Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/8c7fa4e8-20d0-3353-80d3-3c20949664d7.roa
File:                     8c7fa4e8-20d0-3353-80d3-3c20949664d7.roa (raw, json)
Hash identifier:          Zk02wNjl5tJWuxTZfFQJtL1Bco/OLgKpkxTUBGGzmlg=
Subject key identifier:   FE:C9:FC:7A:3C:93:98:AF:9D:69:B5:72:10:77:72:2E:CC:C5:05:C8
Certificate issuer:       /CN=6283f7b1-718c-494a-9125-f81454a01548
Certificate serial:       010D0C9F4328584F497324E6336766E69AE97C40
Authority key identifier: CF:9F:E6:C6:43:5C:E9:AA:36:04:DD:E1:81:D7:1D:D1:1A:E5:86:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/8c7fa4e8-20d0-3353-80d3-3c20949664d7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399870
IP address blocks:        23.129.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:24:e6:33:67:66:e6:9a:e9:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6283f7b1-718c-494a-9125-f81454a01548
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=02c1edbf-5d8d-4e64-af2f-ea4b4a020e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:b7:15:b6:c0:6f:d6:70:1f:56:ba:af:f0:
                    78:bf:8e:1c:fc:1c:5c:c6:6b:96:4c:f7:f1:bb:32:
                    8a:10:ab:d6:50:c7:c9:3c:4b:72:b8:8b:af:40:19:
                    52:06:34:18:5b:4b:ec:46:61:f1:26:e9:94:74:d8:
                    42:a9:1b:38:52:7f:71:8c:d2:b6:bd:3d:45:12:57:
                    36:ab:b5:db:a7:72:76:47:77:68:25:74:60:15:b9:
                    dd:6b:4d:d6:bc:f9:8e:b0:b6:9f:62:c9:bd:e7:bf:
                    6a:42:f7:77:26:ac:56:c0:75:61:5f:08:ce:1f:ac:
                    00:0d:8b:cb:80:83:fc:05:99:85:5e:74:5b:ed:6a:
                    b3:77:34:c2:50:07:d5:1d:58:6d:01:d8:e9:50:98:
                    aa:8b:ed:5f:de:46:66:a6:9d:00:09:90:77:b7:31:
                    1c:3b:fe:61:b1:55:a3:37:55:e3:2b:b2:9c:59:7f:
                    16:da:05:3c:4b:de:b2:93:5a:d2:f2:f8:e4:de:f4:
                    59:95:d8:40:12:6e:f1:b9:48:c9:dd:d5:b7:4d:57:
                    92:a2:c2:ce:38:c8:99:81:b1:22:b7:4f:97:ba:72:
                    27:f2:64:ef:bc:9c:62:25:c8:56:15:39:b7:df:29:
                    27:58:3f:04:f2:b6:cf:6a:d0:e8:b8:2d:21:b3:40:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C9:FC:7A:3C:93:98:AF:9D:69:B5:72:10:77:72:2E:CC:C5:05:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/8c7fa4e8-20d0-3353-80d3-3c20949664d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.crl

            X509v3 Authority Key Identifier:
                keyid:CF:9F:E6:C6:43:5C:E9:AA:36:04:DD:E1:81:D7:1D:D1:1A:E5:86:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:f1:19:ed:b8:75:5c:ab:eb:1b:2a:5d:58:d3:66:60:be:
