Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/aa4655ec-5e62-3ea3-8c06-0e9f9ef8f96d.roa
File:                     aa4655ec-5e62-3ea3-8c06-0e9f9ef8f96d.roa (raw, json)
Hash identifier:          P86R5F6PaqSfffJnl1ibND3v7pREkZVL0MB4jtfd8Lg=
Subject key identifier:   DA:93:68:75:63:64:BC:E8:06:2E:1C:80:2F:BD:5A:77:16:79:3A:43
Certificate issuer:       /CN=a2839383-af07-436e-89af-5453510b6546
Certificate serial:       010D0C9F4328584DA2801A8CE2F3AE869E158B00
Authority key identifier: 00:66:C2:0A:A7:35:0D:55:EC:39:80:06:16:B5:C5:3C:3C:6E:8B:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/aa4655ec-5e62-3ea3-8c06-0e9f9ef8f96d.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     30006
IP address blocks:        23.129.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:1a:8c:e2:f3:ae:86:9e:15:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2839383-af07-436e-89af-5453510b6546
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=a5d3552d-2b1d-45b1-94b9-8e4cdeb3e6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:0a:8a:f0:25:9b:0c:a2:ef:87:25:46:38:
                    fe:f1:0d:bc:ca:8d:22:40:dd:62:cb:4d:c6:81:67:
                    d9:98:89:6b:23:52:40:4a:bb:39:cc:92:c5:78:7c:
                    78:92:a3:3f:51:27:a9:c6:7d:78:97:81:35:20:6b:
                    c0:4e:fc:da:6a:ff:b4:0a:6e:fe:fd:ec:c6:c9:4f:
                    ea:5f:a8:a6:b8:36:0a:c6:46:4b:2c:4f:c8:2f:31:
                    bc:99:da:5f:9d:dd:c2:4e:d8:79:76:30:f9:e0:1c:
                    f0:bc:17:c0:d5:e4:f0:54:a0:98:05:67:b4:53:fe:
                    ff:f8:ba:c1:09:53:d7:9d:92:84:b3:64:39:d6:47:
                    32:ff:c5:b8:3c:78:41:41:26:e7:c3:c2:8e:85:37:
                    28:b8:b8:ee:18:40:cb:30:db:45:c3:0c:67:57:90:
                    21:4b:c0:30:05:aa:cf:30:cd:19:23:f3:7e:50:1c:
                    a0:ab:11:d4:99:e3:4b:75:d2:5a:33:c3:ca:32:7a:
                    cd:3a:79:84:79:5e:f3:ab:41:91:ce:11:42:75:44:
                    7b:99:e4:9d:0a:b3:56:66:0e:4d:07:61:a9:10:7f:
                    c1:de:29:bd:dc:6e:f9:25:5d:18:53:ae:30:db:6a:
                    2c:0f:17:dd:84:c4:44:33:c7:83:b7:c9:55:c8:95:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:93:68:75:63:64:BC:E8:06:2E:1C:80:2F:BD:5A:77:16:79:3A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/aa4655ec-5e62-3ea3-8c06-0e9f9ef8f96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.crl

            X509v3 Authority Key Identifier:
                keyid:00:66:C2:0A:A7:35:0D:55:EC:39:80:06:16:B5:C5:3C:3C:6E:8B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:99:d6:f2:f6:b0:d1:bc:4a:99:cf:f5:3f:63:68:6f:1f:da:
