Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/d7b31348-a718-3a86-8c95-328e00d36578.roa
File:                     d7b31348-a718-3a86-8c95-328e00d36578.roa (raw, json)
Hash identifier:          twA9MNnpV20XH16V9fZn9NKNIm0WMXUL9PDu5ZXtNh8=
Subject key identifier:   EC:6A:7E:B3:3C:16:7D:F7:7E:2F:92:D1:21:7D:7B:79:50:4F:85:32
Certificate issuer:       /CN=ce5da6ad-b990-4402-a862-1c9a918309ea
Certificate serial:       010D0C9F4328584F4987043D06760CD9BB951B68
Authority key identifier: F6:B5:DA:FB:36:F0:76:9A:48:DB:91:DA:E2:16:EC:8D:C7:AE:01:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/d7b31348-a718-3a86-8c95-328e00d36578.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55149
IP address blocks:        23.141.248.0/24 maxlen: 24
                          2602:fb01::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/ce5da6ad-b990-4402-a862-1c9a918309ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/ce5da6ad-b990-4402-a862-1c9a918309ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:04:3d:06:76:0c:d9:bb:95:1b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5da6ad-b990-4402-a862-1c9a918309ea
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=08a1a114-f282-4545-abbc-df819b235c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:e9:6d:f1:81:85:0e:2c:0e:d5:b6:31:31:
                    50:df:67:3a:28:ce:e3:bf:7a:fd:dd:0c:b8:99:37:
                    05:fb:22:bd:35:31:bd:39:ea:d9:42:2e:fc:d5:85:
                    85:d4:de:6f:05:de:f9:39:6a:c3:f5:38:52:31:78:
                    06:d0:64:89:07:b1:aa:6f:ca:a6:4b:82:52:fc:00:
                    06:e7:4d:f2:1d:c2:f4:77:90:df:d3:a9:15:fa:9f:
                    3a:8d:a7:c9:62:be:dc:1e:77:8b:d2:7f:b0:ca:a2:
                    8f:b6:63:17:61:2a:91:e2:05:0d:8b:10:c4:a1:df:
                    e4:b7:13:40:43:93:5e:69:c2:ee:80:c6:9d:f1:7f:
                    10:25:4c:c9:30:b7:a5:05:13:f3:d2:b8:93:c8:60:
                    aa:fe:03:4d:eb:2a:84:5c:8a:01:56:49:07:ac:d2:
                    f9:b5:05:0c:72:40:f9:b0:8b:25:90:1e:27:74:4c:
                    95:1f:b2:0c:b0:38:30:59:b3:60:f3:e2:fd:25:85:
                    f1:c4:9c:bd:5c:14:66:8a:90:d9:01:9f:9b:5b:c9:
                    3b:3c:0b:6e:22:0a:79:d6:23:6f:81:93:c4:2b:5d:
                    38:55:9a:d3:fe:78:eb:cb:87:44:15:90:7a:bb:cd:
                    d5:a6:22:e7:9d:24:9f:e7:9e:d2:96:e4:50:d4:b4:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6A:7E:B3:3C:16:7D:F7:7E:2F:92:D1:21:7D:7B:79:50:4F:85:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/d7b31348-a718-3a86-8c95-328e00d36578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/ce5da6ad-b990-4402-a862-1c9a918309ea.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B5:DA:FB:36:F0:76:9A:48:DB:91:DA:E2:16:EC:8D:C7:AE:01:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.248.0/24
