Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/07f35b98-765d-38fa-b561-880b9d930f55.roa
File:                     07f35b98-765d-38fa-b561-880b9d930f55.roa (raw, json)
Hash identifier:          baTQGqzNypINkLODhhVuih/kkojl33IIehtAd0UAtTM=
Subject key identifier:   DD:68:EA:20:1D:C0:7B:8D:77:73:83:66:A9:D2:F3:7B:B6:2A:4C:E6
Certificate issuer:       /CN=608c8ba1-b17a-418a-a69d-751fc7e07f95
Certificate serial:       010D0C9F4328584E5D14A8533B9A8025E26B5580
Authority key identifier: 7A:6E:9C:E2:0A:1E:CF:C3:E2:C1:14:6A:71:A8:8F:56:CA:3E:12:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/07f35b98-765d-38fa-b561-880b9d930f55.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     8095
IP address blocks:        23.178.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/608c8ba1-b17a-418a-a69d-751fc7e07f95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/608c8ba1-b17a-418a-a69d-751fc7e07f95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a8:53:3b:9a:80:25:e2:6b:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c8ba1-b17a-418a-a69d-751fc7e07f95
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=4e250b52-0542-4796-b0d0-da80a530f446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:21:74:b4:9a:76:cb:64:79:7f:e4:66:4c:db:
                    25:7c:ec:36:d5:d2:d9:0a:06:88:20:7b:6a:68:72:
                    dc:f9:e8:b4:fa:b7:09:19:42:de:53:79:22:c8:76:
                    c8:e0:41:c4:ba:b9:18:75:2c:63:69:a1:2a:37:e0:
                    ff:49:ba:fe:82:57:ce:c7:7f:fe:a6:f9:67:32:85:
                    93:e0:ac:c0:94:bc:73:c2:8c:f4:d9:2c:2f:94:cd:
                    30:b7:88:79:e4:02:60:aa:f4:e3:62:f8:51:c1:dc:
                    96:99:85:42:8f:de:81:1d:1a:12:30:6b:37:ef:5c:
                    ae:eb:ea:8b:43:b5:41:34:05:69:28:3c:87:04:41:
                    d8:04:34:7f:7e:f2:2f:b6:f3:f5:94:32:d8:b9:5c:
                    b8:55:16:dc:fc:e6:9f:9b:98:57:36:bc:61:56:cd:
                    8a:2e:f2:1e:cd:56:23:6c:1b:85:27:f8:4e:c0:a7:
                    19:fc:b4:2a:85:4b:1d:e6:18:14:10:63:dc:bb:26:
                    06:66:10:61:36:50:75:ce:0b:5a:26:ae:50:6e:e2:
                    e7:0c:ff:a8:da:40:d1:fc:b5:f1:3f:3d:3f:bb:c4:
                    9c:eb:32:e3:7d:30:ff:57:3d:70:b8:b9:91:6c:93:
                    e7:05:5e:cb:6f:d5:ba:1d:1b:57:07:40:e6:05:da:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:68:EA:20:1D:C0:7B:8D:77:73:83:66:A9:D2:F3:7B:B6:2A:4C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/07f35b98-765d-38fa-b561-880b9d930f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/608c8ba1-b17a-418a-a69d-751fc7e07f95.crl

            X509v3 Authority Key Identifier:
