Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/1d4b101f-562e-3889-99f0-f6015f57c07e.roa
File:                     1d4b101f-562e-3889-99f0-f6015f57c07e.roa (raw, json)
Hash identifier:          lg1ITF23mlXS+QWsr/hzRKNjimNymTofyzgg98f9hVM=
Subject key identifier:   40:A4:74:DF:1F:B7:92:C4:02:3D:99:4C:7C:53:C3:31:96:DC:94:5C
Certificate issuer:       /CN=55e6662c-1696-40b5-91c0-eb4544d58c78
Certificate serial:       010D0C9F4328584D44FA61850D7B1E5F89666540
Authority key identifier: 22:D4:DB:FE:32:02:F9:32:02:A4:4C:43:C5:93:AF:FE:D1:AA:7C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/1d4b101f-562e-3889-99f0-f6015f57c07e.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     8796
IP address blocks:        23.138.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/55e6662c-1696-40b5-91c0-eb4544d58c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/55e6662c-1696-40b5-91c0-eb4544d58c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:61:85:0d:7b:1e:5f:89:66:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e6662c-1696-40b5-91c0-eb4544d58c78
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=7d6cb07b-eb11-4e8e-8916-56696f1c71c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:39:a2:06:8b:ed:ba:95:35:5d:fb:e7:0b:
                    9c:de:aa:de:bc:b8:32:0e:6e:47:77:95:cc:ff:fc:
                    43:cc:ed:53:c3:c8:a5:bd:6b:62:b6:8c:03:87:b0:
                    62:21:0f:87:e8:38:f6:03:d0:6c:76:c7:e4:3b:f4:
                    35:5a:a9:4f:ff:f1:63:ce:3d:bd:08:b5:78:f8:1f:
                    f3:31:b6:bc:1b:0b:27:53:7c:d3:e1:bb:d4:8a:1d:
                    f4:97:e8:ae:fa:49:64:7f:05:7a:44:93:1c:d7:55:
                    0f:b2:32:aa:c2:45:79:12:21:59:14:04:13:3e:96:
                    a1:65:8a:99:92:10:7e:2a:97:ed:5c:87:64:20:4c:
                    61:47:eb:e6:af:a7:aa:89:ea:2b:3e:f9:66:a1:50:
                    c2:a1:09:7a:cc:93:77:f8:fa:49:08:90:8e:f2:ef:
                    1f:b9:ab:0f:16:c1:55:15:2f:eb:1d:6d:30:e9:f5:
                    dc:8e:37:d4:e0:b6:b8:64:b3:29:5a:2c:d9:a4:34:
                    e6:50:70:a8:52:e1:05:53:43:17:66:ab:3f:9d:14:
                    c4:31:16:9c:90:2a:97:d1:53:d2:88:58:76:43:c1:
                    71:b3:bc:73:d8:a5:09:48:a7:84:e6:20:3d:f0:3b:
                    07:67:d2:2f:31:68:e0:87:b5:81:24:44:45:51:38:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A4:74:DF:1F:B7:92:C4:02:3D:99:4C:7C:53:C3:31:96:DC:94:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/1d4b101f-562e-3889-99f0-f6015f57c07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/55e6662c-1696-40b5-91c0-eb4544d58c78.crl

            X509v3 Authority Key Identifier:
