Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa
File:                     5a37443e-20ea-383a-9358-9f99e9d723a7.roa (raw, json)
Hash identifier:          Q4meWsfXGt15FnnnfjfSO+77SDUdl5dZyAuLn74+N6I=
Subject key identifier:   A7:CC:C5:18:9D:85:83:CC:65:6D:08:BD:0B:45:2F:6A:ED:6F:C0:D5
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584F3CE2B405489B605B64762320
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     46261
IP address blocks:        23.226.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b4:05:48:9b:60:5b:64:76:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=9a2f0c6e-67df-4a2c-9128-c0316305428a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:8e:32:8b:d1:8a:da:21:53:42:47:82:36:
                    c2:85:77:9f:8f:e7:bf:40:46:f2:10:1b:b5:87:07:
                    ae:6b:b1:dc:44:8e:6e:a0:39:c1:1b:51:09:08:3a:
                    1c:20:a6:21:3a:9e:5e:c5:d8:6b:a6:32:fa:d2:63:
                    72:fc:8b:46:60:11:e9:d9:4a:43:e1:18:f6:aa:97:
                    ff:64:28:ca:c6:e0:c9:aa:8f:22:bf:24:51:d5:15:
                    24:f0:48:c5:e2:54:12:f8:a1:e0:e8:fe:aa:d7:a9:
                    ec:65:26:ec:85:2a:32:0d:b8:0a:7d:fc:08:ee:1f:
                    2c:da:01:a0:ac:9a:ae:9e:65:d2:5a:ae:03:4c:d6:
                    b8:be:0c:1d:f1:d7:ca:c4:04:44:c2:78:ce:41:ff:
                    21:39:7b:e8:ce:d1:5d:6a:bb:8b:14:cd:b9:86:c1:
                    2d:c5:25:8f:88:9a:fd:4c:0f:42:f7:d0:b9:6d:78:
                    b3:20:41:fa:f7:3c:89:1e:11:8f:11:68:32:cb:f5:
                    2d:57:43:8d:a7:76:31:e7:d7:8f:21:34:06:8a:2b:
                    66:ce:aa:21:2d:62:a6:e8:6f:4e:ce:4d:31:ba:b9:
                    d5:a2:e3:6d:59:a8:57:17:c0:bf:37:38:ec:18:5d:
                    d0:00:8a:c8:6e:38:ad:5a:24:3e:ca:61:96:55:c9:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CC:C5:18:9D:85:83:CC:65:6D:08:BD:0B:45:2F:6A:ED:6F:C0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:3c:49:ed:1c:56:d1:74:0b:01:de:9f:79:2d:7d:1d:35:
         bc:b6:d8:06:57:92:aa:03:84:c7:f8:1e:f9:72:ca:82:c0:8d:
         41:9a:6b:aa:fd:2f:90:13:85:10:d1:68:ca:fc:43:f2:7c:aa:
         46:a1:68:59:94:a0:fc:5f:d9:47:48:4a:64:90:16:4c:87:26:
         d4:85:d3:b2:9d:c5:81:33:83:7b:b9:f2:25:b7:72:a7:79:25:
         55:73:73:0f:22:d7:54:9a:c0:96:ef:66:05:00:4d:0a:07:da:
         72:7a:fd:32:6f:88:9e:cd:87:30:08:d5:0b:6d:69:3d:ea:4c:
         ae:09:c7:e2:56:25:48:be:6b:c1:e9:bc:c9:c1:dc:22:23:fe:
         ce:06:9a:d3:5a:fb:dc:36:5d:0d:3f:41:28:88:34:6a:48:97:
         cc:0e:86:8a:30:a4:aa:20:f2:6c:2b:7c:9b:d1:ec:fe:30:94:
         83:bf:f7:32:12:05:80:53:4b:06:82:40:ad:22:01:6f:01:df:
         9b:61:a2:30:e7:02:6e:41:88:f4:85:89:6a:33:65:db:af:bf:
         4b:46:4d:d5:3c:36:1a:76:42:34:e0:57:16:4b:de:b8:58:bb:
         a5:96:17:cd:c1:ec:24:fc:b4:95:16:e9:38:52:2c:8e:ab:86:
         17:2b:37:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rQFSJtgW2R2IyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0
Mjg3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
OWEyZjBjNmUtNjdkZi00YTJjLTkxMjgtYzAzMTYzMDU0MjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnuOMovRitohU0JHgjbChXefj+e/QEbyEBu1
hweua7HcRI5uoDnBG1EJCDocIKYhOp5exdhrpjL60mNy/ItGYBHp2UpD4Rj2qpf/
ZCjKxuDJqo8ivyRR1RUk8EjF4lQS+KHg6P6q16nsZSbshSoyDbgKffwI7h8s2gGg
rJqunmXSWq4DTNa4vgwd8dfKxAREwnjOQf8hOXvoztFdaruLFM25hsEtxSWPiJr9
TA9C99C5bXizIEH69zyJHhGPEWgyy/UtV0ONp3Yx59ePITQGiitmzqohLWKm6G9O
zk0xurnVouNtWahXF8C/NzjsGF3QAIrIbjitWiQ+ymGWVcmd0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfMxRidhYPMZW0IvQtFL2rtb8DVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4
NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvNWEzNzQ0M2UtMjBlYS0z
ODNhLTkzNTgtOWY5OWU5ZDcyM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx
NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw
NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk
YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+IgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQcPEntHFbRdAsB3p95LX0dNby22AZXkqoDhMf4HvlyyoLAjUGaa6r9
L5AThRDRaMr8Q/J8qkahaFmUoPxf2UdISmSQFkyHJtSF07KdxYEzg3u58iW3cqd5
JVVzcw8i11SawJbvZgUATQoH2nJ6/TJviJ7NhzAI1QttaT3qTK4Jx+JWJUi+a8Hp
vMnB3CIj/s4GmtNa+9w2XQ0/QSiINGpIl8wOhoowpKog8mwrfJvR7P4wlIO/9zIS
BYBTSwaCQK0iAW8B35thojDnAm5BiPSFiWozZduvv0tGTdU8Nhp2QjTgVxZL3rhY
u6WWF83B7CT8tJUW6ThSLI6rhhcrN/0=
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:32:59 2026 by rpki-client