Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa
File:                     8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa (raw, json)
Hash identifier:          CgAMJ8AbfGyedRJ66HnfObgdm0AaUWRxyiaDU3wmp4g=
Subject key identifier:   1D:38:70:BB:A1:5C:74:9F:35:6E:F1:48:CC:DA:B7:DF:83:F9:A8:07
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584E815F8AA0409920F6A4EC3200
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     3257
IP address blocks:        23.234.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8a:a0:40:99:20:f6:a4:ec:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=4c47989b-6cae-49b8-be1a-f3bbea02f9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:cc:e5:2c:ef:ba:4c:bf:1b:93:87:03:d3:
                    a5:18:80:16:3d:29:b3:57:53:e1:cf:b8:94:c1:02:
                    25:1b:85:d8:2b:78:ec:36:0e:42:13:c7:0c:34:f2:
                    9e:d4:39:ee:4b:e9:a4:21:75:ba:86:4f:b0:cd:38:
                    95:29:99:1e:f1:d4:f6:8e:c5:1a:46:25:e2:5e:95:
                    d2:25:7f:b2:4f:47:18:6b:a2:fe:3e:2b:b4:e7:92:
                    c4:26:9b:de:f6:f7:72:f0:26:3b:82:e5:5b:a0:a0:
                    aa:e4:31:26:ad:53:2f:a1:0c:fb:c2:b6:20:7c:0d:
                    c7:01:aa:df:bc:0c:e0:66:8f:16:33:53:84:b9:72:
                    4b:c6:e2:0c:41:38:0b:ff:91:09:ba:aa:b8:b8:98:
                    3c:3f:cb:48:de:e9:e0:94:fc:95:5f:b4:da:fe:6f:
                    4f:c8:13:8f:ba:bd:dc:0f:cf:68:9a:54:39:4f:09:
                    c1:c2:36:ff:7b:7b:ce:2b:b0:d8:88:68:98:68:b6:
                    ee:63:30:c9:51:67:53:38:19:f2:ed:4a:a6:ef:6b:
                    3d:d8:e7:5d:64:1f:13:f1:a6:c1:14:b6:b8:b3:18:
                    2a:70:a9:6e:d8:8f:1e:3a:02:3e:f2:6e:75:be:0e:
                    aa:ee:5e:a1:bf:f5:a2:1c:20:a0:d9:8d:a5:fe:17:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:38:70:BB:A1:5C:74:9F:35:6E:F1:48:CC:DA:B7:DF:83:F9:A8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fa:30:dc:20:40:f9:57:21:cd:a1:5b:7d:63:9f:2c:a7:62:
         7a:a1:fc:4a:4a:88:bf:03:d6:45:22:84:1e:c6:62:ad:4b:a3:
         f6:95:6b:7c:c5:02:36:8e:3e:39:1a:06:9a:15:19:7e:fb:d3:
         63:77:96:5d:00:b3:ae:f8:65:8d:03:d8:80:37:a4:c4:2d:a7:
         b0:f9:0a:93:9a:53:f4:e6:ed:bc:4e:b5:3c:52:5e:7b:19:aa:
         13:d0:1b:76:5e:8e:42:69:f2:fc:ea:21:d9:3a:ee:e9:9c:09:
         5f:2f:f9:a4:dd:d8:0b:1b:25:cd:b8:42:d8:59:5d:0b:32:df:
         35:f3:dd:ec:b2:fb:e0:6e:c3:82:b8:b1:68:29:1a:c0:2c:da:
         6e:b5:51:4a:cd:39:aa:76:23:f3:b1:87:76:14:90:a3:26:9c:
         bf:3c:b7:b0:5d:85:2c:8d:4d:74:90:f2:8a:29:68:3f:eb:ff:
         0d:7b:1c:d6:f3:0e:67:f0:b2:56:0e:02:12:9b:d5:ca:89:da:
         65:78:e0:f3:47:aa:ad:9d:2d:e6:bf:45:80:76:f6:ca:42:21:
         bf:26:30:c8:aa:e4:6a:d6:a6:18:83:73:5e:b2:b1:76:13:2b:
         09:59:07:f7:2a:e6:7f:71:f4:91:f6:81:85:87:70:df:84:32:
         9c:15:31:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX4qgQJkg9qTsMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi
MDRkMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
NGM0Nzk4OWItNmNhZS00OWI4LWJlMWEtZjNiYmVhMDJmOWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEHM5Szvuky/G5OHA9OlGIAWPSmzV1Phz7iU
wQIlG4XYK3jsNg5CE8cMNPKe1DnuS+mkIXW6hk+wzTiVKZke8dT2jsUaRiXiXpXS
JX+yT0cYa6L+Piu055LEJpve9vdy8CY7guVboKCq5DEmrVMvoQz7wrYgfA3HAarf
vAzgZo8WM1OEuXJLxuIMQTgL/5EJuqq4uJg8P8tI3unglPyVX7Ta/m9PyBOPur3c
D89omlQ5TwnBwjb/e3vOK7DYiGiYaLbuYzDJUWdTOBny7Uqm72s92OddZB8T8abB
FLa4sxgqcKlu2I8eOgI+8m51vg6q7l6hv/WiHCCg2Y2l/hcBpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB04cLuhXHSfNW7xSMzat9+D+agHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3
YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvOGM3YTE4NzItMzFhMi0z
YWRlLWJjODEtNjUzMWYyY2Y0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi
ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw
YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2
N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADr6MNwgQPlXIc2hW31jnyynYnqh/EpKiL8D1kUihB7GYq1Lo/aVa3zF
AjaOPjkaBpoVGX7702N3ll0As674ZY0D2IA3pMQtp7D5CpOaU/Tm7bxOtTxSXnsZ
qhPQG3ZejkJp8vzqIdk67umcCV8v+aTd2AsbJc24QthZXQsy3zXz3eyy++Buw4K4
sWgpGsAs2m61UUrNOap2I/Oxh3YUkKMmnL88t7BdhSyNTXSQ8oopaD/r/w17HNbz
DmfwslYOAhKb1cqJ2mV44PNHqq2dLea/RYB29spCIb8mMMiq5GrWphiDc16ysXYT
KwlZB/cq5n9x9JH2gYWHcN+EMpwVMTQ=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:55 2026 by rpki-client