                keyid:22:D4:DB:FE:32:02:F9:32:02:A4:4C:43:C5:93:AF:FE:D1:AA:7C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:a1:81:e2:16:c6:68:46:a4:c0:29:c4:cd:44:c8:80:b6:76:
         8f:b7:a9:2e:90:76:a2:f7:d5:48:f9:5d:4c:5a:7a:a8:72:4f:
         45:1c:c9:07:78:45:27:fe:c4:85:53:95:b9:0d:3c:46:f6:98:
         b6:96:08:63:51:6f:3b:36:dd:7a:99:94:60:ec:fb:a2:c1:01:
         6a:16:43:dd:48:b5:fa:33:be:52:61:51:0a:07:fe:3c:3f:21:
         3f:0b:64:e6:5d:e0:04:19:a9:b8:0b:aa:21:c8:20:ab:a4:7c:
         c8:13:7e:01:19:8d:64:4b:1b:c2:b5:a9:3c:3a:37:42:b9:5f:
         dc:33:02:71:bf:0a:f6:f5:3f:5f:34:ac:7c:95:80:a0:bd:9e:
         45:d3:37:7a:0f:4f:50:8d:74:01:fc:ad:70:46:51:fc:e0:38:
         ff:9a:05:3c:79:cd:c1:98:a7:6e:62:dd:2e:92:15:cc:66:77:
         da:c2:3e:fa:7c:d4:a9:6a:91:9e:98:39:be:7a:03:11:80:91:
         45:55:09:b4:fc:bc:43:21:9a:e4:f1:03:5b:07:1b:6f:eb:bf:
         ea:64:16:a0:21:5e:99:36:59:91:4a:1a:e6:1c:83:0b:f0:f3:
         12:96:4e:15:34:01:46:a8:15:af:00:23:5b:f9:b0:8a:89:74:
         90:a7:3f:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mGFDXseX4lmZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVlNjY2MmMtMTY5Ni00MGI1LTkxYzAtZWI0NTQ0ZDU4
Yzc4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
N2Q2Y2IwN2ItZWIxMS00ZThlLTg5MTYtNTY2OTZmMWM3MWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw145ogaL7bqVNV375wuc3qrevLgyDm5Hd5XM
//xDzO1Tw8ilvWtitowDh7BiIQ+H6Dj2A9BsdsfkO/Q1WqlP//Fjzj29CLV4+B/z
Mba8GwsnU3zT4bvUih30l+iu+klkfwV6RJMc11UPsjKqwkV5EiFZFAQTPpahZYqZ
khB+KpftXIdkIExhR+vmr6eqieorPvlmoVDCoQl6zJN3+PpJCJCO8u8fuasPFsFV
FS/rHW0w6fXcjjfU4La4ZLMpWizZpDTmUHCoUuEFU0MXZqs/nRTEMRackCqX0VPS
iFh2Q8Fxs7xz2KUJSKeE5iA98DsHZ9IvMWjgh7WBJERFUTj4cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECkdN8ft5LEAj2ZTHxTwzGW3JRcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81NWU2
NjYyYy0xNjk2LTQwYjUtOTFjMC1lYjQ1NDRkNThjNzgvMWQ0YjEwMWYtNTYyZS0z
ODg5LTk5ZjAtZjYwMTVmNTdjMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTVlNjY2MmMtMTY5Ni00MGI1LTkx
YzAtZWI0NTQ0ZDU4Yzc4LzU1ZTY2NjJjLTE2OTYtNDBiNS05MWMwLWViNDU0NGQ1
OGM3OC5jcmwwHwYDVR0jBBgwFoAUItTb/jIC+TICpExDxZOv/tGqfHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81NWU2NjYyYy0xNjk2LTQwYjUtOTFjMC1lYjQ1
NDRkNThjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKGhgeIWxmhGpMApxM1EyIC2do+3qS6QdqL31Uj5XUxaeqhyT0UcyQd4
RSf+xIVTlbkNPEb2mLaWCGNRbzs23XqZlGDs+6LBAWoWQ91ItfozvlJhUQoH/jw/
IT8LZOZd4AQZqbgLqiHIIKukfMgTfgEZjWRLG8K1qTw6N0K5X9wzAnG/Cvb1P180
rHyVgKC9nkXTN3oPT1CNdAH8rXBGUfzgOP+aBTx5zcGYp25i3S6SFcxmd9rCPvp8
1KlqkZ6YOb56AxGAkUVVCbT8vEMhmuTxA1sHG2/rv+pkFqAhXpk2WZFKGuYcgwvw
8xKWThU0AUaoFa8AI1v5sIqJdJCnP1I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:35:53 2026 by rpki-client