Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/0e962d32-34f4-3248-be59-c513dd6f3aff.roa
File:                     0e962d32-34f4-3248-be59-c513dd6f3aff.roa (raw, json)
Hash identifier:          ArgvxgwMUjEPd3BFmz98xrGzlzAMYOHBcIa92rHf8i0=
Subject key identifier:   D9:FA:FA:E9:44:0D:AA:5C:84:13:E4:58:7C:5D:AD:C9:51:C6:C8:B1
Certificate issuer:       /CN=4e318dc1-2d61-46f6-b607-9e142c8bdc5f
Certificate serial:       010D0C9F4328584E7634C62C073E7CD8CD515300
Authority key identifier: 53:E6:D4:7F:9F:21:B4:B3:2C:80:CF:DE:44:16:C4:9A:FC:40:26:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/0e962d32-34f4-3248-be59-c513dd6f3aff.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     214483
IP address blocks:        23.139.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c6:2c:07:3e:7c:d8:cd:51:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e318dc1-2d61-46f6-b607-9e142c8bdc5f
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=0d8dc8c2-3b43-45ed-8c2e-82c455b23359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:dc:52:f4:9b:e5:cd:7c:16:4c:42:96:ca:
                    73:b7:85:5d:4b:eb:b4:74:3e:41:b8:73:ee:5c:81:
                    e1:55:4f:72:6e:5b:5b:e8:fa:aa:4a:31:ba:60:31:
                    86:81:34:15:12:bf:79:db:0a:f8:34:6f:59:0c:ad:
                    77:25:5e:0b:ba:95:d5:d2:4e:ad:ad:25:4e:00:c0:
                    4c:e3:8c:ef:92:bc:c7:32:7b:4c:f9:ba:96:06:e2:
                    00:33:14:fa:88:2c:77:6c:e6:ef:0d:96:b3:53:6a:
                    a1:b0:87:cc:d0:ce:bd:d9:45:2b:fe:d3:a5:c3:73:
                    f5:28:92:80:80:2b:b7:72:16:a9:13:6d:a4:da:a4:
                    ff:ea:5b:ea:b1:7e:a3:fc:7a:1f:d1:e9:f1:80:d7:
                    c4:41:23:ee:2e:27:49:58:5b:7d:c5:a3:92:0f:f1:
                    e7:1d:96:98:6b:d9:1b:2e:d7:06:bb:43:5e:47:43:
                    c7:96:18:7a:2b:7e:48:a8:f6:b6:30:03:29:3f:48:
                    c5:7e:b0:98:3b:c0:e8:42:39:1f:10:94:4a:cd:97:
                    0b:2d:9f:f0:d1:28:cc:b7:df:b3:2b:8d:c4:9f:f5:
                    62:c9:2c:35:2a:67:48:9b:33:a6:ce:59:cd:5d:60:
                    ad:9c:41:6c:54:2d:f1:c3:5c:f2:c6:6f:b0:8b:9b:
                    5f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FA:FA:E9:44:0D:AA:5C:84:13:E4:58:7C:5D:AD:C9:51:C6:C8:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/0e962d32-34f4-3248-be59-c513dd6f3aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.crl

            X509v3 Authority Key Identifier:
                keyid:53:E6:D4:7F:9F:21:B4:B3:2C:80:CF:DE:44:16:C4:9A:FC:40:26:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e318dc1-2d61-46f6-b607-9e142c8bdc5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:21:04:c3:f0:a4:b0:13:1d:1b:da:2c:19:8f:ed:d8:6d:
         5f:c6:eb:78:20:1a:03:02:4f:76:5a:22:90:b7:0c:ab:6b:be:
         7a:93:57:4f:06:24:7b:8c:63:7a:a3:12:24:1d:c9:e9:43:f0:
         2c:71:af:60:22:2c:04:1b:05:cb:0a:16:a2:24:4f:ed:ab:86:
         e1:6e:66:45:35:d6:5c:f7:c6:0b:51:b7:d3:b7:9c:65:36:43:
         9a:a7:4f:e3:ff:28:6c:15:48:c2:38:dd:85:b8:02:ec:20:1d:
         5d:ec:b7:df:da:70:ac:a6:c2:3e:28:32:ec:f1:9b:58:59:c9:
         0e:01:1a:e9:8d:16:16:56:3f:7e:ac:e4:77:26:11:fd:77:01:
         a6:33:9e:64:56:5d:30:1d:1c:9e:15:40:42:ff:e7:2f:1b:b9:
         de:cf:ff:fe:cf:50:d6:6a:85:21:fd:d6:37:c2:62:53:d2:99:
         fe:9c:d6:05:6e:cd:04:5c:ff:34:0e:d8:24:4b:4f:81:fe:35:
         6b:e2:dc:2f:35:d1:64:69:9b:8a:f3:71:24:87:55:2c:bd:5b:
         15:2d:72:33:74:20:1f:02:f9:7d:59:06:cd:40:d2:84:a2:53:
         6b:5d:06:d3:fb:93:95:98:6a:71:60:00:97:54:35:4c:42:55:
         4a:8b:45:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NMYsBz582M1RUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUzMThkYzEtMmQ2MS00NmY2LWI2MDctOWUxNDJjOGJk
YzVmMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
MGQ4ZGM4YzItM2I0My00NWVkLThjMmUtODJjNDU1YjIzMzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6rcUvSb5c18FkxClspzt4VdS+u0dD5BuHPu
XIHhVU9ybltb6PqqSjG6YDGGgTQVEr952wr4NG9ZDK13JV4LupXV0k6trSVOAMBM
44zvkrzHMntM+bqWBuIAMxT6iCx3bObvDZazU2qhsIfM0M692UUr/tOlw3P1KJKA
gCu3chapE22k2qT/6lvqsX6j/Hof0enxgNfEQSPuLidJWFt9xaOSD/HnHZaYa9kb
LtcGu0NeR0PHlhh6K35IqPa2MAMpP0jFfrCYO8DoQjkfEJRKzZcLLZ/w0SjMt9+z
K43En/ViySw1KmdImzOmzlnNXWCtnEFsVC3xw1zyxm+wi5tfWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNn6+ulEDapchBPkWHxdrclRxsixMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ZTMx
OGRjMS0yZDYxLTQ2ZjYtYjYwNy05ZTE0MmM4YmRjNWYvMGU5NjJkMzItMzRmNC0z
MjQ4LWJlNTktYzUxM2RkNmYzYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGUzMThkYzEtMmQ2MS00NmY2LWI2
MDctOWUxNDJjOGJkYzVmLzRlMzE4ZGMxLTJkNjEtNDZmNi1iNjA3LTllMTQyYzhi
ZGM1Zi5jcmwwHwYDVR0jBBgwFoAUU+bUf58htLMsgM/eRBbEmvxAJnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZTMxOGRjMS0yZDYxLTQ2ZjYtYjYwNy05ZTE0
MmM4YmRjNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4usMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfZIQTD8KSwEx0b2iwZj+3YbV/G63ggGgMCT3ZaIpC3DKtrvnqTV08G
JHuMY3qjEiQdyelD8Cxxr2AiLAQbBcsKFqIkT+2rhuFuZkU11lz3xgtRt9O3nGU2
Q5qnT+P/KGwVSMI43YW4AuwgHV3st9/acKymwj4oMuzxm1hZyQ4BGumNFhZWP36s
5HcmEf13AaYznmRWXTAdHJ4VQEL/5y8bud7P//7PUNZqhSH91jfCYlPSmf6c1gVu
zQRc/zQO2CRLT4H+NWvi3C810WRpm4rzcSSHVSy9WxUtcjN0IB8C+X1ZBs1A0oSi
U2tdBtP7k5WYanFgAJdUNUxCVUqLRZc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:11 2026 by rpki-client