Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa
File:                     e8df1d8c-172e-30ec-9499-2164cc775c04.roa (raw, json)
Hash identifier:          uVTzxM4nX4bef2zmBCs/wtyrRao5W2atxO9RwpksXpw=
Subject key identifier:   CD:8B:B1:7A:F3:BD:03:43:68:DF:3D:D5:2D:0C:FE:69:FA:B2:08:87
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F4328584DD09057E3B160518850493680
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     397952
IP address blocks:        23.135.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:57:e3:b1:60:51:88:50:49:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=fd10dafa-2d86-4d44-b247-ca00e5e2f0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:e1:9e:a3:a9:bf:13:f6:b9:32:21:39:b8:
                    a4:be:6d:49:f0:ee:99:16:a5:d2:a9:09:5f:bf:39:
                    42:7a:a4:f6:6a:59:da:f6:90:3b:f1:0b:87:4c:1a:
                    ac:10:87:39:05:b5:95:c2:d8:6b:cf:f8:de:97:c3:
                    b8:66:b9:42:71:35:51:76:a3:96:90:32:c4:14:f4:
                    93:ce:85:4f:97:d6:1a:17:72:df:df:13:69:00:25:
                    34:41:9f:c0:d7:f3:76:39:fa:61:0a:4f:14:b8:5b:
                    41:e3:a7:28:1d:86:25:de:89:17:59:d9:85:0a:0b:
                    a0:ae:40:7a:0b:5b:9d:68:8b:02:94:ff:17:1e:ea:
                    bb:17:58:f8:e1:86:59:e6:8e:bd:a1:9f:11:bb:c5:
                    c8:ec:bd:21:65:dd:5f:ac:86:ba:6b:40:b6:50:6e:
                    55:76:37:3a:15:0d:50:91:b6:d4:39:92:24:75:e2:
                    25:13:be:9d:dc:cc:46:f9:cc:b1:ae:18:7e:bf:20:
                    ad:51:d3:fe:a5:fe:ca:d9:4c:3b:d0:71:e1:44:ef:
                    e0:b0:42:3b:30:04:fd:5f:8e:1a:0b:71:a3:8b:17:
                    b6:a6:05:bc:c8:20:47:0e:6e:2e:66:77:9c:b1:d1:
                    70:e5:96:4c:af:e5:3f:c4:47:75:19:b8:59:f7:b3:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8B:B1:7A:F3:BD:03:43:68:DF:3D:D5:2D:0C:FE:69:FA:B2:08:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:a6:0d:c4:3e:31:23:0d:65:ed:06:78:0c:0b:28:13:07:
         69:29:91:d7:03:69:db:07:40:7f:3c:0f:d7:81:dd:71:82:e2:
         b8:c7:4f:c0:4a:7e:f1:ea:78:41:f1:23:23:58:93:1f:f0:18:
         af:7a:5a:6d:36:40:ba:9e:f3:7c:07:0e:34:72:f5:86:a9:b0:
         1a:85:ca:30:41:6e:b8:b7:42:0d:0c:21:f1:c8:01:7e:fb:d3:
         72:de:49:09:1a:ef:c2:d7:1b:b2:7c:3f:c0:34:6a:e1:6f:17:
         9f:a1:0d:8d:de:3f:52:e6:e1:6e:48:3c:36:a8:16:72:0a:13:
         9a:2f:71:87:af:1a:62:33:15:5f:45:7b:b2:78:40:de:bc:cb:
         ca:e8:43:ff:12:41:8d:ef:26:a1:47:61:b7:9c:3f:88:67:8e:
         c2:4a:15:20:19:02:69:b6:22:9a:3e:10:30:ed:ae:7d:6e:9d:
         60:8d:28:06:70:13:6e:1e:b3:a9:8b:2d:c5:f1:10:4d:e5:bb:
         ba:d1:7f:fa:ea:30:b9:e4:dc:6e:38:27:b0:22:fb:d5:8b:a7:
         41:84:78:bd:0f:51:6b:59:ec:ae:db:81:31:26:c4:8d:e5:e6:
         6c:1f:80:6f:aa:1c:ae:bd:0f:5b:ec:e4:0b:2b:ef:dd:84:cb:
         eb:7a:cd:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkFfjsWBRiFBJNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyNjQ1OTItYmNjMy00OGYxLWE3ODItOGJhNDhmYzUw
NmZhMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZmQxMGRhZmEtMmQ4Ni00ZDQ0LWIyNDctY2EwMGU1ZTJmMGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWzhnqOpvxP2uTIhObikvm1J8O6ZFqXSqQlf
vzlCeqT2alna9pA78QuHTBqsEIc5BbWVwthrz/jel8O4ZrlCcTVRdqOWkDLEFPST
zoVPl9YaF3Lf3xNpACU0QZ/A1/N2OfphCk8UuFtB46coHYYl3okXWdmFCgugrkB6
C1udaIsClP8XHuq7F1j44YZZ5o69oZ8Ru8XI7L0hZd1frIa6a0C2UG5Vdjc6FQ1Q
kbbUOZIkdeIlE76d3MxG+cyxrhh+vyCtUdP+pf7K2Uw70HHhRO/gsEI7MAT9X44a
C3Gjixe2pgW8yCBHDm4uZnecsdFw5ZZMr+U/xEd1GbhZ97M+4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2LsXrzvQNDaN891S0M/mn6sgiHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lODI2
NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0OGZjNTA2ZmEvZThkZjFkOGMtMTcyZS0z
MGVjLTk0OTktMjE2NGNjNzc1YzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTgyNjQ1OTItYmNjMy00OGYxLWE3
ODItOGJhNDhmYzUwNmZhL2U4MjY0NTkyLWJjYzMtNDhmMS1hNzgyLThiYTQ4ZmM1
MDZmYS5jcmwwHwYDVR0jBBgwFoAUiHdMTp8/9MLgRDap8Qq21ISdpwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lODI2NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0
OGZjNTA2ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4fwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPBpg3EPjEjDWXtBngMCygTB2kpkdcDadsHQH88D9eB3XGC4rjHT8BK
fvHqeEHxIyNYkx/wGK96Wm02QLqe83wHDjRy9YapsBqFyjBBbri3Qg0MIfHIAX77
03LeSQka78LXG7J8P8A0auFvF5+hDY3eP1Lm4W5IPDaoFnIKE5ovcYevGmIzFV9F
e7J4QN68y8roQ/8SQY3vJqFHYbecP4hnjsJKFSAZAmm2Ipo+EDDtrn1unWCNKAZw
E24es6mLLcXxEE3lu7rRf/rqMLnk3G44J7Ai+9WLp0GEeL0PUWtZ7K7bgTEmxI3l
5mwfgG+qHK69D1vs5Asr792Ey+t6zWk=
-----END CERTIFICATE-----
Generated at Wed May 13 13:38:57 2026 by rpki-client