         27:01:d2:ad:09:95:10:e5:8a:26:21:c2:28:fe:e5:67:e5:af:
         a3:32:50:53:41:7c:b9:f3:0d:09:dc:98:3e:39:d4:9e:26:47:
         71:d4:86:fa:dd:d4:78:fe:f4:4c:c8:f5:96:c8:fe:9a:3f:ca:
         3f:3b:ec:f8:9a:52:8a:f1:17:d6:50:3e:81:10:da:01:38:df:
         1d:3a:ce:3f:e5:f6:48:44:ed:e2:77:f9:d1:6c:48:cb:03:c2:
         ae:cd:f5:cf:33:d2:12:1a:cf:45:79:45:dc:f1:d2:61:b2:8f:
         89:44:e7:7f:4e:67:c2:f4:80:ab:db:f9:43:4d:ae:59:5b:00:
         8f:4e:3f:ea:6a:9b:5e:cd:f8:13:7b:af:1c:44:6e:36:5c:be:
         ff:bf:5f:5b:d4:12:cf:09:7c:8e:9f:69:ca:7c:17:8b:e0:5d:
         b8:8e:75:25:e6:59:2f:cd:2d:54:d8:34:d0:26:b4:9b:80:78:
         a9:2e:d3:aa:8b:8a:97:55:f2:81:aa:8e:8a:eb:d2:d9:53:48:
         5c:4c:a0:ab:fa:c7:41:bc:a5:d0:19:73:ae:33:11:e2:5d:16:
         97:38:7c:db:dd:1f:11:0f:1b:c0:9c:67:2f:7a:68:88:17:7b:
         0b:80:2f:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBqM4vOuhp4ViwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI4MzkzODMtYWYwNy00MzZlLTg5YWYtNTQ1MzUxMGI2
NTQ2MB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk
YTVkMzU1MmQtMmIxZC00NWIxLTk0YjktOGU0Y2RlYjNlNmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS0KivAlmwyi74clRjj+8Q28yo0iQN1iy03G
gWfZmIlrI1JASrs5zJLFeHx4kqM/USepxn14l4E1IGvATvzaav+0Cm7+/ezGyU/q
X6imuDYKxkZLLE/ILzG8mdpfnd3CTth5djD54BzwvBfA1eTwVKCYBWe0U/7/+LrB
CVPXnZKEs2Q51kcy/8W4PHhBQSbnw8KOhTcouLjuGEDLMNtFwwxnV5AhS8AwBarP
MM0ZI/N+UBygqxHUmeNLddJaM8PKMnrNOnmEeV7zq0GRzhFCdUR7meSdCrNWZg5N
B2GpEH/B3im93G75JV0YU64w22osDxfdhMREM8eDt8lVyJVjnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqTaHVjZLzoBi4cgC+9WncWeTpDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMjgz
OTM4My1hZjA3LTQzNmUtODlhZi01NDUzNTEwYjY1NDYvYWE0NjU1ZWMtNWU2Mi0z
ZWEzLThjMDYtMGU5ZjllZjhmOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTI4MzkzODMtYWYwNy00MzZlLTg5
YWYtNTQ1MzUxMGI2NTQ2L2EyODM5MzgzLWFmMDctNDM2ZS04OWFmLTU0NTM1MTBi
NjU0Ni5jcmwwHwYDVR0jBBgwFoAUAGbCCqc1DVXsOYAGFrXFPDxuiyMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMjgzOTM4My1hZjA3LTQzNmUtODlhZi01NDUz
NTEwYjY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWZ1vL2sNG8SpnP9T9jaG8f2icB0q0JlRDliiYhwij+5Wflr6MyUFNB
fLnzDQncmD451J4mR3HUhvrd1Hj+9EzI9ZbI/po/yj877PiaUorxF9ZQPoEQ2gE4
3x06zj/l9khE7eJ3+dFsSMsDwq7N9c8z0hIaz0V5Rdzx0mGyj4lE539OZ8L0gKvb
+UNNrllbAI9OP+pqm17N+BN7rxxEbjZcvv+/X1vUEs8JfI6facp8F4vgXbiOdSXm
WS/NLVTYNNAmtJuAeKku06qLipdV8oGqjorr0tlTSFxMoKv6x0G8pdAZc64zEeJd
Fpc4fNvdHxEPG8CcZy96aIgXewuAL1s=
-----END CERTIFICATE-----
Generated at Wed May 13 06:51:53 2026 by rpki-client