Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
File:                     12e1d236-b7f8-37db-8d5d-f604225f8f77.roa (raw, json)
Hash identifier:          kHvzfkRkCq3RqQbwsezKdTvylBvpUKATRM6LEinepEs=
Subject key identifier:   74:4A:63:05:42:41:A7:0F:CA:D2:CE:F9:2B:DE:7D:72:E8:AE:01:C5
Certificate issuer:       /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial:       010D0C9F4328584E885A4E6432F056C4A6BDCE40
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     30006
IP address blocks:        23.191.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4e:64:32:f0:56:c4:a6:bd:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=4ecf024a-97d7-4b13-a8ad-73498f9f1320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:81:a5:f1:9d:e9:bf:8c:9a:96:55:51:e4:
                    e0:ce:5d:28:50:22:5f:4d:31:00:9a:34:b5:b1:38:
                    51:b0:dc:a1:a8:7e:ae:21:16:67:64:04:4d:f7:95:
                    ed:79:e0:b7:66:f1:f3:20:83:b2:0c:e6:83:13:93:
                    e2:b2:32:e5:80:df:1e:76:60:1b:bf:92:0b:dc:65:
                    a4:aa:21:75:c2:e6:7c:ff:a4:fb:7c:9f:13:69:bd:
                    ef:b0:91:9f:e7:c3:eb:76:ef:3c:e9:97:d9:55:95:
                    ba:42:90:02:45:b2:65:67:ca:98:91:c8:9a:f1:82:
                    0f:ec:a7:95:1b:fd:51:4c:b9:1f:f3:a9:61:26:60:
                    bb:94:69:ff:73:20:a3:f1:50:52:14:aa:d8:8e:31:
                    71:b4:5a:ce:98:45:1e:34:7a:a8:d6:65:14:d2:70:
                    ee:5c:06:a0:31:e8:9a:62:87:37:2b:d2:3f:19:ef:
                    a5:3c:11:47:af:16:dd:ab:69:3f:fa:d5:dc:7a:b0:
                    37:e2:b7:c1:b1:b3:ae:c0:93:8b:b1:ba:01:b0:a7:
                    25:36:91:41:4f:fb:ed:34:21:c1:87:de:d5:d3:b6:
                    6c:3b:1d:63:63:7f:82:3c:62:73:6a:93:bf:3f:b1:
                    b0:3d:22:a0:b5:3d:b2:0c:f6:dc:e2:1e:67:01:5b:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4A:63:05:42:41:A7:0F:CA:D2:CE:F9:2B:DE:7D:72:E8:AE:01:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl

            X509v3 Authority Key Identifier:
                keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:81:1c:de:98:d6:47:25:38:a9:c6:49:e9:29:97:ac:fa:87:
         50:bf:37:62:1a:5b:44:e4:75:ef:31:d8:6a:ab:b4:86:f5:bf:
         ad:11:4c:76:16:d2:bf:09:65:8b:dd:d7:3a:4e:26:c6:23:75:
         9b:ef:60:71:39:3c:f8:78:b5:16:65:0e:f2:19:28:c0:a6:61:
         f0:43:0b:02:d3:d2:53:3a:f1:a5:7f:51:a2:8e:ec:57:10:03:
         74:5e:d5:45:c1:ce:1a:d8:a4:16:90:ae:f3:4b:32:ed:55:08:
         9a:fb:36:91:f1:47:f2:94:1a:67:33:6c:f3:74:d8:0e:da:e3:
         af:82:c7:da:34:be:e0:09:98:9a:90:ef:73:73:81:4a:77:13:
         fe:87:4b:a9:02:04:13:2e:a3:7e:ad:47:9c:1e:9b:32:10:a3:
         f5:53:97:f4:78:b8:c0:76:4e:98:7a:61:97:88:e8:af:36:b7:
         b5:e6:98:2f:a2:6b:a5:3a:5e:db:5d:92:44:10:b8:40:81:ed:
         7c:64:23:bd:54:2a:5b:aa:1c:63:e5:1b:6c:22:49:6e:a9:33:
         10:28:10:1b:12:f2:ed:4d:2c:01:68:09:a6:65:5d:85:6c:f7:
         54:07:67:fc:98:0f:7d:22:51:4d:c0:19:b1:f6:9a:c1:6c:6c:
         00:e6:82:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk5kMvBWxKa9zkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ2MTljZDMtZjk2OS00OWFkLWFjMDktM2ZiNDAzOTJj
ZGM1MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
NGVjZjAyNGEtOTdkNy00YjEzLWE4YWQtNzM0OThmOWYxMzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWyBpfGd6b+MmpZVUeTgzl0oUCJfTTEAmjS1
sThRsNyhqH6uIRZnZARN95XteeC3ZvHzIIOyDOaDE5PisjLlgN8edmAbv5IL3GWk
qiF1wuZ8/6T7fJ8Tab3vsJGf58Prdu886ZfZVZW6QpACRbJlZ8qYkcia8YIP7KeV
G/1RTLkf86lhJmC7lGn/cyCj8VBSFKrYjjFxtFrOmEUeNHqo1mUU0nDuXAagMeia
Yoc3K9I/Ge+lPBFHrxbdq2k/+tXcerA34rfBsbOuwJOLsboBsKclNpFBT/vtNCHB
h97V07ZsOx1jY3+CPGJzapO/P7GwPSKgtT2yDPbc4h5nAVv7KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRKYwVCQacPytLO+SvefXLorgHFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYx
OWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0MDM5MmNkYzUvMTJlMWQyMzYtYjdmOC0z
N2RiLThkNWQtZjYwNDIyNWY4Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MTljZDMtZjk2OS00OWFkLWFj
MDktM2ZiNDAzOTJjZGM1LzhkNjE5Y2QzLWY5NjktNDlhZC1hYzA5LTNmYjQwMzky
Y2RjNS5jcmwwHwYDVR0jBBgwFoAUj3lBQpaZ4ZColVZ3VzDV06kJgAswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYxOWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0
MDM5MmNkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7+YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+BHN6Y1kclOKnGSekpl6z6h1C/N2IaW0Tkde8x2GqrtIb1v60RTHYW
0r8JZYvd1zpOJsYjdZvvYHE5PPh4tRZlDvIZKMCmYfBDCwLT0lM68aV/UaKO7FcQ
A3Re1UXBzhrYpBaQrvNLMu1VCJr7NpHxR/KUGmczbPN02A7a46+Cx9o0vuAJmJqQ
73NzgUp3E/6HS6kCBBMuo36tR5wemzIQo/VTl/R4uMB2Tph6YZeI6K82t7XmmC+i
a6U6XttdkkQQuECB7XxkI71UKluqHGPlG2wiSW6pMxAoEBsS8u1NLAFoCaZlXYVs
91QHZ/yYD30iUU3AGbH2msFsbADmgpc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:21 2026 by rpki-client