                keyid:7A:6E:9C:E2:0A:1E:CF:C3:E2:C1:14:6A:71:A8:8F:56:CA:3E:12:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:52:af:67:18:8d:81:dc:0f:d1:34:a8:c3:2c:27:8c:11:21:
         5c:5b:37:33:e8:81:bf:67:9e:d7:28:23:3a:aa:08:bd:35:2a:
         4a:b4:62:da:bb:de:4b:96:36:79:e0:fa:a3:5c:2e:83:ba:e9:
         f1:e4:e5:3a:f8:34:af:b2:e2:5f:a0:24:fe:3a:69:a0:db:20:
         a2:40:18:5a:8f:43:86:01:c2:77:ce:39:1f:b0:25:f5:df:5c:
         93:6a:9e:24:75:10:0d:d6:45:f3:6e:f8:7c:fa:fd:2d:96:6e:
         10:cb:97:1a:fd:e3:89:4c:00:35:52:34:28:ab:0e:29:48:de:
         9b:af:d1:93:45:cb:63:09:34:35:0e:4c:93:e2:12:2c:f4:58:
         8e:52:6f:3e:bb:6b:9f:fb:55:04:b5:51:ce:8b:e7:59:82:ac:
         bc:72:2c:5f:ca:5b:c3:6c:6b:fc:6a:a6:8b:02:83:ed:76:a5:
         6f:3e:8a:bf:5e:a7:47:10:3a:d2:e8:63:e6:ae:a1:05:b4:d4:
         b7:76:d0:55:a9:cf:9f:12:3c:b0:57:ac:f7:25:b8:bb:4a:16:
         16:b9:d6:d0:97:78:94:8a:c8:44:68:20:35:ba:23:68:77:91:
         f8:5d:7f:a0:6d:24:7a:24:a9:8d:02:aa:fe:37:94:3e:95:6c:
         05:ce:d0:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKhTO5qAJeJrVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA4YzhiYTEtYjE3YS00MThhLWE2OWQtNzUxZmM3ZTA3
Zjk1MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
NGUyNTBiNTItMDU0Mi00Nzk2LWIwZDAtZGE4MGE1MzBmNDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiF0tJp2y2R5f+RmTNslfOw21dLZCgaIIHtq
aHLc+ei0+rcJGULeU3kiyHbI4EHEurkYdSxjaaEqN+D/Sbr+glfOx3/+pvlnMoWT
4KzAlLxzwoz02SwvlM0wt4h55AJgqvTjYvhRwdyWmYVCj96BHRoSMGs371yu6+qL
Q7VBNAVpKDyHBEHYBDR/fvIvtvP1lDLYuVy4VRbc/Oafm5hXNrxhVs2KLvIezVYj
bBuFJ/hOwKcZ/LQqhUsd5hgUEGPcuyYGZhBhNlB1zgtaJq5QbuLnDP+o2kDR/LXx
Pz0/u8Sc6zLjfTD/Vz1wuLmRbJPnBV7Lb9W6HRtXB0DmBdryswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1o6iAdwHuNd3ODZqnS83u2KkzmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MDhj
OGJhMS1iMTdhLTQxOGEtYTY5ZC03NTFmYzdlMDdmOTUvMDdmMzViOTgtNzY1ZC0z
OGZhLWI1NjEtODgwYjlkOTMwZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjA4YzhiYTEtYjE3YS00MThhLWE2
OWQtNzUxZmM3ZTA3Zjk1LzYwOGM4YmExLWIxN2EtNDE4YS1hNjlkLTc1MWZjN2Uw
N2Y5NS5jcmwwHwYDVR0jBBgwFoAUem6c4goez8PiwRRqcaiPVso+EtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82MDhjOGJhMS1iMTdhLTQxOGEtYTY5ZC03NTFm
YzdlMDdmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7JoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNSr2cYjYHcD9E0qMMsJ4wRIVxbNzPogb9nntcoIzqqCL01Kkq0Ytq7
3kuWNnng+qNcLoO66fHk5Tr4NK+y4l+gJP46aaDbIKJAGFqPQ4YBwnfOOR+wJfXf
XJNqniR1EA3WRfNu+Hz6/S2WbhDLlxr944lMADVSNCirDilI3puv0ZNFy2MJNDUO
TJPiEiz0WI5Sbz67a5/7VQS1Uc6L51mCrLxyLF/KW8Nsa/xqposCg+12pW8+ir9e
p0cQOtLoY+auoQW01Ld20FWpz58SPLBXrPcluLtKFha51tCXeJSKyERoIDW6I2h3
kfhdf6BtJHokqY0Cqv43lD6VbAXO0EM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:24 2026 by rpki-client