                IPv6:
                  2602:fb01::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:42:6a:72:de:22:96:0b:5f:00:3a:5c:15:2c:fe:51:54:10:
         a6:bb:b9:05:dd:b7:22:cb:59:d6:14:7f:2a:16:d0:51:99:30:
         f2:b8:83:a9:67:e8:f8:e7:9c:74:fb:3e:39:92:87:a3:24:e6:
         73:c7:63:c4:c2:32:f6:49:13:53:6e:eb:e1:da:ab:1d:d6:1c:
         3f:71:69:0d:bd:8a:3e:55:ae:db:9e:da:f6:4d:7b:de:dd:2f:
         46:da:64:ae:3d:7c:5f:a4:2d:da:45:97:9e:dc:2f:58:25:15:
         fb:3e:76:dd:5b:ce:29:23:33:da:ca:c0:d6:de:b0:62:36:85:
         e2:57:6e:fc:87:69:83:8c:5e:fa:14:5b:45:1d:70:53:f6:6b:
         0b:09:d6:8e:9a:cb:24:58:83:8d:b1:89:6b:af:d9:2e:96:cc:
         6b:9c:fd:fe:d1:89:e2:01:88:28:b6:c0:0d:ad:d9:bc:66:75:
         88:fc:53:b7:ef:82:cb:d5:91:3a:57:ac:7c:75:95:c6:09:0d:
         4c:26:13:de:89:e0:ae:f3:9d:59:8b:95:d1:04:17:9b:09:21:
         8e:47:3a:fd:95:af:81:91:13:34:ac:a7:70:4b:cf:83:fc:b4:
         0b:af:df:6e:8d:df:2f:7b:5f:7c:50:91:25:3d:6d:f0:50:ab:
         a3:e2:52:fe
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JhwQ9BnYM2buVG2gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U1ZGE2YWQtYjk5MC00NDAyLWE4NjItMWM5YTkxODMw
OWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDhhMWExMTQtZjI4Mi00NTQ1LWFiYmMtZGY4MTliMjM1YzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aDpbfGBhQ4sDtW2MTFQ32c6KM7jv3r93Qy4
mTcF+yK9NTG9OerZQi781YWF1N5vBd75OWrD9ThSMXgG0GSJB7Gqb8qmS4JS/AAG
503yHcL0d5Df06kV+p86jafJYr7cHneL0n+wyqKPtmMXYSqR4gUNixDEod/ktxNA
Q5NeacLugMad8X8QJUzJMLelBRPz0riTyGCq/gNN6yqEXIoBVkkHrNL5tQUMckD5
sIslkB4ndEyVH7IMsDgwWbNg8+L9JYXxxJy9XBRmipDZAZ+bW8k7PAtuIgp51iNv
gZPEK104VZrT/njry4dEFZB6u83VpiLnnSSf557SluRQ1LS8fwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFOxqfrM8Fn33fi+S0SF9e3lQT4UyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZTVk
YTZhZC1iOTkwLTQ0MDItYTg2Mi0xYzlhOTE4MzA5ZWEvZDdiMzEzNDgtYTcxOC0z
YTg2LThjOTUtMzI4ZTAwZDM2NTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2U1ZGE2YWQtYjk5MC00NDAyLWE4
NjItMWM5YTkxODMwOWVhL2NlNWRhNmFkLWI5OTAtNDQwMi1hODYyLTFjOWE5MTgz
MDllYS5jcmwwHwYDVR0jBBgwFoAU9rXa+zbwdppI25Ha4hbsjceuAccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jZTVkYTZhZC1iOTkwLTQ0MDItYTg2Mi0xYzlh
OTE4MzA5ZWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF434MA4E
AgACMAgDBgAmAvsBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiQmpy3iKWC18AOlwVLP5RVBCmu7kF3bci
y1nWFH8qFtBRmTDyuIOpZ+j455x0+z45koejJOZzx2PEwjL2SRNTbuvh2qsd1hw/
cWkNvYo+Va7bntr2TXve3S9G2mSuPXxfpC3aRZee3C9YJRX7PnbdW84pIzPaysDW
3rBiNoXiV278h2mDjF76FFtFHXBT9msLCdaOmsskWIONsYlrr9kulsxrnP3+0Yni
AYgotsANrdm8ZnWI/FO374LL1ZE6V6x8dZXGCQ1MJhPeieCu851Zi5XRBBebCSGO
Rzr9la+BkRM0rKdwS8+D/LQLr99ujd8ve198UJElPW3wUKuj4lL+
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:51:21 2026 by rpki-client