Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c28e6e5c-0d1c-33f0-9361-4e7c4b9aeec1.roa
File:                     c28e6e5c-0d1c-33f0-9361-4e7c4b9aeec1.roa (raw, json)
Hash identifier:          2U7mWikcnrgl8rjpRhXmnQ/Eox3q4KO+zGNuqE1VZvE=
Subject key identifier:   10:3C:DE:FD:66:8E:69:00:07:01:9B:40:DD:BE:32:C6:0C:4A:8B:03
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D47C5087B4BF59A732D9D1E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c28e6e5c-0d1c-33f0-9361-4e7c4b9aeec1.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     19157
IP address blocks:        23.86.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:08:7b:4b:f5:9a:73:2d:9d:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=2d772da9-bf60-4eb6-a439-8f4b38bf1fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:f4:fd:c6:d1:47:37:04:5c:c4:82:41:7d:
                    5a:95:4c:31:06:e7:ed:f6:09:5c:1a:54:f8:c2:b4:
                    fb:52:3b:9d:f2:20:84:ca:2d:0e:94:45:2e:83:1c:
                    c3:ba:c4:04:2a:19:71:5a:af:b4:cb:84:e0:e9:f1:
                    26:ba:f7:b7:80:80:bf:ad:82:3a:77:f8:97:97:5d:
                    c5:0f:60:6b:23:85:21:30:8c:57:0e:9f:86:e6:24:
                    7a:3e:e2:0d:c7:54:aa:92:89:77:1f:5a:fa:54:b8:
                    d7:a7:be:9d:37:df:0b:20:a3:2b:74:ac:da:f7:81:
                    65:c5:fd:98:2d:6a:94:68:d8:3a:89:ed:d1:e3:a0:
                    c4:d0:2d:09:f0:e3:a0:1a:68:2d:17:7b:7c:2b:e9:
                    6b:13:52:9e:c9:b4:d6:4c:a5:dc:d0:a8:04:ac:7f:
                    35:60:eb:ea:2a:a1:08:ec:94:7b:1a:72:ec:06:fc:
                    31:ef:79:72:eb:9b:d1:89:0b:f9:48:8a:d1:9d:02:
                    84:25:da:25:7f:45:59:e0:65:12:c0:17:c4:a8:14:
                    c1:8e:f3:54:a3:d9:34:9d:04:ee:3c:5d:2e:4a:0d:
                    46:49:a4:fc:05:a8:51:e1:32:a7:2d:3b:e8:13:c6:
                    7f:1b:9f:e8:0d:36:30:57:9c:de:cc:03:91:d8:80:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3C:DE:FD:66:8E:69:00:07:01:9B:40:DD:BE:32:C6:0C:4A:8B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c28e6e5c-0d1c-33f0-9361-4e7c4b9aeec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:1a:fa:bb:fa:ee:b5:a1:6f:e0:7c:3e:d1:0e:ae:65:21:
         f4:0b:47:ae:12:6a:41:b5:35:e8:53:13:86:19:48:82:ed:43:
         d2:5b:15:27:46:a6:70:5a:82:c4:40:7e:27:64:0d:4b:f2:fa:
         3e:98:26:bb:45:26:53:9b:d8:62:97:be:15:d5:8c:3b:61:1f:
         27:f3:9d:20:d2:aa:94:f8:5a:8e:b4:4b:4d:5a:b4:01:76:fb:
         15:14:de:87:6a:f2:86:bb:0a:b5:1e:37:12:50:6e:77:86:21:
         31:e0:9b:41:65:18:dc:6d:73:41:c8:63:0f:4c:31:20:27:32:
         54:98:60:bd:08:76:a5:36:d9:12:bd:13:e0:c3:4c:48:a5:ea:
         22:9a:86:1c:10:75:69:1b:9e:1f:7d:d1:83:3a:a3:97:b7:61:
         e1:9f:a9:a2:16:17:57:71:d1:29:c0:de:14:24:41:51:f9:f7:
         c9:6b:28:a5:d6:0a:fc:78:dc:cb:c8:b8:86:4b:42:da:ac:39:
         3d:43:50:b8:63:ec:8b:74:84:25:68:cc:03:7c:aa:32:70:af:
         94:f4:1d:0b:66:3e:63:26:0a:9e:e4:06:22:d4:6c:e2:a4:94:
         d5:ce:c0:2a:cb:6d:c5:47:9c:b8:70:3c:b9:c8:6d:cc:6f:f4:
         8c:8b:44:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQh7S/Wacy2dHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
MmQ3NzJkYTktYmY2MC00ZWI2LWE0MzktOGY0YjM4YmYxZmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxH0/cbRRzcEXMSCQX1alUwxBuft9glcGlT4
wrT7Ujud8iCEyi0OlEUugxzDusQEKhlxWq+0y4Tg6fEmuve3gIC/rYI6d/iXl13F
D2BrI4UhMIxXDp+G5iR6PuINx1Sqkol3H1r6VLjXp76dN98LIKMrdKza94Flxf2Y
LWqUaNg6ie3R46DE0C0J8OOgGmgtF3t8K+lrE1KeybTWTKXc0KgErH81YOvqKqEI
7JR7GnLsBvwx73ly65vRiQv5SIrRnQKEJdolf0VZ4GUSwBfEqBTBjvNUo9k0nQTu
PF0uSg1GSaT8BahR4TKnLTvoE8Z/G5/oDTYwV5zezAOR2IAV7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBA83v1mjmkABwGbQN2+MsYMSosDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzI4ZTZlNWMtMGQxYy0z
M2YwLTkzNjEtNGU3YzRiOWFlZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF1Y4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1uGvq7+u61oW/gfD7RDq5lIfQLR64SakG1NehTE4YZSILtQ9JbFSdG
pnBagsRAfidkDUvy+j6YJrtFJlOb2GKXvhXVjDthHyfznSDSqpT4Wo60S01atAF2
+xUU3odq8oa7CrUeNxJQbneGITHgm0FlGNxtc0HIYw9MMSAnMlSYYL0IdqU22RK9
E+DDTEil6iKahhwQdWkbnh990YM6o5e3YeGfqaIWF1dx0SnA3hQkQVH598lrKKXW
Cvx43MvIuIZLQtqsOT1DULhj7It0hCVozAN8qjJwr5T0HQtmPmMmCp7kBiLUbOKk
lNXOwCrLbcVHnLhwPLnIbcxv9IyLRLs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:46:15 2026 by rpki-client