Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45/e974ce3d-fa95-306f-af1c-2a0f69c72e22.roa
File:                     e974ce3d-fa95-306f-af1c-2a0f69c72e22.roa (raw, json)
Hash identifier:          f6QLnSP7dh6ooPiDpVwRy1E81+NvEDoeKyNkij+r0RY=
Subject key identifier:   BB:79:0C:43:9B:47:14:02:0B:1B:0C:20:18:06:F5:CE:1D:BC:BE:4F
Certificate issuer:       /CN=c622bc2f-12be-4e28-ba61-be0545673d45
Certificate serial:       010D0C9F4328584DBFD0B41082651033BE224300
Authority key identifier: 68:87:63:8E:D2:C9:23:D7:40:1D:3B:7F:69:2A:97:AE:9B:9D:06:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45/e974ce3d-fa95-306f-af1c-2a0f69c72e22.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     2914
IP address blocks:        23.150.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45/c622bc2f-12be-4e28-ba61-be0545673d45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45/c622bc2f-12be-4e28-ba61-be0545673d45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:b4:10:82:65:10:33:be:22:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c622bc2f-12be-4e28-ba61-be0545673d45
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=4256c3a5-c8d9-476c-9677-235a0a1666dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:62:ac:13:31:00:f9:67:d4:df:b5:d1:4c:
                    04:1a:68:b8:d6:c1:e8:fb:96:aa:bc:17:a0:6a:b6:
                    d7:17:fe:1d:f5:2f:26:81:b1:31:83:44:6a:14:60:
                    c4:38:7d:67:de:06:48:ff:88:02:e3:24:70:79:db:
                    f5:c4:d2:a3:89:7b:f9:d4:3a:3d:64:b4:b1:0b:0f:
                    d3:02:d5:d1:cc:e8:af:b7:5f:e3:65:fb:21:e4:33:
                    a3:75:bf:4f:05:62:52:3f:be:68:93:bd:64:94:d9:
                    78:7d:86:6c:0f:45:9a:55:17:54:75:66:ed:13:57:
                    e0:22:4f:4a:ed:64:ef:56:f6:25:9f:3d:34:b4:ad:
                    61:a5:ac:af:f1:cd:1f:7d:df:36:7f:1f:8e:37:f8:
                    73:cf:0e:fd:a3:79:19:fb:e1:7b:87:97:f6:6a:88:
                    d6:c9:e1:97:de:d2:06:13:d0:ff:5d:b5:08:a5:1f:
                    79:44:3c:7b:3c:00:84:b1:ba:e1:66:9f:00:4e:bd:
                    15:31:7c:41:d2:ab:5d:7e:41:f8:e7:74:03:ac:e8:
                    ce:7c:fa:46:8a:44:c6:79:6c:8c:af:63:a0:68:01:
                    32:e6:2e:84:5c:64:9c:b7:5e:f0:af:ea:d8:f4:31:
                    f9:51:0a:5c:60:e3:04:08:ed:98:24:a8:68:32:76:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:79:0C:43:9B:47:14:02:0B:1B:0C:20:18:06:F5:CE:1D:BC:BE:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45/e974ce3d-fa95-306f-af1c-2a0f69c72e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45/c622bc2f-12be-4e28-ba61-be0545673d45.crl

            X509v3 Authority Key Identifier:
