Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa
File:                     2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa (raw, json)
Hash identifier:          N/pTqaPwQZpNm7mPnNtmiaI3+3cDguDnVK4xqupgi1Q=
Subject key identifier:   A1:E5:CA:14:4A:2B:92:30:94:49:DE:73:7E:38:86:0E:53:F2:3A:59
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584F8F3DC1494EBA4F1F3A6C8800
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     138643
IP address blocks:        23.226.57.0/24 maxlen: 32
                          23.248.217.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:c1:49:4e:ba:4f:1f:3a:6c:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=4e44ed07-3ccd-4d41-9bc3-e59f633e382c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:97:eb:62:9b:f6:34:69:cd:78:1a:fd:6b:
                    6f:bd:18:73:46:16:62:d7:47:e7:e2:3a:ce:d5:13:
                    6d:3c:e0:85:da:10:cf:94:c0:8b:84:09:05:10:ae:
                    3b:5b:0b:f0:9e:ea:93:c7:af:11:01:6c:06:2c:c1:
                    af:b8:b0:4f:be:1d:08:dc:d5:68:0a:3a:df:b8:9f:
                    30:76:b6:23:e2:e4:3e:e8:50:e7:1f:bb:b6:c5:c6:
                    87:93:36:66:fc:7a:44:8f:89:e8:b1:d2:42:f5:30:
                    4a:3a:b7:8d:b3:37:57:98:16:8d:3a:fc:ba:ed:ed:
                    d9:1c:97:38:0d:a9:d2:14:67:d7:dc:c1:f1:6a:78:
                    8a:16:3f:cc:5c:29:6c:4a:4a:f9:cd:a6:85:ec:c5:
                    f2:6e:81:ba:6e:e5:db:8f:20:9b:54:6f:b9:21:fd:
                    a8:9b:4d:1a:af:79:0d:e2:b1:b5:29:d7:2c:a4:8f:
                    55:ae:c8:2b:40:65:30:4a:d1:c1:5b:dc:99:d1:8f:
                    d3:60:2a:ef:eb:b0:de:0c:93:be:39:cc:72:4b:11:
                    6f:b5:81:af:b9:96:6c:a4:c1:bb:c0:72:b5:4c:38:
                    5d:43:32:96:b3:c3:6c:16:d7:1b:52:79:93:ff:3b:
                    61:d6:8c:0c:32:06:49:72:a0:07:68:1b:93:fb:d9:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E5:CA:14:4A:2B:92:30:94:49:DE:73:7E:38:86:0E:53:F2:3A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.57.0/24
                  23.248.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:f3:d8:6b:b7:97:da:66:82:52:86:58:a9:dd:8d:78:44:a3:
         a6:c6:c4:06:2c:fe:02:6d:f6:a2:93:e8:f6:0f:00:40:13:63:
         c3:3d:db:1f:fe:c5:68:31:b3:74:30:ab:92:6a:81:8d:46:7a:
         37:66:2d:57:fa:25:af:c3:d0:2e:3e:72:d3:6e:73:1a:4c:33:
         e7:0e:e5:43:18:13:97:6f:96:e4:5c:58:ed:4b:4b:df:02:5f:
         66:e2:01:01:d3:33:2c:e5:0c:4c:3a:ec:c4:3a:bb:2a:e4:87:
         ee:7c:7f:96:93:af:6f:c5:e9:2d:31:4e:47:ac:60:a2:92:35:
         4d:63:63:4a:a5:6a:75:d3:de:3f:7f:b8:f5:aa:8b:8b:87:48:
         ff:fc:d0:b0:eb:fc:f3:6f:aa:de:34:c0:5c:87:8c:0c:fa:09:
         8b:3c:cc:f9:bf:e1:1d:b4:b8:2f:8d:40:87:4f:99:50:2e:1c:
         0b:fd:39:6f:4f:d1:e0:f2:e1:07:23:88:fa:15:e5:81:ba:a1:
         d0:46:0a:04:5f:92:4b:a1:47:3c:9c:1c:38:95:dc:3c:f1:3b:
         a2:bc:3b:09:46:29:6c:69:2f:75:96:68:c7:0d:ec:39:50:1d:
         f3:87:e0:97:26:2a:43:89:82:6a:82:49:de:c4:61:b0:9d:d5:
         a6:12:99:24
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+PPcFJTrpPHzpsiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy
OGJkMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk
NGU0NGVkMDctM2NjZC00ZDQxLTliYzMtZTU5ZjYzM2UzODJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5uX62Kb9jRpzXga/WtvvRhzRhZi10fn4jrO
1RNtPOCF2hDPlMCLhAkFEK47WwvwnuqTx68RAWwGLMGvuLBPvh0I3NVoCjrfuJ8w
drYj4uQ+6FDnH7u2xcaHkzZm/HpEj4nosdJC9TBKOreNszdXmBaNOvy67e3ZHJc4
DanSFGfX3MHxaniKFj/MXClsSkr5zaaF7MXyboG6buXbjyCbVG+5If2om00ar3kN
4rG1KdcspI9VrsgrQGUwStHBW9yZ0Y/TYCrv67DeDJO+OcxySxFvtYGvuZZspMG7
wHK1TDhdQzKWs8NsFtcbUnmT/zth1owMMgZJcqAHaBuT+9kCmQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKHlyhRKK5IwlEnec344hg5T8jpZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1
NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvMmYwMzFjYzItZDg0Mi0z
YWUzLTlkMGYtOGY4NTgyYWRjYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj
ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk
MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh
YTk3ZDI4YmQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+I5AwQA
F/jZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALrz2Gu3l9pmglKGWKndjXhEo6bGxAYs/gJt9qKT6PYPAEAT
Y8M92x/+xWgxs3Qwq5JqgY1GejdmLVf6Ja/D0C4+ctNucxpMM+cO5UMYE5dvluRc
WO1LS98CX2biAQHTMyzlDEw67MQ6uyrkh+58f5aTr2/F6S0xTkesYKKSNU1jY0ql
anXT3j9/uPWqi4uHSP/80LDr/PNvqt40wFyHjAz6CYs8zPm/4R20uC+NQIdPmVAu
HAv9OW9P0eDy4QcjiPoV5YG6odBGCgRfkkuhRzycHDiV3DzxO6K8OwlGKWxpL3WW
aMcN7DlQHfOH4JcmKkOJgmqCSd7EYbCd1aYSmSQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:41 2026 by rpki-client