Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa
File:                     08130dbb-3252-364b-9a63-584664ae679d.roa (raw, json)
Hash identifier:          JW95PF43fWMhxnQjcPNNw2ophSJ4P7+twzYAJIDPGdQ=
Subject key identifier:   A2:F7:E0:82:98:70:A2:22:7F:D7:DE:FD:26:41:06:4A:52:26:FB:5C
Certificate issuer:       /CN=b730cada-c66c-43b6-bb7f-5b962c5b9c5c
Certificate serial:       010D0C9F4328584F3A17DC1BDBB01FDCA55722E0
Authority key identifier: B7:C7:3D:36:99:75:E3:5B:A1:DD:44:33:B3:84:B3:93:2F:69:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     27535
IP address blocks:        23.156.56.0/24 maxlen: 24
                          2602:2ec::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:dc:1b:db:b0:1f:dc:a5:57:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b730cada-c66c-43b6-bb7f-5b962c5b9c5c
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=91930bf4-fddc-473e-981c-b8b4e0b03f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:a1:43:98:6c:fc:b5:72:bd:55:ba:18:74:
                    4a:b6:d1:6c:a0:d2:5d:67:91:59:3a:7d:74:91:d4:
                    bc:fd:c2:15:58:57:4b:aa:f9:39:a1:88:c7:da:18:
                    01:56:b8:dc:93:9c:88:13:d1:64:f2:bc:66:1f:78:
                    e2:0b:62:aa:76:18:b0:51:f7:51:b7:34:e4:ea:b4:
                    ba:2f:61:8f:72:1a:f1:8f:26:01:9b:6e:f7:94:a5:
                    ff:75:19:ba:27:1b:68:f5:37:91:4a:a1:03:79:4f:
                    40:a9:5a:a8:44:ec:9c:62:16:e1:ec:78:b5:16:89:
                    7c:12:56:44:b4:66:0e:d2:a8:dc:c0:bc:bf:dd:11:
                    e2:5b:3b:25:b1:6d:66:2b:ed:01:dd:e5:30:7d:08:
                    80:96:36:73:d1:f8:15:15:f9:20:07:c0:ce:fd:dd:
                    5b:8c:25:9d:41:69:0a:f7:3a:6a:23:f4:3d:62:f2:
                    79:6c:66:17:fa:ff:d7:28:1c:9f:45:7b:87:ee:5b:
                    6e:7d:92:f0:a6:a6:da:a3:62:ce:04:16:9b:87:d2:
                    f0:a3:1e:3f:49:d5:b7:b1:8c:2f:0e:dd:00:62:85:
                    ab:84:85:24:f1:0b:e5:d1:21:5b:d3:38:01:a0:fb:
                    95:63:78:0c:2c:a0:f9:82:a5:17:e0:8a:1b:19:97:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F7:E0:82:98:70:A2:22:7F:D7:DE:FD:26:41:06:4A:52:26:FB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:C7:3D:36:99:75:E3:5B:A1:DD:44:33:B3:84:B3:93:2F:69:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.56.0/24
                IPv6:
                  2602:2ec::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:76:39:4d:66:1a:a3:22:9c:f3:51:5c:49:7b:cf:31:0c:
         68:54:09:69:2d:b1:6c:43:28:43:80:c1:1e:c2:4f:f0:47:5c:
         11:65:c4:8f:6e:1f:27:a8:5a:2c:34:d8:01:2a:c2:a2:bf:a5:
         59:a2:2e:27:da:68:29:00:c0:0a:e8:da:42:01:a5:88:6c:27:
         75:33:47:fb:e2:fb:e8:29:7e:f1:2d:56:9f:27:59:82:c4:4e:
         26:72:c9:0c:7e:a2:54:64:a1:40:6e:ef:6e:9a:4a:da:42:91:
         a0:1a:ab:ff:9f:33:ee:79:f0:e6:d8:a9:73:7b:e9:4a:35:8b:
         77:5e:e4:b4:33:34:15:19:03:bf:f7:e2:f4:42:b8:c8:67:d8:
         d7:75:e2:c8:54:52:12:45:03:4d:b3:67:01:83:4b:3f:50:2c:
         f1:d2:25:15:11:f3:d8:56:5f:f2:db:d7:26:4f:5b:04:43:23:
         9f:d7:de:63:ef:26:f1:21:20:9d:a0:d2:10:0a:6f:17:d8:25:
         5f:70:38:9f:ff:cd:b6:bc:4b:4e:f5:e9:42:b5:ab:97:18:e9:
         dc:29:7c:44:7f:de:af:c9:bb:8a:25:6b:cd:28:9d:ba:8c:2c:
         bc:b3:5b:75:50:79:21:4d:1d:79:83:f3:f9:56:70:99:a7:4e:
         db:89:b9:dd
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE86F9wb27Af3KVXIuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjczMGNhZGEtYzY2Yy00M2I2LWJiN2YtNWI5NjJjNWI5
YzVjMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
OTE5MzBiZjQtZmRkYy00NzNlLTk4MWMtYjhiNGUwYjAzZjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpqhQ5hs/LVyvVW6GHRKttFsoNJdZ5FZOn10
kdS8/cIVWFdLqvk5oYjH2hgBVrjck5yIE9Fk8rxmH3jiC2KqdhiwUfdRtzTk6rS6
L2GPchrxjyYBm273lKX/dRm6Jxto9TeRSqEDeU9AqVqoROycYhbh7Hi1Fol8ElZE
tGYO0qjcwLy/3RHiWzslsW1mK+0B3eUwfQiAljZz0fgVFfkgB8DO/d1bjCWdQWkK
9zpqI/Q9YvJ5bGYX+v/XKByfRXuH7ltufZLwpqbao2LOBBabh9Lwox4/SdW3sYwv
Dt0AYoWrhIUk8Qvl0SFb0zgBoPuVY3gMLKD5gqUX4IobGZdrswIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKL34IKYcKIif9fe/SZBBkpSJvtcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iNzMw
Y2FkYS1jNjZjLTQzYjYtYmI3Zi01Yjk2MmM1YjljNWMvMDgxMzBkYmItMzI1Mi0z
NjRiLTlhNjMtNTg0NjY0YWU2NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjczMGNhZGEtYzY2Yy00M2I2LWJi
N2YtNWI5NjJjNWI5YzVjL2I3MzBjYWRhLWM2NmMtNDNiNi1iYjdmLTViOTYyYzVi
OWM1Yy5jcmwwHwYDVR0jBBgwFoAUt8c9Npl141uh3UQzs4Szky9pdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iNzMwY2FkYS1jNjZjLTQzYjYtYmI3Zi01Yjk2
MmM1YjljNWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5w4MA4E
AgACMAgDBgAmAgLsADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOKnY5TWYaoyKc81FcSXvPMQxoVAlpLbFs
QyhDgMEewk/wR1wRZcSPbh8nqFosNNgBKsKiv6VZoi4n2mgpAMAK6NpCAaWIbCd1
M0f74vvoKX7xLVafJ1mCxE4mcskMfqJUZKFAbu9umkraQpGgGqv/nzPuefDm2Klz
e+lKNYt3XuS0MzQVGQO/9+L0QrjIZ9jXdeLIVFISRQNNs2cBg0s/UCzx0iUVEfPY
Vl/y29cmT1sEQyOf195j7ybxISCdoNIQCm8X2CVfcDif/822vEtO9elCtauXGOnc
KXxEf96vybuKJWvNKJ26jCy8s1t1UHkhTR15g/P5VnCZp07bibnd
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:19:50 2026 by rpki-client