                keyid:68:87:63:8E:D2:C9:23:D7:40:1D:3B:7F:69:2A:97:AE:9B:9D:06:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c622bc2f-12be-4e28-ba61-be0545673d45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:99:93:74:b7:d4:83:71:73:44:40:88:0c:1e:ca:1f:8c:72:
         a3:18:7a:a4:84:14:d1:7a:7a:7c:4e:04:97:bc:d0:ac:4b:f1:
         cb:e8:3e:f3:69:94:8a:f7:f2:98:06:53:26:98:87:51:e9:fc:
         47:e4:fe:75:c5:4e:c2:d1:85:d9:2f:ee:17:01:5f:b5:52:b3:
         8c:e6:84:28:56:14:f7:11:10:da:ea:2c:32:33:33:c8:d7:06:
         4f:85:58:21:bf:dd:33:65:e4:f2:42:5e:2f:98:8c:c3:30:a5:
         46:c1:75:70:0b:7e:35:b1:f4:5a:c7:8c:84:26:c9:5d:3f:31:
         32:c3:1f:72:cc:ee:64:e6:fb:72:59:29:fe:84:18:4a:70:24:
         a2:8e:1a:b3:e3:7e:58:aa:71:37:0e:95:83:b9:95:f8:09:1f:
         a5:dc:77:49:9a:7a:7f:81:bd:6d:fe:22:fb:c9:32:e1:c9:70:
         06:d4:92:e5:40:e9:6e:3b:f7:90:29:19:9e:eb:bf:40:b4:d8:
         e8:15:bf:19:40:41:bb:bb:c3:92:92:e6:72:2f:25:c6:53:b5:
         c0:f3:30:8a:be:b3:36:5a:d2:35:f1:14:8f:83:fa:f5:9d:66:
         09:94:f4:62:9a:4e:2f:02:de:e1:5b:e3:3f:1d:01:5e:86:23:
         5e:12:fd:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0LQQgmUQM74iQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYyMmJjMmYtMTJiZS00ZTI4LWJhNjEtYmUwNTQ1Njcz
ZDQ1MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk
NDI1NmMzYTUtYzhkOS00NzZjLTk2NzctMjM1YTBhMTY2NmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuZirBMxAPln1N+10UwEGmi41sHo+5aqvBeg
arbXF/4d9S8mgbExg0RqFGDEOH1n3gZI/4gC4yRwedv1xNKjiXv51Do9ZLSxCw/T
AtXRzOivt1/jZfsh5DOjdb9PBWJSP75ok71klNl4fYZsD0WaVRdUdWbtE1fgIk9K
7WTvVvYlnz00tK1hpayv8c0ffd82fx+ON/hzzw79o3kZ++F7h5f2aojWyeGX3tIG
E9D/XbUIpR95RDx7PACEsbrhZp8ATr0VMXxB0qtdfkH453QDrOjOfPpGikTGeWyM
r2OgaAEy5i6EXGSct17wr+rY9DH5UQpcYOMECO2YJKhoMnaNZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLt5DEObRxQCCxsMIBgG9c4dvL5PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjIy
YmMyZi0xMmJlLTRlMjgtYmE2MS1iZTA1NDU2NzNkNDUvZTk3NGNlM2QtZmE5NS0z
MDZmLWFmMWMtMmEwZjY5YzcyZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzYyMmJjMmYtMTJiZS00ZTI4LWJh
NjEtYmUwNTQ1NjczZDQ1L2M2MjJiYzJmLTEyYmUtNGUyOC1iYTYxLWJlMDU0NTY3
M2Q0NS5jcmwwHwYDVR0jBBgwFoAUaIdjjtLJI9dAHTt/aSqXrpudBqQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjIyYmMyZi0xMmJlLTRlMjgtYmE2MS1iZTA1
NDU2NzNkNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqZk3S31INxc0RAiAweyh+McqMYeqSEFNF6enxOBJe80KxL8cvoPvNp
lIr38pgGUyaYh1Hp/Efk/nXFTsLRhdkv7hcBX7VSs4zmhChWFPcRENrqLDIzM8jX
Bk+FWCG/3TNl5PJCXi+YjMMwpUbBdXALfjWx9FrHjIQmyV0/MTLDH3LM7mTm+3JZ
Kf6EGEpwJKKOGrPjfliqcTcOlYO5lfgJH6Xcd0maen+BvW3+IvvJMuHJcAbUkuVA
6W4795ApGZ7rv0C02OgVvxlAQbu7w5KS5nIvJcZTtcDzMIq+szZa0jXxFI+D+vWd
ZgmU9GKaTi8C3uFb4z8dAV6GI14S/S0=
-----END CERTIFICATE-----
Generated at Wed May 13 03:12:54 2026 by rpki-client