINB7O
GvTChMIimHtkZjMkTZLtmsftPXcT7wKDFKdZxxnOjCT+sLpj5/u9OK7VRSwyEs1n
fDY/OqqBH+ROLYk8/9KblAhKFPErCvg=
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:45:13 2026 by rpki-client