Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/142958a0-84bf-306b-98e6-8ed7f84f6b9e.roa
File:                     142958a0-84bf-306b-98e6-8ed7f84f6b9e.roa (raw, json)
Hash identifier:          VepomSA0ny8giQAeFQIVEHMc1uIQHFxJ93HJN+nd1yY=
Subject key identifier:   6B:B1:19:9A:6F:B2:E1:8C:84:F1:E0:26:68:49:BF:75:AB:49:02:BF
Certificate issuer:       /CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81
Certificate serial:       010D0C9F4328584F4973BF36BDDBB8D840A3F5C0
Authority key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/142958a0-84bf-306b-98e6-8ed7f84f6b9e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     62668
IP address blocks:        23.160.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:bf:36:bd:db:b8:d8:40:a3:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fab3d41c-eb56-40f2-b0ac-46ea4eb87eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:ee:64:1a:d8:e1:ca:c2:80:15:53:b1:85:
                    a1:7e:c6:76:9f:ae:f6:63:c6:4c:3f:e2:c4:fe:32:
                    a1:b7:7d:8a:12:d9:a1:c5:99:1a:e5:0b:6b:38:f7:
                    03:09:83:b8:7d:3f:3c:e3:0a:51:49:35:07:2c:c8:
                    c5:4d:01:2d:ab:76:79:f8:4c:68:cd:a7:ce:76:54:
                    cc:26:b0:92:db:11:d5:1b:86:26:27:ba:54:b9:fe:
                    51:3d:27:61:d3:70:6f:49:b3:cb:ef:ed:21:63:3b:
                    87:74:84:65:cc:56:b9:04:39:41:f4:50:e5:fa:81:
                    22:0a:8a:97:4b:d5:b9:e6:c9:ca:59:e9:02:c7:b5:
                    47:d0:b8:33:30:60:e5:a8:4b:49:91:48:6a:86:38:
                    c0:ef:26:9b:d6:fe:91:19:b4:82:35:02:df:cd:00:
                    f9:af:68:76:4d:84:55:f7:74:65:94:b6:73:67:49:
                    af:ef:62:76:ac:85:0b:be:e2:f1:01:43:17:17:a9:
                    b6:45:38:3e:c2:72:b1:45:0b:ae:36:c8:40:cf:af:
                    6f:79:e2:cd:77:89:78:61:08:40:4b:82:3a:ae:3a:
                    7a:dc:9d:d9:df:83:d3:3b:21:25:54:a4:97:20:ff:
                    49:bd:29:5d:e5:17:84:eb:cb:e2:34:d6:f8:0d:f7:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B1:19:9A:6F:B2:E1:8C:84:F1:E0:26:68:49:BF:75:AB:49:02:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/142958a0-84bf-306b-98e6-8ed7f84f6b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl

            X509v3 Authority Key Identifier:
                keyid:CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:6c:b2:2c:a7:28:cb:de:7d:6b:d0:77:54:c2:60:fd:b0:1a:
         51:8b:17:bf:60:73:46:fd:fe:28:be:77:30:e6:a3:8e:40:02:
         dc:3f:7f:b6:c2:f1:40:47:0b:2f:77:de:4f:a5:af:e1:9e:8e:
         8e:9e:4e:83:ed:b6:b5:57:15:83:1e:4b:13:49:c4:b2:81:22:
         3e:6b:9c:6c:12:f6:13:0a:33:b8:07:fe:c2:6c:e5:05:f8:d3:
         0d:65:d3:e3:ad:f2:dd:e8:5b:84:83:85:a0:3e:76:a3:91:7e:
         8f:f4:92:33:2f:28:2c:a0:c9:a3:6e:da:d0:04:9e:c5:14:b7:
         d2:23:31:f3:e2:fc:20:e7:8f:68:30:40:05:65:53:4b:35:e8:
         f3:7b:43:9a:ae:e6:89:b9:a9:a8:42:df:7b:3e:a0:ff:d9:04:
         54:00:65:75:7f:95:cd:86:e9:f0:2b:16:84:fa:96:9e:81:30:
         d9:06:f4:68:19:50:66:70:6a:34:21:81:7a:a6:46:46:11:d2:
         b7:6c:dc:03:76:92:81:a3:63:b1:0b:5a:01:80:84:0c:90:c8:
         0e:7c:8f:f2:98:e2:05:2f:c4:d2:dd:e0:15:38:91:c5:e0:51:
         fd:70:1a:55:dd:d4:61:76:04:f6:e7:ab:0e:d6:6f:66:2d:f0:
         33:af:06:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc782vdu42ECj9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThi
ZDgxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmFiM2Q0MWMtZWI1Ni00MGYyLWIwYWMtNDZlYTRlYjg3ZWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXjuZBrY4crCgBVTsYWhfsZ2n672Y8ZMP+LE
/jKht32KEtmhxZka5QtrOPcDCYO4fT884wpRSTUHLMjFTQEtq3Z5+ExozafOdlTM
JrCS2xHVG4YmJ7pUuf5RPSdh03BvSbPL7+0hYzuHdIRlzFa5BDlB9FDl+oEiCoqX
S9W55snKWekCx7VH0LgzMGDlqEtJkUhqhjjA7yab1v6RGbSCNQLfzQD5r2h2TYRV
93RllLZzZ0mv72J2rIULvuLxAUMXF6m2RTg+wnKxRQuuNshAz69veeLNd4l4YQhA
S4I6rjp63J3Z34PTOyElVKSXIP9JvSld5ReE68viNNb4Dfe56wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGuxGZpvsuGMhPHgJmhJv3WrSQK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODU1
OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvMTQyOTU4YTAtODRiZi0z
MDZiLTk4ZTYtOGVkN2Y4NGY2YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTg1NTkyYjktOGU3Yi00Y2NiLTg3
ZGMtZTFkZTJlOThiZDgxLzk4NTU5MmI5LThlN2ItNGNjYi04N2RjLWUxZGUyZTk4
YmQ4MS5jcmwwHwYDVR0jBBgwFoAUy0A2wcrf/oqJS/RLPYQLTYZ/2xYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRl
MmU5OGJkODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6DgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMZssiynKMvefWvQd1TCYP2wGlGLF79gc0b9/ii+dzDmo45AAtw/f7bC
8UBHCy933k+lr+Gejo6eToPttrVXFYMeSxNJxLKBIj5rnGwS9hMKM7gH/sJs5QX4
0w1l0+Ot8t3oW4SDhaA+dqORfo/0kjMvKCygyaNu2tAEnsUUt9IjMfPi/CDnj2gw
QAVlU0s16PN7Q5qu5om5qahC33s+oP/ZBFQAZXV/lc2G6fArFoT6lp6BMNkG9GgZ
UGZwajQhgXqmRkYR0rds3AN2koGjY7ELWgGAhAyQyA58j/KY4gUvxNLd4BU4kcXg
Uf1wGlXd1GF2BPbnqw7Wb2Yt8DOvBms=
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:35:18 2026 by rpki-client