Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
File:                     c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa (raw, json)
Hash identifier:          LPnKV5vgqPEeWKIZUAZjhJ7+hhBn8/33FrTAw4rK3us=
Subject key identifier:   FC:28:A5:09:EC:28:15:34:9E:AF:B0:2B:F0:03:DC:6B:A2:2D:8D:ED
Certificate issuer:       /CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Certificate serial:       010D0C9F4328584E8DEFAA847DAB3EC13389A720
Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     400655
IP address blocks:        23.191.184.0/24 maxlen: 24
                          2602:f7e4::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:aa:84:7d:ab:3e:c1:33:89:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=f906b7ef-ac24-46f2-87fa-6a1ecc0976aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:1a:04:02:22:1e:6e:95:a0:bb:bc:3c:4d:
                    ba:79:da:60:eb:e5:cb:66:4e:55:c9:e3:d0:27:15:
                    78:de:a4:1b:b2:51:75:3b:69:4f:cf:ed:bb:fb:3c:
                    2c:41:5b:fb:74:93:2a:33:83:02:9b:be:15:31:69:
                    72:ff:9e:e1:5c:f4:f7:ca:0f:00:ae:a0:d1:43:ac:
                    37:bf:b3:8b:96:9c:59:14:18:e3:83:1b:74:e1:09:
                    51:b3:22:30:56:8f:13:f1:38:f1:b0:af:be:32:9c:
                    1c:0c:ff:90:9d:60:73:7b:3b:a7:87:73:16:12:3d:
                    3b:a2:c3:98:a3:9f:5d:87:be:57:88:8b:c4:de:b8:
                    2a:5b:78:2d:f5:fb:88:69:04:7b:80:f6:ae:7a:0f:
                    67:0b:42:02:a2:38:98:16:5d:a7:4a:89:de:7c:a5:
                    c0:58:ad:03:7c:12:7d:97:57:46:42:0d:f7:1f:16:
                    d1:57:71:36:be:f9:6b:da:e4:64:cc:35:ca:7d:4a:
                    fb:34:39:13:ca:3e:14:54:97:0a:f1:34:36:9a:29:
                    ce:76:0c:5f:ff:92:db:05:d6:14:2a:dd:9e:e0:e6:
                    05:25:88:a0:ba:11:1f:18:d0:55:aa:ef:20:81:77:
                    78:df:22:ae:38:76:61:1a:97:1b:73:8d:11:a3:a6:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:28:A5:09:EC:28:15:34:9E:AF:B0:2B:F0:03:DC:6B:A2:2D:8D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl

            X509v3 Authority Key Identifier:
                keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.184.0/24
                IPv6:
                  2602:f7e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c4:0c:4f:41:bc:e6:02:67:c6:2d:ac:b6:49:ea:f2:61:cc:
         cb:66:27:50:0b:d4:2f:5a:a8:9f:48:bb:91:91:51:43:c6:5b:
         bd:13:7e:c3:8a:ab:3d:b1:eb:fd:25:f0:ce:a5:84:78:28:19:
         12:3a:f8:e0:3e:e6:3d:65:93:3a:17:ad:21:c1:44:28:53:a4:
         fa:4b:1a:25:27:9c:db:f8:29:95:69:d5:e3:43:66:1a:32:72:
         a9:fd:38:1c:f4:a9:7c:1e:95:ce:fe:3a:9a:9d:d0:8f:21:ac:
         ca:8e:39:83:43:18:46:9b:b8:8e:9b:ce:71:eb:24:c4:72:b4:
         31:55:5b:0e:e0:21:e3:9c:bc:ce:92:88:58:43:28:24:68:79:
         c1:a9:27:28:ae:8f:4c:b2:49:c7:48:61:7e:6f:b9:3a:eb:26:
         31:e5:0d:00:8b:3a:da:47:aa:c2:29:5a:5d:77:e1:76:67:17:
         dd:da:2d:42:56:54:5f:8c:76:99:a2:a3:1f:9a:39:8c:62:6f:
         31:ed:27:ef:8f:2d:69:6b:b7:37:79:3d:18:f0:b6:bb:9c:37:
         c5:3d:b2:5e:ab:93:c7:7a:4a:11:f5:1a:e9:3a:7d:a5:9e:4a:
         60:0c:c2:4a:3d:6f:9c:34:c6:f5:6a:cf:11:4e:c4:c5:f4:83:
         b4:e4:d1:5e
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6N76qEfas+wTOJpyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Y5NmQxOTAtNWIzNS00YjI0LWFjNzgtNTk5YWEwZTUw
NDA1MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZjkwNmI3ZWYtYWMyNC00NmYyLTg3ZmEtNmExZWNjMDk3NmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXwaBAIiHm6VoLu8PE26edpg6+XLZk5VyePQ
JxV43qQbslF1O2lPz+27+zwsQVv7dJMqM4MCm74VMWly/57hXPT3yg8ArqDRQ6w3
v7OLlpxZFBjjgxt04QlRsyIwVo8T8TjxsK++MpwcDP+QnWBzezunh3MWEj07osOY
o59dh75XiIvE3rgqW3gt9fuIaQR7gPaueg9nC0ICojiYFl2nSonefKXAWK0DfBJ9
l1dGQg33HxbRV3E2vvlr2uRkzDXKfUr7NDkTyj4UVJcK8TQ2minOdgxf/5LbBdYU
Kt2e4OYFJYiguhEfGNBVqu8ggXd43yKuOHZhGpcbc40Ro6a9gQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFPwopQnsKBU0nq+wK/AD3GuiLY3tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjk2
ZDE5MC01YjM1LTRiMjQtYWM3OC01OTlhYTBlNTA0MDUvYzc4MDJhMmItZjEwZC0z
ZjlmLWI0YjUtNWY4NWNjYjkzM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y5NmQxOTAtNWIzNS00YjI0LWFj
NzgtNTk5YWEwZTUwNDA1L2NmOTZkMTkwLTViMzUtNGIyNC1hYzc4LTU5OWFhMGU1
MDQwNS5jcmwwHwYDVR0jBBgwFoAUVpcdu5PTUs4VYZuBIrKntkJR+6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjk2ZDE5MC01YjM1LTRiMjQtYWM3OC01OTlh
YTBlNTA0MDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7+4MA4E
AgACMAgDBgAmAvfkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCexAxPQbzmAmfGLay2SeryYczLZidQC9Qv
WqifSLuRkVFDxlu9E37Diqs9sev9JfDOpYR4KBkSOvjgPuY9ZZM6F60hwUQoU6T6
SxolJ5zb+CmVadXjQ2YaMnKp/Tgc9Kl8HpXO/jqandCPIazKjjmDQxhGm7iOm85x
6yTEcrQxVVsO4CHjnLzOkohYQygkaHnBqScoro9MsknHSGF+b7k66yYx5Q0Aizra
R6rCKVpdd+F2Zxfd2i1CVlRfjHaZoqMfmjmMYm8x7Sfvjy1pa7c3eT0Y8La7nDfF
PbJeq5PHekoR9RrpOn2lnkpgDMJKPW+cNMb1as8RTsTF9IO05NFe
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:54 2026 by rpki-client