Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9865771-aa6c-3d4b-a9e9-01f7580992c0.roa
File:                     b9865771-aa6c-3d4b-a9e9-01f7580992c0.roa (raw, json)
Hash identifier:          yZKX+HytOuAANzOD9iOklS2hdUrdKCfZxGejIpvB0rU=
Subject key identifier:   BD:78:FC:FA:56:A7:80:F6:86:72:E8:EE:0E:5E:60:4D:E2:F8:25:92
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D9A202EF3602F26E998DFDC80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9865771-aa6c-3d4b-a9e9-01f7580992c0.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     62904
IP address blocks:        23.231.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2e:f3:60:2f:26:e9:98:df:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=e7d56e52-ac52-4817-bb56-3d226bd3293f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:27:6a:ca:84:0a:a1:30:3b:b6:a8:61:d7:8c:
                    c6:96:ee:33:c7:94:cf:26:91:a0:d7:7c:75:ee:bf:
                    ee:a5:30:5d:05:90:98:ac:07:57:4e:16:bc:2e:76:
                    11:8b:b1:52:52:95:26:c8:a5:1a:5b:ca:e8:0c:0c:
                    a3:0d:bd:9d:3d:66:bb:ed:b4:6f:36:b5:c2:80:b7:
                    6d:74:d6:bd:69:f3:bb:ac:3b:03:00:ee:e1:d4:79:
                    52:00:43:2e:22:a9:6a:a1:ea:3f:f0:65:52:8f:25:
                    d5:66:a4:ba:b3:9e:34:ac:32:fa:d7:8b:a9:2d:f3:
                    fc:7d:41:8d:80:ca:f7:e9:7f:24:91:47:2f:cd:e0:
                    87:63:02:aa:6b:64:cc:c6:87:eb:a1:41:07:43:05:
                    66:53:85:79:5e:39:cf:b9:f6:69:23:3d:63:8e:18:
                    00:eb:88:43:9b:bd:b1:a9:07:fb:63:0f:dc:48:3c:
                    53:a0:21:c3:73:ae:f6:55:54:1a:69:ac:48:82:69:
                    f6:c8:41:a1:bb:a5:e7:45:45:60:38:83:2e:29:d1:
                    58:d6:85:e1:07:8c:ec:67:72:2b:0c:5d:77:33:85:
                    ac:fd:9e:4e:a7:d4:76:f2:78:8b:15:d3:2a:72:63:
                    c3:ff:c6:d4:db:81:68:8a:e5:5c:a0:fa:b9:aa:d5:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:78:FC:FA:56:A7:80:F6:86:72:E8:EE:0E:5E:60:4D:E2:F8:25:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9865771-aa6c-3d4b-a9e9-01f7580992c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:a5:67:62:86:51:8d:e2:3d:b3:72:52:20:8b:31:e7:30:
         e4:0a:bc:5b:81:b5:c9:3b:e2:ca:db:a1:7e:48:d4:ad:1b:e6:
         11:09:e0:0b:70:b5:0c:e1:c1:2d:c4:fa:14:ec:b1:aa:59:f6:
         ee:15:85:7e:2b:53:5f:af:02:89:b2:7b:1c:c4:74:b7:d9:d0:
         ef:47:68:e6:18:6f:1b:b8:17:71:12:28:bb:12:e9:b7:95:fe:
         18:4b:26:0b:20:d6:df:51:1c:01:75:ce:31:7e:8b:41:82:f7:
         3e:98:1d:67:82:d1:62:c0:eb:a2:df:fc:60:f2:69:8d:3a:a2:
         52:83:82:bc:6a:88:54:38:09:a7:f6:7b:f0:de:8b:42:11:2d:
         a0:0d:63:ad:ce:a7:5c:c1:83:52:16:87:0d:d5:59:7a:88:22:
         8f:5d:a8:24:79:08:ee:9a:07:b7:14:5a:bf:c5:37:c8:45:45:
         be:8f:93:58:ac:15:85:b8:2d:95:e5:3f:ea:66:a8:1a:61:8b:
         cf:64:c3:5e:8b:e7:5d:fb:3d:44:4d:11:27:76:ff:74:3a:37:
         95:66:e0:0f:69:b4:cd:f0:fb:e0:93:dd:9c:fb:87:05:31:7c:
         6e:20:94:c2:53:e2:11:7b:c9:e1:40:1b:d4:c8:81:c9:e8:af:
         25:a0:68:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIC7zYC8m6Zjf3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
ZTdkNTZlNTItYWM1Mi00ODE3LWJiNTYtM2QyMjZiZDMyOTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SdqyoQKoTA7tqhh14zGlu4zx5TPJpGg13x1
7r/upTBdBZCYrAdXTha8LnYRi7FSUpUmyKUaW8roDAyjDb2dPWa77bRvNrXCgLdt
dNa9afO7rDsDAO7h1HlSAEMuIqlqoeo/8GVSjyXVZqS6s540rDL614upLfP8fUGN
gMr36X8kkUcvzeCHYwKqa2TMxofroUEHQwVmU4V5XjnPufZpIz1jjhgA64hDm72x
qQf7Yw/cSDxToCHDc672VVQaaaxIgmn2yEGhu6XnRUVgOIMuKdFY1oXhB4zsZ3Ir
DF13M4Ws/Z5Op9R28niLFdMqcmPD/8bU24FoiuVcoPq5qtWTgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL14/PpWp4D2hnLo7g5eYE3i+CWSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjk4NjU3NzEtYWE2Yy0z
ZDRiLWE5ZTktMDFmNzU4MDk5MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+dYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACshpWdihlGN4j2zclIgizHnMOQKvFuBtck74srboX5I1K0b5hEJ4Atw
tQzhwS3E+hTssapZ9u4VhX4rU1+vAomyexzEdLfZ0O9HaOYYbxu4F3ESKLsS6beV
/hhLJgsg1t9RHAF1zjF+i0GC9z6YHWeC0WLA66Lf/GDyaY06olKDgrxqiFQ4Caf2
e/Dei0IRLaANY63Op1zBg1IWhw3VWXqIIo9dqCR5CO6aB7cUWr/FN8hFRb6Pk1is
FYW4LZXlP+pmqBphi89kw16L5137PURNESd2/3Q6N5Vm4A9ptM3w++CT3Zz7hwUx
fG4glMJT4hF7yeFAG9TIgcnoryWgaOc=
-----END CERTIFICATE-----
Generated at Wed May 13 14:39:05 2026 by rpki-client