         eb:5f:e9:ca:4c:9b:45:2c:bd:61:91:6d:7c:64:bf:4c:4b:9f:
         10:ee:c2:02:4e:9c:62:06:2b:5a:0c:c4:e4:ca:dc:ad:c5:f1:
         36:a3:e5:a9:8a:d1:3f:34:53:54:18:d4:a1:0b:ff:b2:cc:c6:
         c7:10:25:e7:f6:05:6a:c0:cb:cf:7b:b6:f4:c4:01:eb:12:57:
         7a:07:79:7d:e1:31:c2:34:a4:20:ee:b3:e2:36:f6:09:a2:be:
         91:54:fa:10:34:84:a5:cd:65:5e:eb:18:4d:0b:f0:b4:7e:df:
         e2:07:75:42:69:37:cb:c3:cb:a3:98:e2:94:63:d9:6b:df:00:
         0b:67:be:87:e8:26:af:7b:19:fe:15:63:75:fa:88:8a:d0:c9:
         df:27:48:1e:a5:98:2f:d7:25:e3:ea:5a:c6:00:ea:e8:8f:ce:
         3c:72:a3:1b:e0:a4:8e:28:69:2f:9b:6c:83:e1:ee:9e:f8:82:
         a1:e3:5a:10:21:d4:a9:32:78:5c:87:82:cb:31:18:21:b1:36:
         86:19:f8:fc:88:70:f0:51:03:39:97:ed:3a:95:8a:c5:f8:fb:
         ff:26:b5:bc:cd:3d:97:30:a6:89:6c:c5:4a:28:82:86:bc:5f:
         b3:a7:ac:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyTmM2dm5prpfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjI4M2Y3YjEtNzE4Yy00OTRhLTkxMjUtZjgxNDU0YTAx
NTQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDJjMWVkYmYtNWQ4ZC00ZTY0LWFmMmYtZWE0YjRhMDIwZTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3C3FbbAb9ZwH1a6r/B4v44c/BxcxmuWTPfx
uzKKEKvWUMfJPEtyuIuvQBlSBjQYW0vsRmHxJumUdNhCqRs4Un9xjNK2vT1FElc2
q7Xbp3J2R3doJXRgFbnda03WvPmOsLafYsm9579qQvd3JqxWwHVhXwjOH6wADYvL
gIP8BZmFXnRb7WqzdzTCUAfVHVhtAdjpUJiqi+1f3kZmpp0ACZB3tzEcO/5hsVWj
N1XjK7KcWX8W2gU8S96yk1rS8vjk3vRZldhAEm7xuUjJ3dW3TVeSosLOOMiZgbEi
t0+XunIn8mTvvJxiJchWFTm33yknWD8E8rbPatDouC0hs0BufQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7J/Ho8k5ivnWm1chB3ci7MxQXIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Mjgz
ZjdiMS03MThjLTQ5NGEtOTEyNS1mODE0NTRhMDE1NDgvOGM3ZmE0ZTgtMjBkMC0z
MzUzLTgwZDMtM2MyMDk0OTY2NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjI4M2Y3YjEtNzE4Yy00OTRhLTkx
MjUtZjgxNDU0YTAxNTQ4LzYyODNmN2IxLTcxOGMtNDk0YS05MTI1LWY4MTQ1NGEw
MTU0OC5jcmwwHwYDVR0jBBgwFoAUz5/mxkNc6ao2BN3hgdcd0RrlhtwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82MjgzZjdiMS03MThjLTQ5NGEtOTEyNS1mODE0
NTRhMDE1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4S8RntuHVcq+sbKl1Y02Zgvutf6cpMm0UsvWGRbXxkv0xLnxDuwgJO
nGIGK1oMxOTK3K3F8Taj5amK0T80U1QY1KEL/7LMxscQJef2BWrAy897tvTEAesS
V3oHeX3hMcI0pCDus+I29gmivpFU+hA0hKXNZV7rGE0L8LR+3+IHdUJpN8vDy6OY
4pRj2WvfAAtnvofoJq97Gf4VY3X6iIrQyd8nSB6lmC/XJePqWsYA6uiPzjxyoxvg
pI4oaS+bbIPh7p74gqHjWhAh1KkyeFyHgssxGCGxNoYZ+PyIcPBRAzmX7TqVisX4
+/8mtbzNPZcwpolsxUoogoa8X7OnrE4=
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:39:42 2026 by rpki-client