Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
File:                     b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa (raw, json)
Hash identifier:          PpMBAeqjAyCv+bwpLyd+2LDf3eXTypLteqhETib6TT8=
Subject key identifier:   D8:BF:80:32:08:CF:44:06:4B:97:9F:9A:FE:49:D2:EE:09:98:A3:31
Certificate issuer:       /CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f
Certificate serial:       010D0C9F4328584DC40048A4DBD44B4EF67DE7C0
Authority key identifier: 7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     46384
IP address blocks:        23.171.64.0/24 maxlen: 24
                          23.171.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:48:a4:db:d4:4b:4e:f6:7d:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=6799ba6f-bac9-4e15-b273-b00c137cdf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:66:2f:ca:eb:a6:be:be:06:08:ac:a1:c2:d5:
                    75:ec:40:d9:7e:c1:75:6d:d5:8a:81:d0:4d:2e:27:
                    19:d0:7a:a7:72:a7:5d:2a:d2:57:fb:02:5c:dd:98:
                    e6:6c:de:14:2e:07:4d:cc:fd:25:2d:92:6b:ce:05:
                    cd:56:cb:2e:26:b2:3f:0f:65:57:45:7c:0c:98:6a:
                    44:a6:05:9b:98:68:14:be:bc:eb:1c:9d:34:43:dc:
                    97:e4:58:c4:c8:12:c0:d6:a4:7c:69:68:62:2b:c2:
                    2b:2f:b4:19:51:cf:7d:c3:62:83:d9:31:78:8a:fb:
                    ff:d8:5b:cf:5c:db:99:42:2b:e1:55:f0:31:89:14:
                    65:de:0a:7b:47:c7:5f:de:8e:6d:e7:48:a2:ad:84:
                    d3:58:bb:d0:4c:f3:e3:c7:14:da:84:0f:a8:bf:a5:
                    09:46:51:96:ed:e9:86:ba:94:c3:75:2b:c3:35:68:
                    ab:60:38:49:9d:69:b3:9e:34:37:dd:69:db:2a:e6:
                    df:a1:d7:ca:6d:f5:24:20:28:d5:fe:97:5c:9a:7e:
                    37:ab:f3:5f:5b:b8:40:4d:dc:fe:9f:e1:fc:9f:86:
                    97:08:5a:c3:8e:f4:26:8c:09:f5:04:a2:62:2b:01:
                    43:40:6a:2c:bc:16:47:08:6c:70:9e:68:fe:06:45:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BF:80:32:08:CF:44:06:4B:97:9F:9A:FE:49:D2:EE:09:98:A3:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:92:e8:e6:4b:fa:7b:16:f5:8a:4a:d8:4b:28:bb:a4:1b:
         57:5e:60:55:d4:29:97:c8:7c:ee:d0:07:37:b3:ab:86:b5:08:
         21:21:41:be:4a:4e:83:5a:b9:88:8a:1b:79:91:3e:0a:23:3a:
         42:01:77:89:d2:3f:35:89:f7:0b:63:7b:bf:09:e7:6b:b0:64:
         df:c8:2b:c4:f7:b2:32:90:77:06:1c:36:cd:4a:33:cb:ff:d5:
         eb:03:63:8b:29:e1:ec:6f:e3:25:71:94:d5:02:a1:20:7f:d2:
         7b:70:9c:17:54:1f:34:cc:c3:cd:9a:ba:81:20:7e:a4:13:32:
         a2:72:81:b3:ca:86:a5:68:fe:62:cd:d8:c9:73:f4:fb:a1:9d:
         25:70:1c:3c:6f:a5:6c:72:c0:c4:b1:6e:55:ec:af:09:e4:7d:
         5a:ca:b9:92:c9:37:8c:4b:ac:3b:11:39:e7:66:fb:70:57:84:
         ac:60:88:f0:1f:fb:b9:b1:72:63:23:8b:7b:1f:81:ee:d6:63:
         be:87:63:c6:01:c9:94:89:5e:70:7b:e5:41:75:07:c2:de:76:
         77:f4:e6:5d:b3:a7:f0:d7:88:ea:3c:75:ed:d3:9a:28:f3:fa:
         66:c5:51:e1:28:c3:15:ff:52:bf:e3:c3:2b:34:c7:7f:7b:c8:
         da:38:43:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAEik29RLTvZ958AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRlY2JlOGYtOGIzOC00ZTY4LWJjYWMtMGViYWU0NzRi
YjNmMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk
Njc5OWJhNmYtYmFjOS00ZTE1LWIyNzMtYjAwYzEzN2NkZjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWYvyuumvr4GCKyhwtV17EDZfsF1bdWKgdBN
LicZ0HqncqddKtJX+wJc3ZjmbN4ULgdNzP0lLZJrzgXNVssuJrI/D2VXRXwMmGpE
pgWbmGgUvrzrHJ00Q9yX5FjEyBLA1qR8aWhiK8IrL7QZUc99w2KD2TF4ivv/2FvP
XNuZQivhVfAxiRRl3gp7R8df3o5t50iirYTTWLvQTPPjxxTahA+ov6UJRlGW7emG
upTDdSvDNWirYDhJnWmznjQ33WnbKubfodfKbfUkICjV/pdcmn43q/NfW7hATdz+
n+H8n4aXCFrDjvQmjAn1BKJiKwFDQGosvBZHCGxwnmj+BkVLhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNi/gDIIz0QGS5efmv5J0u4JmKMxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNGVj
YmU4Zi04YjM4LTRlNjgtYmNhYy0wZWJhZTQ3NGJiM2YvYjUzOTBhNmUtOGY1ZS0z
Mjc4LWE5ODctZDk1ZmQ4Yjg0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjRlY2JlOGYtOGIzOC00ZTY4LWJj
YWMtMGViYWU0NzRiYjNmL2Y0ZWNiZThmLThiMzgtNGU2OC1iY2FjLTBlYmFlNDc0
YmIzZi5jcmwwHwYDVR0jBBgwFoAUfqGjSDBmi35h6cwGSbRdguGIXBMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNGVjYmU4Zi04YjM4LTRlNjgtYmNhYy0wZWJh
ZTQ3NGJiM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF6tAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvRkujmS/p7FvWKSthLKLukG1deYFXUKZfIfO7QBzezq4a1CCEhQb5K
ToNauYiKG3mRPgojOkIBd4nSPzWJ9wtje78J52uwZN/IK8T3sjKQdwYcNs1KM8v/
1esDY4sp4exv4yVxlNUCoSB/0ntwnBdUHzTMw82auoEgfqQTMqJygbPKhqVo/mLN
2Mlz9PuhnSVwHDxvpWxywMSxblXsrwnkfVrKuZLJN4xLrDsROedm+3BXhKxgiPAf
+7mxcmMji3sfge7WY76HY8YByZSJXnB75UF1B8Lednf05l2zp/DXiOo8de3Tmijz
+mbFUeEowxX/Ur/jwys0x397yNo4Q+M=
-----END CERTIFICATE-----
Generated at Wed May 13 10:15:45 2026 by rpki-client