Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/c7129695-cc4c-3f58-b226-fc449225ccbd.roa
File:                     c7129695-cc4c-3f58-b226-fc449225ccbd.roa (raw, json)
Hash identifier:          EvcQ+GBUVURLUCVpQGlVWK2cMZUCjZ/qiu/5049AC5c=
Subject key identifier:   C6:AC:42:23:B1:C9:AC:D3:8B:19:99:26:65:75:93:8D:5D:9E:D7:31
Certificate issuer:       /CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Certificate serial:       010D0C9F4328584F6239B0B2C318A6D52E55E440
Authority key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/c7129695-cc4c-3f58-b226-fc449225ccbd.roa
Signing time:             Sat 03 Oct 2026 22:00:54 +0000
ROA not before:           Sat 03 Oct 2026 22:00:54 +0000
ROA not after:            Fri 27 Nov 2026 06:01:18 +0000
asID:                     21658
IP address blocks:        23.163.136.0/24 maxlen: 24
                          23.175.248.0/24 maxlen: 24
                          143.203.188.0/22 maxlen: 22
                          149.112.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:39:b0:b2:c3:18:a6:d5:2e:55:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
        Validity
            Not Before: Oct  3 22:00:54 2026 GMT
            Not After : Nov 27 06:01:18 2026 GMT
        Subject: CN=747bda05-a967-4098-9452-c545a97b61fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:c1:69:88:f5:ea:33:06:7b:4e:60:6f:fc:
                    1b:a3:98:c7:13:ae:61:fd:44:62:7d:db:91:73:ad:
                    d5:aa:d6:1d:bb:10:28:82:ec:26:bc:5c:3c:1d:93:
                    e0:54:17:b7:66:a0:99:8d:01:44:c5:0f:c9:4d:c5:
                    cc:3f:64:89:9b:ad:a4:8f:ce:e0:6a:e4:83:ab:6b:
                    3c:f2:f3:60:7f:59:10:c2:15:2d:a5:d7:2b:42:fa:
                    7b:e0:67:31:12:a9:43:a5:ee:1f:4a:e9:b6:cd:55:
                    06:51:ca:33:c1:1f:15:c5:03:a7:ec:bf:35:b3:f9:
                    39:f6:02:98:5e:ac:ba:6e:00:35:01:40:2d:b0:1b:
                    59:d7:09:61:c0:15:68:68:6f:73:87:69:39:50:29:
                    72:b4:7c:5a:3f:2a:3b:d6:90:8d:e4:f5:1f:8f:ce:
                    32:a9:f1:e2:17:6d:fb:f1:c1:43:21:5d:35:34:24:
                    f4:15:02:ab:5e:82:90:b3:18:ba:7d:fd:5e:74:04:
                    47:8a:60:63:31:64:1f:6d:28:a5:79:3f:ba:c5:b3:
                    58:d1:b8:80:03:05:17:e3:eb:06:4a:45:78:8e:71:
                    38:86:0f:d5:e8:3c:3e:8e:70:e7:2e:d4:36:ea:a2:
                    0b:8f:7f:de:14:98:6a:8b:e5:0c:1d:e7:b9:02:cc:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AC:42:23:B1:C9:AC:D3:8B:19:99:26:65:75:93:8D:5D:9E:D7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/c7129695-cc4c-3f58-b226-fc449225ccbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl

            X509v3 Authority Key Identifier:
                keyid:D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.136.0/24
