Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa
File:                     e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa (raw, json)
Hash identifier:          gU8irqorN42scOvOXH4DhZNa5KQkag7/U6XqRRHy2uM=
Subject key identifier:   6E:92:1C:15:1B:D2:BE:4E:74:86:38:FA:2E:45:20:3B:E1:A7:33:BB
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584E815F8D9845298D1C1CB329C0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     3257
IP address blocks:        23.234.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8d:98:45:29:8d:1c:1c:b3:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=0bc32d3a-54e5-4c46-b141-3fb180231460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:17:98:b1:f4:9c:39:0d:17:73:7e:ce:52:
                    84:95:3b:fe:ff:49:59:d8:b9:10:08:f5:03:99:51:
                    2f:a5:e8:ac:41:08:35:da:75:72:07:96:96:48:87:
                    3e:9e:1b:44:9a:ff:52:33:4d:f4:00:b7:1d:9b:cd:
                    9f:0a:25:b0:16:55:04:f2:e6:b3:9c:5d:9a:07:d1:
                    b7:83:61:5c:e6:21:23:23:c9:cc:4d:93:e9:96:ea:
                    a4:d5:c2:38:82:04:7d:91:fd:0e:e7:d2:2b:79:fa:
                    28:59:df:a9:cc:b7:76:b3:03:28:63:69:b2:3b:cb:
                    e0:d6:d3:5b:cd:0c:2d:46:2e:86:4b:41:2b:82:2d:
                    d3:ce:8b:31:0c:3f:2b:58:cb:bd:54:e8:0c:f9:f3:
                    d1:db:9f:03:b5:7f:a2:14:93:2f:cb:f7:9c:c4:aa:
                    66:0e:7f:b6:f1:03:1d:4f:3d:4c:7a:7f:c2:12:4f:
                    5d:53:a4:f2:a9:15:66:ed:21:d9:23:86:30:cf:56:
                    13:02:92:1c:db:39:72:c7:8f:a9:08:ef:b5:8c:0d:
                    f6:9d:38:7a:36:3e:a4:27:93:46:95:ce:89:22:37:
                    f8:24:bf:6c:46:e6:12:1b:b9:32:e3:9f:80:b9:cc:
                    c2:98:eb:41:03:4b:3b:97:e4:44:db:7e:66:3b:ac:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:92:1C:15:1B:D2:BE:4E:74:86:38:FA:2E:45:20:3B:E1:A7:33:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:e1:75:74:59:0c:4a:19:4c:25:0b:b2:c2:7c:03:b2:ac:
         f6:9f:4c:88:e9:e8:ab:0a:19:69:c5:99:52:0e:e6:81:1b:9b:
         70:70:3d:07:7b:53:a0:02:8a:bf:35:58:01:6b:99:38:b5:99:
         06:12:b3:00:26:d3:ad:ff:2e:0c:b7:8d:02:c4:83:47:5b:67:
         07:c4:a8:49:88:1b:3b:ca:31:df:6b:2c:97:dd:fe:90:c1:4f:
         b8:67:8c:f8:6c:0d:b5:05:c5:53:86:54:b8:f0:7c:05:1e:8f:
         eb:9b:74:c6:00:5f:d2:3f:ff:97:67:78:d1:45:28:34:f8:7f:
         4b:1f:4e:39:29:0f:be:f3:07:0e:15:e0:72:88:82:a4:7d:d9:
         03:9c:21:2d:e0:c5:33:1b:2d:21:5f:b3:dd:c6:c5:6c:b2:0d:
         c6:4c:12:68:10:de:ee:4c:dd:c3:4e:8b:4a:cb:c5:2c:03:85:
         ca:4b:13:b8:f9:d5:81:63:fd:55:e5:cf:f4:48:99:d0:26:7e:
         c5:9b:fb:ea:dc:bc:23:89:6e:db:e7:06:b4:df:a8:08:39:70:
         5d:1f:b7:37:9b:7d:59:ad:78:54:e4:bf:a4:b9:d9:19:dc:71:
         f6:4c:7c:26:fe:31:84:9f:fa:59:60:a0:a7:c1:ac:ed:17:af:
         aa:37:dc:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX42YRSmNHByzKcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi
MDRkMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
MGJjMzJkM2EtNTRlNS00YzQ2LWIxNDEtM2ZiMTgwMjMxNDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUIXmLH0nDkNF3N+zlKElTv+/0lZ2LkQCPUD
mVEvpeisQQg12nVyB5aWSIc+nhtEmv9SM030ALcdm82fCiWwFlUE8uaznF2aB9G3
g2Fc5iEjI8nMTZPpluqk1cI4ggR9kf0O59IrefooWd+pzLd2swMoY2myO8vg1tNb
zQwtRi6GS0Ergi3TzosxDD8rWMu9VOgM+fPR258DtX+iFJMvy/ecxKpmDn+28QMd
Tz1Men/CEk9dU6TyqRVm7SHZI4Ywz1YTApIc2zlyx4+pCO+1jA32nTh6Nj6kJ5NG
lc6JIjf4JL9sRuYSG7ky45+AuczCmOtBA0s7l+RE235mO6z5SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6SHBUb0r5OdIY4+i5FIDvhpzO7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3
YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZTIxNzVhOTgtODI2OC0z
ZTBlLTg5YzQtZTdmZjBhZDI0OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi
ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw
YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2
N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnO4XV0WQxKGUwlC7LCfAOyrPafTIjp6KsKGWnFmVIO5oEbm3BwPQd7
U6ACir81WAFrmTi1mQYSswAm063/Lgy3jQLEg0dbZwfEqEmIGzvKMd9rLJfd/pDB
T7hnjPhsDbUFxVOGVLjwfAUej+ubdMYAX9I//5dneNFFKDT4f0sfTjkpD77zBw4V
4HKIgqR92QOcIS3gxTMbLSFfs93GxWyyDcZMEmgQ3u5M3cNOi0rLxSwDhcpLE7j5
1YFj/VXlz/RImdAmfsWb++rcvCOJbtvnBrTfqAg5cF0ftzebfVmteFTkv6S52Rnc
cfZMfCb+MYSf+llgoKfBrO0Xr6o33Mk=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:53 2026 by rpki-client