Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/b585f26b-4690-3fd7-a5e7-31fe37bc7da0.roa
File:                     b585f26b-4690-3fd7-a5e7-31fe37bc7da0.roa (raw, json)
Hash identifier:          zvEd5ET3zG0pM+pn0xxe/L3MQdbDe6ovl95N4Rb1OJs=
Subject key identifier:   B5:F7:C2:65:65:43:16:5B:09:26:B9:35:68:86:5F:D6:7B:C9:98:AF
Certificate issuer:       /CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
Certificate serial:       010D0C9F4328584D3B42AEC19B50955F3F3FA7C0
Authority key identifier: E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/b585f26b-4690-3fd7-a5e7-31fe37bc7da0.roa
Signing time:             Fri 20 Mar 2026 13:28:37 +0000
ROA not before:           Fri 20 Mar 2026 13:28:37 +0000
ROA not after:            Thu 18 Jun 2026 13:28:37 +0000
asID:                     7361
IP address blocks:        23.187.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:42:ae:c1:9b:50:95:5f:3f:3f:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
        Validity
            Not Before: Mar 20 13:28:37 2026 GMT
            Not After : Jun 18 13:28:37 2026 GMT
        Subject: CN=c8cac0b1-7252-4180-b28e-894c9b7294a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:94:d6:5b:ef:b2:fb:99:9b:48:2c:f0:33:
                    8a:7d:ac:8d:f0:66:c7:6a:9b:d9:25:a5:94:5a:b3:
                    cb:ed:40:24:2c:1c:7a:60:d8:4c:59:c9:7a:c7:3d:
                    66:32:3e:a4:c5:56:38:67:ab:12:92:08:c5:e2:87:
                    1a:20:6d:a1:79:ae:60:01:33:39:96:31:fa:9b:95:
                    a3:b5:58:20:95:8e:23:92:7c:43:89:ff:c5:bf:53:
                    98:83:43:90:64:36:98:ff:9d:82:53:81:eb:6b:94:
                    95:b6:9e:18:a7:7c:58:53:1c:51:28:73:73:85:f3:
                    57:28:08:a3:de:d0:68:b1:c5:96:e1:6c:95:10:84:
                    8d:5c:85:cc:13:91:b7:d5:81:22:10:5e:42:2b:20:
                    48:2c:79:84:df:eb:bf:3f:61:9c:b8:0d:45:29:db:
                    76:fd:11:ac:83:0b:f8:ee:92:7d:e9:a1:23:59:7a:
                    91:16:86:a9:c6:6f:78:fb:18:60:90:be:01:9b:ca:
                    96:5f:01:af:e5:57:36:41:98:6e:c8:63:41:b9:9e:
                    c0:c7:eb:47:f3:48:b0:6d:72:30:6d:9a:d1:fb:df:
                    10:2a:78:84:e4:c5:4f:96:62:af:5c:aa:09:d1:5d:
                    fa:97:c7:5a:d3:83:f0:7a:c7:cb:34:f7:5d:9b:8a:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F7:C2:65:65:43:16:5B:09:26:B9:35:68:86:5F:D6:7B:C9:98:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/b585f26b-4690-3fd7-a5e7-31fe37bc7da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c5:ca:3f:cc:5a:aa:89:94:01:43:f8:54:2d:c8:1a:d9:a3:
