Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa
File:                     b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa (raw, json)
Hash identifier:          I42vgHlPdvR4og3Hrq4etxdTwjCqTFBLqChhekUR+rg=
Subject key identifier:   65:27:12:8D:3D:E2:A5:80:A7:DC:9B:8F:F8:80:2A:C5:23:69:4D:DF
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584D9FB571C0ACE9E2F6129A65C0
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     26548
IP address blocks:        23.147.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:71:c0:ac:e9:e2:f6:12:9a:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=4837eb39-008b-40e6-8d67-840d5e3da488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:1b:dc:eb:eb:0a:5d:e9:62:a4:84:b3:a2:
                    88:10:c5:47:5b:c1:36:50:fb:69:cf:da:e9:cd:03:
                    54:da:f9:e8:27:e1:ac:37:0b:e0:b6:7e:04:a6:2a:
                    99:da:3c:3a:8b:dd:08:55:41:2a:ab:dc:27:66:c1:
                    4b:f7:26:98:ab:dc:db:99:3f:01:38:6e:9a:63:4a:
                    6f:78:52:ad:11:8b:81:84:92:3d:95:0c:7b:8f:92:
                    72:ec:05:84:d3:1d:26:29:4d:68:30:38:0b:93:df:
                    9f:fc:54:a8:3e:11:84:ba:ae:b7:70:cb:dc:31:e2:
                    b5:68:61:ff:39:99:ba:4b:2b:5b:f7:a5:86:a3:05:
                    0c:fb:18:3e:d8:f2:fd:2b:66:40:cf:79:26:ab:58:
                    47:b4:dd:18:94:a7:de:2f:03:cb:90:d2:64:4e:9b:
                    e6:c6:38:7a:b9:83:b5:12:59:fa:a9:04:0e:18:ea:
                    4d:a5:a4:c5:68:00:bd:64:dc:5c:6b:92:92:ac:8e:
                    8f:7c:26:d1:77:46:b1:20:8c:04:d5:31:84:13:0f:
                    e1:0e:a3:44:89:3b:a0:ea:b0:a3:39:ae:16:2e:f7:
                    a8:8b:35:01:b6:85:d8:1d:88:1b:c0:c2:39:2d:1d:
                    e4:34:d0:67:3f:30:09:09:eb:a9:a4:4b:a8:af:0e:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:27:12:8D:3D:E2:A5:80:A7:DC:9B:8F:F8:80:2A:C5:23:69:4D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:9a:7a:c2:fe:b3:30:79:ed:de:5e:b8:96:40:35:7d:ca:
         d5:68:4d:1c:f1:47:34:d8:f0:5c:82:41:5b:5b:71:88:b7:c3:
         80:dd:ca:31:34:04:2e:ca:c3:2e:c5:fa:1c:39:0f:bb:44:8a:
         a6:63:24:3b:c3:44:34:1b:88:f5:e6:9c:09:bf:53:da:80:6d:
         30:a9:f3:41:91:c1:9c:f6:74:48:fa:1f:c1:92:6b:04:3a:10:
         5a:dd:c8:18:9b:0d:0a:6b:20:dd:e0:25:15:a1:08:6b:ef:ce:
         62:1f:19:82:25:c8:ab:fe:20:76:f2:bd:f6:37:44:04:44:fa:
         5b:81:42:c3:e4:ef:77:9b:8b:c8:15:66:19:89:93:57:7c:b6:
         62:0c:52:d7:8b:a1:20:2e:89:70:11:71:68:81:eb:52:c1:9c:
         00:54:be:5e:c1:a8:81:fa:10:31:b8:d9:5b:58:40:64:fb:bf:
         b8:22:92:b8:18:3c:84:0d:ec:73:fd:60:bf:9d:10:65:f6:c0:
         5e:f1:59:a3:9d:19:62:a9:97:f2:b7:31:55:ad:45:0a:fc:56:
         9d:60:10:3a:77:a8:51:d2:24:94:a7:0e:4a:5c:32:d4:ac:6d:
         b3:75:07:52:41:95:44:66:0c:d7:5b:47:46:9b:26:aa:ab:92:
         12:21:23:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXHArOni9hKaZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz
MmIzMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
NDgzN2ViMzktMDA4Yi00MGU2LThkNjctODQwZDVlM2RhNDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp0b3OvrCl3pYqSEs6KIEMVHW8E2UPtpz9rp
zQNU2vnoJ+GsNwvgtn4EpiqZ2jw6i90IVUEqq9wnZsFL9yaYq9zbmT8BOG6aY0pv
eFKtEYuBhJI9lQx7j5Jy7AWE0x0mKU1oMDgLk9+f/FSoPhGEuq63cMvcMeK1aGH/
OZm6Sytb96WGowUM+xg+2PL9K2ZAz3kmq1hHtN0YlKfeLwPLkNJkTpvmxjh6uYO1
Eln6qQQOGOpNpaTFaAC9ZNxca5KSrI6PfCbRd0axIIwE1TGEEw/hDqNEiTug6rCj
Oa4WLveoizUBtoXYHYgbwMI5LR3kNNBnPzAJCeuppEuorw62FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUnEo094qWAp9ybj/iAKsUjaU3fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5
YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYjVmNzEyYzItYTdjMy0z
Njk1LWFlNzUtYzc0ZGMwYTk4NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0
ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx
MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh
ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFo7mnrC/rMwee3eXriWQDV9ytVoTRzxRzTY8FyCQVtbcYi3w4DdyjE0
BC7Kwy7F+hw5D7tEiqZjJDvDRDQbiPXmnAm/U9qAbTCp80GRwZz2dEj6H8GSawQ6
EFrdyBibDQprIN3gJRWhCGvvzmIfGYIlyKv+IHbyvfY3RARE+luBQsPk73ebi8gV
ZhmJk1d8tmIMUteLoSAuiXARcWiB61LBnABUvl7BqIH6EDG42VtYQGT7v7gikrgY
PIQN7HP9YL+dEGX2wF7xWaOdGWKpl/K3MVWtRQr8Vp1gEDp3qFHSJJSnDkpcMtSs
bbN1B1JBlURmDNdbR0abJqqrkhIhI+Y=
-----END CERTIFICATE-----
Generated at Wed May 13 04:14:41 2026 by rpki-client