                  23.175.248.0/24
                  143.203.188.0/22
                  149.112.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a5:b7:c1:27:79:d0:75:cc:0a:48:29:c2:cf:db:44:09:93:
         50:c2:a2:10:58:9d:5f:01:68:fe:dc:b2:90:58:57:a7:7b:54:
         30:14:f8:c8:c0:c7:a6:65:4a:f5:85:f6:29:09:13:2e:7a:dd:
         11:a9:2a:c8:90:0d:f3:a4:5f:6f:1a:d5:32:42:23:11:44:a0:
         30:24:ac:84:14:a4:b9:76:9e:0a:b8:c2:bf:77:e1:17:48:ee:
         dd:7e:b3:50:40:b9:5c:27:5d:36:df:ee:51:7f:a5:69:7f:d1:
         10:52:44:99:02:7f:fb:8b:6b:96:05:b2:3d:ac:f2:d6:a1:f4:
         a7:15:05:4a:52:bf:f8:c8:16:f7:7e:ce:30:fe:79:f2:20:c5:
         12:db:61:d5:32:14:d2:78:cd:6e:d6:f0:05:11:a6:af:48:14:
         4e:25:d7:52:b4:3f:32:56:d0:8a:c0:de:89:d6:1d:63:77:3a:
         56:29:15:10:4c:95:39:92:40:13:23:bc:05:ad:97:ef:a7:24:
         4e:03:e8:ac:63:c4:f5:55:cf:97:80:5a:dd:2d:80:0f:1d:67:
         48:f3:5b:68:e7:0c:f8:54:90:74:d3:71:0c:23:ae:cf:80:19:
         aa:e6:81:7a:ed:32:48:54:e3:6e:69:03:c6:79:1b:5a:ea:e0:
         4f:a4:91:9f
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9iObCywxim1S5V5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxMGQ3YmEtZTI3My00ZDM0LTg2ODgtYzdjMWUzOGFi
NmRhMB4XDTI2MTAwMzIyMDA1NFoXDTI2MTEyNzA2MDExOFowLzEtMCsGA1UEAxMk
NzQ3YmRhMDUtYTk2Ny00MDk4LTk0NTItYzU0NWE5N2I2MWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgvBaYj16jMGe05gb/wbo5jHE65h/URifduR
c63VqtYduxAoguwmvFw8HZPgVBe3ZqCZjQFExQ/JTcXMP2SJm62kj87gauSDq2s8
8vNgf1kQwhUtpdcrQvp74GcxEqlDpe4fSum2zVUGUcozwR8VxQOn7L81s/k59gKY
Xqy6bgA1AUAtsBtZ1wlhwBVoaG9zh2k5UClytHxaPyo71pCN5PUfj84yqfHiF237
8cFDIV01NCT0FQKrXoKQsxi6ff1edARHimBjMWQfbSileT+6xbNY0biAAwUX4+sG
SkV4jnE4hg/V6Dw+jnDnLtQ26qILj3/eFJhqi+UMHee5AszrYwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFMasQiOxyazTixmZJmV1k41dntcxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjEw
ZDdiYS1lMjczLTRkMzQtODY4OC1jN2MxZTM4YWI2ZGEvYzcxMjk2OTUtY2M0Yy0z
ZjU4LWIyMjYtZmM0NDkyMjVjY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2IxMGQ3YmEtZTI3My00ZDM0LTg2
ODgtYzdjMWUzOGFiNmRhLzdiMTBkN2JhLWUyNzMtNGQzNC04Njg4LWM3YzFlMzhh
YjZkYS5jcmwwHwYDVR0jBBgwFoAU1kXVwWz7OXhjCYzZhMaxExZymo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YjEwZDdiYS1lMjczLTRkMzQtODY4OC1jN2Mx
ZTM4YWI2ZGEuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF6OIAwQA
F6/4AwQCj8u8AwQAlXBvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFilt8EnedB1zApIKcLP20QJk1DCohBY
nV8BaP7cspBYV6d7VDAU+MjAx6ZlSvWF9ikJEy563RGpKsiQDfOkX28a1TJCIxFE
oDAkrIQUpLl2ngq4wr934RdI7t1+s1BAuVwnXTbf7lF/pWl/0RBSRJkCf/uLa5YF
sj2s8tah9KcVBUpSv/jIFvd+zjD+efIgxRLbYdUyFNJ4zW7W8AURpq9IFE4l11K0
PzJW0IrA3onWHWN3OlYpFRBMlTmSQBMjvAWtl++nJE4D6KxjxPVVz5eAWt0tgA8d
Z0jzW2jnDPhUkHTTcQwjrs+AGarmgXrtMkhU425pA8Z5G1rq4E+kkZ8=
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:57:11 2026 by rpki-client