         e5:0a:57:2f:f0:69:ff:12:dd:65:b1:84:37:2c:2e:3d:c8:82:
         43:77:17:6a:83:3e:d0:23:a1:3b:fa:8b:cd:51:28:47:4c:39:
         92:8b:93:fa:c2:99:1c:1e:16:c4:70:a0:72:38:ce:dc:54:c8:
         e3:b2:14:89:bd:25:15:a1:2d:61:7b:80:ae:42:17:77:65:43:
         1a:e7:a0:26:8f:5e:98:7c:c9:08:fa:d9:e3:a4:86:b6:99:f9:
         ae:a7:c3:c7:b2:bd:4e:0e:0b:8a:a8:43:44:b8:19:ea:cc:85:
         19:46:76:45:cf:98:9c:76:50:f4:8a:b2:2a:9a:5a:ea:df:f5:
         9a:96:94:72:d9:82:ee:3f:5f:12:11:d4:d2:9f:62:f4:b9:fb:
         21:5e:28:76:04:9c:9f:92:6e:20:db:08:e6:7b:99:49:2e:52:
         f1:65:51:0c:12:79:fa:7e:3a:f0:9f:7c:ac:fc:0e:22:14:a7:
         0a:19:8d:11:f0:0a:01:ad:eb:32:a1:b0:61:1c:75:43:2b:95:
         53:05:3e:d5:51:28:75:63:64:5c:47:c3:3d:00:6e:de:4a:cb:
         b3:32:98:b9:ca:ae:00:f5:f3:03:ce:56:f0:3e:cb:31:68:67:
         a1:b3:05:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07Qq7Bm1CVXz8/p8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJmMjZmNWEtODZjMS00NTQyLTljYTktZTQzNzc3YmQ1
NzBjMB4XDTI2MDMyMDEzMjgzN1oXDTI2MDYxODEzMjgzN1owLzEtMCsGA1UEAxMk
YzhjYWMwYjEtNzI1Mi00MTgwLWIyOGUtODk0YzliNzI5NGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKuU1lvvsvuZm0gs8DOKfayN8GbHapvZJaWU
WrPL7UAkLBx6YNhMWcl6xz1mMj6kxVY4Z6sSkgjF4ocaIG2hea5gATM5ljH6m5Wj
tVgglY4jknxDif/Fv1OYg0OQZDaY/52CU4Hra5SVtp4Yp3xYUxxRKHNzhfNXKAij
3tBoscWW4WyVEISNXIXME5G31YEiEF5CKyBILHmE3+u/P2GcuA1FKdt2/RGsgwv4
7pJ96aEjWXqRFoapxm94+xhgkL4Bm8qWXwGv5Vc2QZhuyGNBuZ7Ax+tH80iwbXIw
bZrR+98QKniE5MVPlmKvXKoJ0V36l8da04PwesfLNPddm4pGdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLX3wmVlQxZbCSa5NWiGX9Z7yZivMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MmYy
NmY1YS04NmMxLTQ1NDItOWNhOS1lNDM3NzdiZDU3MGMvYjU4NWYyNmItNDY5MC0z
ZmQ3LWE1ZTctMzFmZTM3YmM3ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTJmMjZmNWEtODZjMS00NTQyLTlj
YTktZTQzNzc3YmQ1NzBjLzUyZjI2ZjVhLTg2YzEtNDU0Mi05Y2E5LWU0Mzc3N2Jk
NTcwYy5jcmwwHwYDVR0jBBgwFoAU5T+14Iqd0ol/zFxOd4weCLxRrzowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81MmYyNmY1YS04NmMxLTQ1NDItOWNhOS1lNDM3
NzdiZDU3MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7uIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfFyj/MWqqJlAFD+FQtyBrZo+UKVy/waf8S3WWxhDcsLj3IgkN3F2qD
PtAjoTv6i81RKEdMOZKLk/rCmRweFsRwoHI4ztxUyOOyFIm9JRWhLWF7gK5CF3dl
QxrnoCaPXph8yQj62eOkhraZ+a6nw8eyvU4OC4qoQ0S4GerMhRlGdkXPmJx2UPSK
siqaWurf9ZqWlHLZgu4/XxIR1NKfYvS5+yFeKHYEnJ+SbiDbCOZ7mUkuUvFlUQwS
efp+OvCffKz8DiIUpwoZjRHwCgGt6zKhsGEcdUMrlVMFPtVRKHVjZFxHwz0Abt5K
y7MymLnKrgD18wPOVvA+yzFoZ6GzBTo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:27 2026 by rpki-client