Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa
File:                     a4c4c21b-f7d9-308d-86f5-145f67870890.roa (raw, json)
Hash identifier:          PXKbVZN4T9w4RnKpLRHis+hg9hJpBR4QJedG9hKgUlE=
Subject key identifier:   A1:C6:99:CA:35:DD:B7:52:79:68:A3:58:B8:90:45:28:28:27:52:5A
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584D1F4A1B0D72F2BC5A25E0AC80
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     54702
IP address blocks:        23.182.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:1b:0d:72:f2:bc:5a:25:e0:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=7295b446-69f7-41d5-8640-6401c4ca9e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:12:f9:af:8e:9d:56:73:80:ac:dd:2e:14:
                    f0:41:ce:cc:c4:ba:5d:1b:a8:37:28:f4:d7:e9:1a:
                    91:84:56:eb:83:aa:71:0d:10:1c:c7:6b:b7:48:ef:
                    20:8c:ce:d4:8a:32:97:a5:14:ca:1a:f4:6d:10:f3:
                    e4:4d:12:d0:c3:3e:1b:7d:19:a6:9a:02:25:33:da:
                    ee:f3:d3:02:20:f3:4c:f6:1a:76:b3:d5:05:17:00:
                    0e:27:74:48:73:d3:aa:52:19:23:1b:2d:5c:17:d2:
                    a2:0a:3e:39:88:d5:82:fb:7f:6f:cf:65:9c:8a:af:
                    73:ff:24:02:b8:41:3b:fd:d7:75:29:b0:a6:67:35:
                    d6:94:7b:9e:c6:02:37:e1:c8:3f:fe:d6:5e:8b:8f:
                    8f:f6:b5:9f:3f:cd:4c:cd:c9:b0:36:3c:0c:04:c2:
                    de:ed:85:05:17:b7:6c:f7:2d:1a:ab:08:e9:44:e4:
                    22:02:d6:a7:60:9a:e2:25:2e:d7:07:b3:6e:0a:fc:
                    3e:3b:f3:3f:0f:54:18:3c:08:f3:66:42:a8:d0:62:
                    7e:86:f7:4a:0e:f0:84:ac:fb:38:31:11:80:0a:4d:
                    26:82:34:47:25:81:2b:98:7a:d1:49:9e:2d:38:3e:
                    83:bb:6f:cb:a3:cd:d0:c9:9a:3f:1f:4a:84:94:1d:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:99:CA:35:DD:B7:52:79:68:A3:58:B8:90:45:28:28:27:52:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:62:41:c4:a6:35:86:8e:4e:1c:3d:4e:54:7e:29:d9:fa:
         33:89:0c:6d:f3:23:7c:d5:ec:e2:04:0a:2e:5f:30:a0:1d:f2:
         1c:cb:7e:9a:f3:49:e2:d8:cf:f3:2a:fd:b6:93:a5:28:53:40:
         25:37:e9:3a:a5:11:c1:dc:4f:b7:b4:e3:b9:e2:04:c4:33:1c:
         a1:5b:52:d0:8d:e7:a0:c1:51:36:54:f6:11:e3:af:a6:9b:52:
         af:d9:55:d4:04:ed:4b:b6:0f:18:9e:88:00:69:40:19:0d:67:
         c2:72:24:0e:29:f2:34:d4:d4:ea:c5:43:cb:a2:7b:24:62:ee:
         ae:ab:d9:de:20:c5:62:96:07:0e:33:5b:54:0b:4f:bb:2d:27:
         e0:db:e2:b5:06:5a:99:61:91:71:81:cb:1c:59:d9:5e:6f:fe:
         fa:9b:d2:b9:90:86:1c:95:8e:2a:fe:b7:95:8a:32:d4:57:59:
         f2:96:97:6a:28:f9:d7:71:53:d1:6c:e9:02:e3:1e:45:48:76:
         2f:be:16:75:7f:f7:74:92:81:dc:e0:4f:de:e2:53:d5:12:86:
         d4:97:91:0c:5f:77:fd:24:00:2a:29:ca:a0:f4:fe:5e:d4:c6:
         1d:1b:fb:5b:a0:a1:da:07:19:51:08:72:3b:9a:cd:07:f8:9f:
         62:bb:38:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShsNcvK8WiXgrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw
YzhiMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NzI5NWI0NDYtNjlmNy00MWQ1LTg2NDAtNjQwMWM0Y2E5ZTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlES+a+OnVZzgKzdLhTwQc7MxLpdG6g3KPTX
6RqRhFbrg6pxDRAcx2u3SO8gjM7UijKXpRTKGvRtEPPkTRLQwz4bfRmmmgIlM9ru
89MCIPNM9hp2s9UFFwAOJ3RIc9OqUhkjGy1cF9KiCj45iNWC+39vz2Wciq9z/yQC
uEE7/dd1KbCmZzXWlHuexgI34cg//tZei4+P9rWfP81MzcmwNjwMBMLe7YUFF7ds
9y0aqwjpROQiAtanYJriJS7XB7NuCvw+O/M/D1QYPAjzZkKo0GJ+hvdKDvCErPs4
MRGACk0mgjRHJYErmHrRSZ4tOD6Du2/Lo83QyZo/H0qElB0rywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHGmco13bdSeWijWLiQRSgoJ1JaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz
ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvYTRjNGMyMWItZjdkOS0z
MDhkLTg2ZjUtMTQ1ZjY3ODcwODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk
NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi
MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0
NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADP8YkHEpjWGjk4cPU5UfinZ+jOJDG3zI3zV7OIECi5fMKAd8hzLfprz
SeLYz/Mq/baTpShTQCU36TqlEcHcT7e047niBMQzHKFbUtCN56DBUTZU9hHjr6ab
Uq/ZVdQE7Uu2DxieiABpQBkNZ8JyJA4p8jTU1OrFQ8uieyRi7q6r2d4gxWKWBw4z
W1QLT7stJ+Db4rUGWplhkXGByxxZ2V5v/vqb0rmQhhyVjir+t5WKMtRXWfKWl2oo
+ddxU9Fs6QLjHkVIdi++FnV/93SSgdzgT97iU9UShtSXkQxfd/0kACopyqD0/l7U
xh0b+1ugodoHGVEIcjuazQf4n2K7OB8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:29 2026 by rpki-client