Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/823fafb9-f012-3236-a351-5c3334bf6708.roa
File:                     823fafb9-f012-3236-a351-5c3334bf6708.roa (raw, json)
Hash identifier:          FemQHicrZb0WrAPz9c8oHNUmwq/edTD3yg5NaOIvFOs=
Subject key identifier:   52:BF:CF:03:86:D0:5C:69:2A:37:C5:DD:2F:7F:34:4D:EA:1B:F5:D3
Certificate issuer:       /CN=4762a56d-346a-4bc0-937b-e8cd029694da
Certificate serial:       010D0C9F4328584EC4D71632ABA2E158F50C7D80
Authority key identifier: 1D:65:6D:1E:65:EE:6F:46:C4:7E:63:0E:6A:9E:67:C2:18:DA:2F:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/823fafb9-f012-3236-a351-5c3334bf6708.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     23335
IP address blocks:        23.139.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/4762a56d-346a-4bc0-937b-e8cd029694da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/4762a56d-346a-4bc0-937b-e8cd029694da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:16:32:ab:a2:e1:58:f5:0c:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4762a56d-346a-4bc0-937b-e8cd029694da
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=2dd45c0c-22f1-4d9e-8ec2-11660c438698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:2c:35:20:6e:7b:4d:61:6c:e1:03:a5:42:
                    d1:3b:06:04:a3:ec:b8:cb:a1:85:17:0c:54:3f:c5:
                    1d:b6:35:13:78:c6:7f:50:13:16:02:69:a7:39:cd:
                    40:a2:e1:57:eb:22:cd:56:dd:e4:62:1e:5f:7b:16:
                    56:87:63:26:ed:cd:fe:b9:9f:a7:4b:90:6b:1e:87:
                    55:78:d5:c9:57:bf:a5:15:a1:45:48:01:e1:97:f1:
                    1c:00:b8:db:b7:02:56:e4:5c:9c:82:42:09:52:a2:
                    1c:00:b6:67:c3:0f:c9:1a:84:b9:5b:8c:ce:83:ee:
                    e3:88:07:b8:18:2d:96:89:33:b1:aa:a3:1f:1e:97:
                    56:79:29:af:89:70:c4:ec:8d:e9:9f:11:d5:01:62:
                    2b:67:f1:f6:bf:37:3d:08:18:15:28:ba:44:d7:b6:
                    10:55:71:fd:70:ab:57:d2:f8:e9:2b:b3:d1:a7:34:
                    2a:58:3a:97:b1:c4:5e:a5:f1:6d:22:24:ba:4c:2a:
                    fd:b3:ab:c8:9d:3a:42:1a:d6:fe:12:ea:f0:39:f8:
                    89:8f:e8:fa:20:b2:f2:7b:7e:bc:1b:19:20:a1:83:
                    68:d1:ed:45:a8:82:4f:60:f1:42:a1:d6:fc:a0:71:
                    21:ae:b8:b1:b5:2a:79:71:a0:18:91:e9:7d:8f:88:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BF:CF:03:86:D0:5C:69:2A:37:C5:DD:2F:7F:34:4D:EA:1B:F5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/823fafb9-f012-3236-a351-5c3334bf6708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/4762a56d-346a-4bc0-937b-e8cd029694da.crl

            X509v3 Authority Key Identifier:
