Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c25d7a46-dff2-3795-8207-9883fa376043.roa
File:                     c25d7a46-dff2-3795-8207-9883fa376043.roa (raw, json)
Hash identifier:          aJK79vf29kRypRXJIox+qxAgLr0auvyFa7GArgeak7c=
Subject key identifier:   14:38:0B:DD:5C:EE:06:AD:0A:86:D7:D3:8E:E6:FA:4B:16:54:1A:BA
Certificate issuer:       /CN=8139fd38-b1a1-4ea2-b95d-7f36fe09dff6
Certificate serial:       010D0C9F4328584E8C8A46B2D3176D9C75917FC0
Authority key identifier: DF:36:92:D7:C0:A4:F1:C6:D1:82:25:BF:46:5C:6B:3D:26:AC:C4:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c25d7a46-dff2-3795-8207-9883fa376043.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     20184
IP address blocks:        23.130.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:46:b2:d3:17:6d:9c:75:91:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8139fd38-b1a1-4ea2-b95d-7f36fe09dff6
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=7106999a-b528-4729-bafa-b058134fead3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:b4:93:5f:38:78:10:0a:77:ce:31:a8:bb:
                    68:bf:cb:f6:e5:ab:4e:ae:e2:75:01:31:38:ab:3a:
                    b9:81:93:5f:1c:a5:67:d7:e3:62:0f:c5:0c:c9:c3:
                    64:93:42:dd:a9:bd:b2:13:5e:38:ea:90:1e:74:c5:
                    14:74:5d:18:28:ff:f0:4c:c3:b3:fb:51:dc:2d:9a:
                    e9:2f:d6:4e:43:1b:31:f0:ad:46:dd:1d:2b:cd:0b:
                    03:7d:2b:6a:ff:09:d9:28:93:7d:fc:ce:2b:ae:c3:
                    72:66:aa:6a:ea:00:6a:b7:4c:90:f6:3a:39:c3:b7:
                    3a:c0:d5:43:b1:df:1b:90:da:7c:e1:93:bd:61:64:
                    3e:35:dd:cb:40:c9:e2:79:8c:d5:25:61:9c:f8:8b:
                    9b:a9:f8:9c:0e:9d:4a:a1:42:42:17:2b:b4:53:e7:
                    67:59:44:41:7c:b5:48:25:fd:40:b3:21:49:c5:4a:
                    77:34:05:1b:ac:e6:f8:c8:26:f1:c2:16:a6:6f:d5:
                    98:a8:2d:4f:57:3d:bd:a3:1a:20:b4:47:a8:38:07:
                    97:30:12:c1:ad:93:23:be:1e:a9:56:83:e7:90:ef:
                    2c:2d:ca:74:01:7a:36:d9:23:46:de:cb:c5:cc:30:
                    29:2a:3d:c9:ae:57:62:1c:e1:92:7e:a3:23:86:a9:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:38:0B:DD:5C:EE:06:AD:0A:86:D7:D3:8E:E6:FA:4B:16:54:1A:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c25d7a46-dff2-3795-8207-9883fa376043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.crl

            X509v3 Authority Key Identifier:
                keyid:DF:36:92:D7:C0:A4:F1:C6:D1:82:25:BF:46:5C:6B:3D:26:AC:C4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:30:b8:34:e4:c0:de:bb:16:ee:8a:63:8b:76:83:1c:ab:
         bd:20:42:90:13:16:d3:34:84:0e:bc:5d:b6:b7:73:bd:03:25:
         73:3b:5c:2c:7d:d7:33:7e:39:1e:fb:2e:d4:cf:74:fd:f5:8f:
         d6:bb:75:fb:a7:08:99:82:43:ff:77:e0:66:e9:93:b9:00:da:
         b7:a9:f8:99:fe:23:d9:07:0c:15:aa:08:9f:86:58:41:69:51:
         17:49:98:32:1c:6e:a0:11:67:1f:7d:20:8b:8f:55:b6:fb:8a:
         48:a7:82:36:fa:ab:8a:a9:eb:92:cb:77:b7:f0:c9:f5:de:88:
         06:00:d0:b4:2e:5f:f7:46:cd:a5:27:ec:cc:09:f2:c1:ed:48:
         56:2f:66:60:83:bd:a3:a1:6a:93:66:c3:3d:48:3b:4a:05:00:
         21:22:8f:80:27:ea:e9:75:d1:ae:69:81:0c:65:e4:41:dc:5e:
         09:6a:86:c0:8a:6c:ef:77:07:2d:4a:1c:d2:65:14:62:3b:7d:
         60:52:16:42:11:a1:fb:6c:08:84:72:da:6b:83:c8:9a:7f:ee:
         5a:af:ea:c6:6c:cf:07:73:87:3d:b7:ee:1a:29:82:25:9b:a7:
         c7:c7:57:f2:8f:7d:25:00:22:89:92:51:6a:84:f7:7f:29:ab:
         34:c2:0b:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mikay0xdtnHWRf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODEzOWZkMzgtYjFhMS00ZWEyLWI5NWQtN2YzNmZlMDlk
ZmY2MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk
NzEwNjk5OWEtYjUyOC00NzI5LWJhZmEtYjA1ODEzNGZlYWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR+0k184eBAKd84xqLtov8v25atOruJ1ATE4
qzq5gZNfHKVn1+NiD8UMycNkk0Ldqb2yE1446pAedMUUdF0YKP/wTMOz+1HcLZrp
L9ZOQxsx8K1G3R0rzQsDfStq/wnZKJN9/M4rrsNyZqpq6gBqt0yQ9jo5w7c6wNVD
sd8bkNp84ZO9YWQ+Nd3LQMnieYzVJWGc+IubqficDp1KoUJCFyu0U+dnWURBfLVI
Jf1AsyFJxUp3NAUbrOb4yCbxwhamb9WYqC1PVz29oxogtEeoOAeXMBLBrZMjvh6p
VoPnkO8sLcp0AXo22SNG3svFzDApKj3JrldiHOGSfqMjhqliOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQ4C91c7gatCobX047m+ksWVBq6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84MTM5
ZmQzOC1iMWExLTRlYTItYjk1ZC03ZjM2ZmUwOWRmZjYvYzI1ZDdhNDYtZGZmMi0z
Nzk1LTgyMDctOTg4M2ZhMzc2MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODEzOWZkMzgtYjFhMS00ZWEyLWI5
NWQtN2YzNmZlMDlkZmY2LzgxMzlmZDM4LWIxYTEtNGVhMi1iOTVkLTdmMzZmZTA5
ZGZmNi5jcmwwHwYDVR0jBBgwFoAU3zaS18Ck8cbRgiW/RlxrPSasxL8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84MTM5ZmQzOC1iMWExLTRlYTItYjk1ZC03ZjM2
ZmUwOWRmZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4J8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDPMLg05MDeuxbuimOLdoMcq70gQpATFtM0hA68Xba3c70DJXM7XCx9
1zN+OR77LtTPdP31j9a7dfunCJmCQ/934Gbpk7kA2rep+Jn+I9kHDBWqCJ+GWEFp
URdJmDIcbqARZx99IIuPVbb7ikingjb6q4qp65LLd7fwyfXeiAYA0LQuX/dGzaUn
7MwJ8sHtSFYvZmCDvaOhapNmwz1IO0oFACEij4An6ul10a5pgQxl5EHcXglqhsCK
bO93By1KHNJlFGI7fWBSFkIRoftsCIRy2muDyJp/7lqv6sZszwdzhz237hopgiWb
p8fHV/KPfSUAIomSUWqE938pqzTCC44=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:15 2026 by rpki-client