Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa
File:                     20fb2ff6-1ede-3b64-9759-cd15d077540c.roa (raw, json)
Hash identifier:          5HrGzNwyj+3HG5iddoAUhW2q5kO9OTa6a7IicQJ2PdA=
Subject key identifier:   3F:18:15:4E:E9:46:E8:11:27:3F:C4:D4:4B:33:C4:A7:78:48:51:C9
Certificate issuer:       /CN=163ef5a1-ae20-492a-9aa9-c6fd0a7947a1
Certificate serial:       010D0C9F4328584E6144BBA22D9A971980FD6580
Authority key identifier: 18:42:56:EE:8F:C3:F0:F1:AE:3C:E5:D4:E0:85:6C:D7:D4:91:4B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     401233
IP address blocks:        23.183.200.0/24 maxlen: 24
                          2607:c240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:bb:a2:2d:9a:97:19:80:fd:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163ef5a1-ae20-492a-9aa9-c6fd0a7947a1
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=3d91fe1b-c27a-409e-8dfc-9390c0e7ee40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a5:4a:55:c5:52:ce:dd:88:74:85:a1:a4:93:
                    bc:1b:e5:63:91:6d:7d:70:dc:83:b0:51:46:a6:71:
                    e7:20:80:6a:0c:fb:6b:e6:00:0d:18:a6:19:f7:1a:
                    53:d9:2f:0c:9b:13:ba:28:fe:4f:03:58:cf:c1:91:
                    90:ee:d1:84:4a:79:fd:ae:06:59:52:40:76:f1:8d:
                    8e:64:0b:fb:c9:91:6f:28:27:1b:6d:66:6e:1b:1e:
                    fb:e2:a6:db:d2:32:8d:26:67:52:0c:98:11:19:63:
                    15:b6:07:5a:67:98:fe:38:ef:58:af:7d:f9:d8:f9:
                    a5:20:ed:34:ee:64:6b:a5:99:5e:20:d2:d8:f0:d1:
                    b6:6f:79:c5:01:b2:86:05:e5:24:f1:08:d8:76:a5:
                    ff:9f:a8:db:c6:86:c2:94:a3:64:8b:c2:e5:66:a3:
                    47:04:5c:97:f9:4a:54:94:01:79:10:93:90:01:0c:
                    f8:68:0f:1b:1f:7d:ff:34:f1:e4:ef:c0:75:13:86:
                    95:06:aa:dd:71:0d:fc:f6:e8:00:58:e5:85:9e:c3:
                    99:9c:1b:de:7e:68:8b:97:53:f4:83:9f:2b:17:39:
                    bb:dc:13:4e:3c:5f:8c:13:bb:a5:b4:59:46:45:a7:
                    e5:c8:fd:28:56:9c:8c:7b:c7:a8:e7:d7:4c:4b:4a:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:18:15:4E:E9:46:E8:11:27:3F:C4:D4:4B:33:C4:A7:78:48:51:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.crl

            X509v3 Authority Key Identifier:
                keyid:18:42:56:EE:8F:C3:F0:F1:AE:3C:E5:D4:E0:85:6C:D7:D4:91:4B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.200.0/24
                IPv6:
                  2607:c240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:32:47:da:67:88:11:c2:70:b8:ef:94:7b:b9:ee:5e:b9:f6:
         d0:dc:78:d5:59:8d:a7:90:fd:3f:88:b9:10:c6:41:5a:f3:42:
         6e:93:c8:5f:ee:03:23:ed:df:7e:d5:c8:4c:c7:7d:1c:26:fe:
         cd:70:7b:dc:b5:e4:d2:67:84:d0:8b:72:94:02:38:9b:d7:c4:
         f9:79:e2:f3:20:3b:7e:ab:19:ee:b4:05:c1:03:5d:7a:99:30:
         b5:1f:38:39:80:ef:12:82:57:9a:8e:27:a3:70:cf:57:e2:60:
         ec:df:c7:9e:77:39:0a:81:14:f5:79:3c:de:70:f0:60:ee:fa:
         a3:1f:41:a1:8e:18:ab:d3:6f:d5:9b:3a:d3:0f:ad:05:c5:53:
         98:e3:fc:d5:a4:fa:4e:b3:0b:b9:16:b3:cb:19:0d:5e:d6:12:
         1c:de:00:b6:70:71:c0:89:a0:69:cd:22:b2:4d:76:6e:27:31:
         12:c5:71:68:34:c2:70:50:de:c3:7d:87:d3:07:bf:93:80:17:
         b3:0f:f0:86:db:f8:a2:8b:af:3f:2b:c2:d6:ee:c2:04:08:72:
         e2:99:7e:ac:34:2f:f6:2c:ff:86:86:1f:ba:05:29:3f:cc:a2:
         49:17:97:d1:5d:7c:58:d1:e9:8a:06:9c:66:f6:96:b4:2d:9a:
         c7:44:e9:92
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE5hRLuiLZqXGYD9ZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYzZWY1YTEtYWUyMC00OTJhLTlhYTktYzZmZDBhNzk0
N2ExMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
M2Q5MWZlMWItYzI3YS00MDllLThkZmMtOTM5MGMwZTdlZTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKVKVcVSzt2IdIWhpJO8G+VjkW19cNyDsFFG
pnHnIIBqDPtr5gANGKYZ9xpT2S8MmxO6KP5PA1jPwZGQ7tGESnn9rgZZUkB28Y2O
ZAv7yZFvKCcbbWZuGx774qbb0jKNJmdSDJgRGWMVtgdaZ5j+OO9Yr3352PmlIO00
7mRrpZleINLY8NG2b3nFAbKGBeUk8QjYdqX/n6jbxobClKNki8LlZqNHBFyX+UpU
lAF5EJOQAQz4aA8bH33/NPHk78B1E4aVBqrdcQ389ugAWOWFnsOZnBvefmiLl1P0
g58rFzm73BNOPF+ME7ultFlGRaflyP0oVpyMe8eo59dMS0oDowIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFD8YFU7pRugRJz/E1EszxKd4SFHJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNjNl
ZjVhMS1hZTIwLTQ5MmEtOWFhOS1jNmZkMGE3OTQ3YTEvMjBmYjJmZjYtMWVkZS0z
YjY0LTk3NTktY2QxNWQwNzc1NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTYzZWY1YTEtYWUyMC00OTJhLTlh
YTktYzZmZDBhNzk0N2ExLzE2M2VmNWExLWFlMjAtNDkyYS05YWE5LWM2ZmQwYTc5
NDdhMS5jcmwwHwYDVR0jBBgwFoAUGEJW7o/D8PGuPOXU4IVs19SRS+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNjNlZjVhMS1hZTIwLTQ5MmEtOWFhOS1jNmZk
MGE3OTQ3YTEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF7fIMA0E
AgACMAcDBQAmB8JAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAIsyR9pniBHCcLjvlHu57l659tDceNVZjaeQ
/T+IuRDGQVrzQm6TyF/uAyPt337VyEzHfRwm/s1we9y15NJnhNCLcpQCOJvXxPl5
4vMgO36rGe60BcEDXXqZMLUfODmA7xKCV5qOJ6Nwz1fiYOzfx553OQqBFPV5PN5w
8GDu+qMfQaGOGKvTb9WbOtMPrQXFU5jj/NWk+k6zC7kWs8sZDV7WEhzeALZwccCJ
oGnNIrJNdm4nMRLFcWg0wnBQ3sN9h9MHv5OAF7MP8Ibb+KKLrz8rwtbuwgQIcuKZ
fqw0L/Ys/4aGH7oFKT/MokkXl9FdfFjR6YoGnGb2lrQtmsdE6ZI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:35 2026 by rpki-client