                keyid:1D:65:6D:1E:65:EE:6F:46:C4:7E:63:0E:6A:9E:67:C2:18:DA:2F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:1e:c8:3a:2c:e1:1b:67:ec:1d:65:b7:93:e5:5e:e2:60:
         bd:e6:e4:7b:44:14:7f:07:fe:1e:8c:aa:01:80:7b:b5:8d:68:
         ef:90:70:e2:c0:d0:8d:2e:17:f1:05:a0:11:21:61:9a:0b:be:
         84:c7:67:23:8b:4c:86:8b:90:1d:9f:b8:fc:77:27:04:6f:aa:
         15:c2:1f:13:d6:df:2a:78:e2:2b:d0:6c:aa:82:ed:37:58:00:
         fa:52:42:de:25:3c:00:f4:fc:ff:d5:ad:57:45:1d:39:0a:91:
         a2:ad:bb:f7:e4:72:2e:c5:0e:b4:cf:e5:42:38:c7:f9:1a:14:
         44:7b:a9:88:52:02:1f:73:a0:68:0e:07:22:c0:8f:f3:b6:39:
         c5:5d:f8:9e:2e:98:29:b0:9d:7c:b0:62:12:c2:b2:40:91:95:
         60:02:30:5b:b9:4c:ef:c1:6c:f0:57:38:5d:de:1a:3d:1d:46:
         21:92:33:7c:15:03:85:cc:35:52:bc:4b:2a:81:ea:66:4b:19:
         f2:bc:a3:11:74:7f:4b:31:72:c3:a4:5e:d9:76:cf:c8:e7:ca:
         d0:42:f5:11:73:d8:17:14:6b:1f:9f:0b:12:ff:80:d7:92:69:
         24:19:dd:b8:b6:7d:8c:a3:70:48:df:6d:6d:7f:29:f7:cb:5f:
         66:1f:18:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1xYyq6LhWPUMfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDc2MmE1NmQtMzQ2YS00YmMwLTkzN2ItZThjZDAyOTY5
NGRhMB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk
MmRkNDVjMGMtMjJmMS00ZDllLThlYzItMTE2NjBjNDM4Njk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC4sNSBue01hbOEDpULROwYEo+y4y6GFFwxU
P8UdtjUTeMZ/UBMWAmmnOc1AouFX6yLNVt3kYh5fexZWh2Mm7c3+uZ+nS5BrHodV
eNXJV7+lFaFFSAHhl/EcALjbtwJW5FycgkIJUqIcALZnww/JGoS5W4zOg+7jiAe4
GC2WiTOxqqMfHpdWeSmviXDE7I3pnxHVAWIrZ/H2vzc9CBgVKLpE17YQVXH9cKtX
0vjpK7PRpzQqWDqXscRepfFtIiS6TCr9s6vInTpCGtb+EurwOfiJj+j6ILLye368
GxkgoYNo0e1FqIJPYPFCodb8oHEhrrixtSp5caAYkel9j4hANQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK/zwOG0FxpKjfF3S9/NE3qG/XTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NzYy
YTU2ZC0zNDZhLTRiYzAtOTM3Yi1lOGNkMDI5Njk0ZGEvODIzZmFmYjktZjAxMi0z
MjM2LWEzNTEtNWMzMzM0YmY2NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDc2MmE1NmQtMzQ2YS00YmMwLTkz
N2ItZThjZDAyOTY5NGRhLzQ3NjJhNTZkLTM0NmEtNGJjMC05MzdiLWU4Y2QwMjk2
OTRkYS5jcmwwHwYDVR0jBBgwFoAUHWVtHmXub0bEfmMOap5nwhjaLyUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi80NzYyYTU2ZC0zNDZhLTRiYzAtOTM3Yi1lOGNk
MDI5Njk0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4sEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYOHsg6LOEbZ+wdZbeT5V7iYL3m5HtEFH8H/h6MqgGAe7WNaO+QcOLA
0I0uF/EFoBEhYZoLvoTHZyOLTIaLkB2fuPx3JwRvqhXCHxPW3yp44ivQbKqC7TdY
APpSQt4lPAD0/P/VrVdFHTkKkaKtu/fkci7FDrTP5UI4x/kaFER7qYhSAh9zoGgO
ByLAj/O2OcVd+J4umCmwnXywYhLCskCRlWACMFu5TO/BbPBXOF3eGj0dRiGSM3wV
A4XMNVK8SyqB6mZLGfK8oxF0f0sxcsOkXtl2z8jnytBC9RFz2BcUax+fCxL/gNeS
aSQZ3bi2fYyjcEjfbW1/KffLX2YfGE0=
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:05:03 2026 by rpki-client