Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa
File:                     5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa (raw, json)
Hash identifier:          GL8m6g36mteOA+ycNr02/lAmL43LCOw1VFiQzlSrDIY=
Subject key identifier:   C9:8E:3E:5A:97:C8:0C:AA:B5:47:5F:24:66:AB:68:3D:56:B4:76:57
Certificate issuer:       /CN=b12072dc-8b29-49de-800e-2439a1f4bf97
Certificate serial:       010D0C9F4328584F0D6CEB05BB0075CA4929F200
Authority key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     399737
IP address blocks:        23.165.8.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:eb:05:bb:00:75:ca:49:29:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12072dc-8b29-49de-800e-2439a1f4bf97
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=11716d8a-275e-4f17-b175-9fb45cff34b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:f1:9c:89:fa:73:6c:2b:fa:51:80:42:3f:
                    c3:de:1c:a9:58:b7:65:ea:a7:f3:48:39:45:4d:08:
                    b2:5e:1b:30:90:91:9a:ad:a9:a2:c5:dc:0c:a9:f5:
                    64:6a:20:65:9f:41:d0:3a:fe:ac:1b:c5:99:e2:b0:
                    d4:df:40:b2:9d:71:4e:58:0b:cc:d1:be:88:da:7d:
                    37:a0:0f:78:e7:f6:f3:12:92:c2:12:c0:f5:d3:77:
                    c1:18:ec:17:3f:37:12:c7:99:5f:5b:11:3d:65:18:
                    a1:c6:4f:51:a9:1e:62:9a:33:64:79:7b:7f:43:d0:
                    ac:5c:4f:09:a5:90:00:21:15:58:f3:2d:03:dd:da:
                    85:26:56:3f:b0:ca:cd:93:b9:d0:72:83:58:a2:e9:
                    dc:1b:d2:3c:f7:2d:1c:5a:46:f1:74:65:b4:29:62:
                    34:45:e5:da:7a:62:da:a6:d7:73:93:4f:8a:79:f4:
                    3e:5b:4a:ba:05:2f:a7:90:6d:f7:d2:d0:f4:23:77:
                    2a:ed:80:ce:f7:8c:58:32:45:53:a1:a6:bd:6c:c0:
                    fe:e7:a2:c2:fb:f6:54:5e:44:92:0a:96:0f:90:37:
                    a0:cc:3f:ab:4c:f8:8a:49:20:99:b8:04:83:5f:61:
                    e9:c0:09:f7:a0:01:fe:a7:49:df:5d:7f:66:40:04:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8E:3E:5A:97:C8:0C:AA:B5:47:5F:24:66:AB:68:3D:56:B4:76:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:08:cf:ad:ae:15:c5:0a:da:9f:dc:59:35:e6:79:37:e9:
         cd:1c:74:9a:d3:2d:97:a0:13:94:8b:28:f9:30:cc:8a:47:2b:
         eb:e7:16:a8:70:d5:65:69:c8:49:e7:ef:9f:2a:4f:c8:ff:72:
         bb:23:9b:f2:5a:69:e6:69:24:b9:b0:95:3b:c5:a6:fb:45:85:
         2c:1e:be:9a:27:93:66:35:fb:20:4d:83:a7:ef:db:75:50:df:
         6f:06:92:9c:93:8e:d7:3b:14:5d:71:e4:a2:54:6d:8b:d7:06:
         2a:f0:81:01:bc:fc:99:74:72:55:54:85:c1:d6:66:61:42:be:
         9f:ff:b8:57:97:8f:33:85:93:10:17:96:71:28:8b:7b:f0:14:
         81:5d:38:9f:40:f8:c2:95:b1:2e:9b:40:a3:23:6e:6b:68:2d:
         f8:16:89:66:1c:b0:48:0b:9f:9a:ef:2f:93:5f:7a:5a:7c:11:
         da:c5:22:69:1d:fe:17:e5:55:a9:3d:90:38:96:5d:89:b1:2b:
         2a:d7:66:58:60:1f:18:56:43:ad:bf:ed:73:4f:94:7d:04:04:
         22:2a:7c:b1:38:f5:b9:75:2b:fb:64:5f:4d:5b:56:98:1f:e9:
         e7:6b:4b:3c:01:09:2c:52:a5:03:53:84:e5:04:24:92:7b:75:
         81:6b:21:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOsFuwB1ykkp8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjEyMDcyZGMtOGIyOS00OWRlLTgwMGUtMjQzOWExZjRi
Zjk3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
MTE3MTZkOGEtMjc1ZS00ZjE3LWIxNzUtOWZiNDVjZmYzNGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizfxnIn6c2wr+lGAQj/D3hypWLdl6qfzSDlF
TQiyXhswkJGaramixdwMqfVkaiBln0HQOv6sG8WZ4rDU30CynXFOWAvM0b6I2n03
oA945/bzEpLCEsD103fBGOwXPzcSx5lfWxE9ZRihxk9RqR5imjNkeXt/Q9CsXE8J
pZAAIRVY8y0D3dqFJlY/sMrNk7nQcoNYouncG9I89y0cWkbxdGW0KWI0ReXaemLa
ptdzk0+KefQ+W0q6BS+nkG330tD0I3cq7YDO94xYMkVToaa9bMD+56LC+/ZUXkSS
CpYPkDegzD+rTPiKSSCZuASDX2HpwAn3oAH+p0nfXX9mQASDwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmOPlqXyAyqtUdfJGaraD1WtHZXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iMTIw
NzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5YTFmNGJmOTcvNTk3NGU3ZTAtNjZjMS0z
NmEwLWEwNzItZTViYzllNmJiODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjEyMDcyZGMtOGIyOS00OWRlLTgw
MGUtMjQzOWExZjRiZjk3L2IxMjA3MmRjLThiMjktNDlkZS04MDBlLTI0MzlhMWY0
YmY5Ny5jcmwwHwYDVR0jBBgwFoAUbbEzuUq4UQp9SSdwpGFXfTla9GYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iMTIwNzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5
YTFmNGJmOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6UIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHlCM+trhXFCtqf3Fk15nk36c0cdJrTLZegE5SLKPkwzIpHK+vnFqhw
1WVpyEnn758qT8j/crsjm/JaaeZpJLmwlTvFpvtFhSwevponk2Y1+yBNg6fv23VQ
328GkpyTjtc7FF1x5KJUbYvXBirwgQG8/Jl0clVUhcHWZmFCvp//uFeXjzOFkxAX
lnEoi3vwFIFdOJ9A+MKVsS6bQKMjbmtoLfgWiWYcsEgLn5rvL5Nfelp8EdrFImkd
/hflVak9kDiWXYmxKyrXZlhgHxhWQ62/7XNPlH0EBCIqfLE49bl1K/tkX01bVpgf
6edrSzwBCSxSpQNThOUEJJJ7dYFrIfg=
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:23:38 2026 by rpki-client