Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa
File:                     d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa (raw, json)
Hash identifier:          8RP2HVeYubTJgicTBXV4fea3l8xpkDIbnHP0AjTOhl4=
Subject key identifier:   FF:37:F0:F3:8C:59:D1:23:74:46:4F:8B:86:19:63:F5:18:5D:67:51
Certificate issuer:       /CN=d622ae28-b14e-4021-900a-c9182c5b5a2e
Certificate serial:       010D0C9F4328584E4C54B0CB5883C8DC6890A280
Authority key identifier: 8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     57406
IP address blocks:        23.133.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:b0:cb:58:83:c8:dc:68:90:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d622ae28-b14e-4021-900a-c9182c5b5a2e
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=93d70b0a-0816-4247-a476-70aa724fd24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:d0:b7:6a:ee:49:4c:59:ca:c8:09:22:93:
                    95:46:17:fa:40:46:b8:ad:a1:22:ec:3c:b0:13:fe:
                    31:d2:5d:91:75:88:fa:5c:e0:72:02:0c:72:24:fd:
                    5d:71:ae:d1:da:20:2d:78:ef:3c:a6:db:11:71:2b:
                    76:62:74:ca:07:20:dd:92:30:8e:63:cb:76:e4:41:
                    45:ea:c4:38:36:86:17:26:b2:40:82:24:e1:96:34:
                    47:bd:48:a5:8f:db:d9:9e:4a:b1:d7:eb:59:f6:c4:
                    36:bc:d9:be:20:a3:df:c3:7d:ab:03:2f:b3:c7:9f:
                    88:7d:68:38:56:fb:d5:de:a6:4e:cd:a4:3d:2f:90:
                    ec:e4:d9:50:50:a4:7b:c7:14:59:17:e0:0b:cf:72:
                    52:20:30:84:3d:71:68:bb:f9:1e:87:73:54:a8:ca:
                    b0:91:42:73:45:d1:94:0f:40:60:eb:67:a9:c6:e0:
                    5f:2d:b9:87:68:30:2d:e6:b5:6a:bd:f6:34:7b:fb:
                    e0:3f:02:9a:54:62:5b:2d:f1:84:38:b0:88:01:43:
                    81:53:a7:06:e7:47:cf:d6:5d:60:65:00:d3:55:fd:
                    2e:e7:10:d4:49:17:0b:e7:a4:28:eb:54:01:0e:17:
                    68:da:b5:f0:12:e3:14:5b:3e:56:7f:c7:3d:02:5a:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:37:F0:F3:8C:59:D1:23:74:46:4F:8B:86:19:63:F5:18:5D:67:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.crl

            X509v3 Authority Key Identifier:
                keyid:8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f0:03:b0:fd:f5:e9:9c:62:bb:49:9f:93:62:52:16:2a:90:
         2e:4c:a5:68:c9:0c:ac:99:c7:07:11:0a:33:f8:2f:8d:d0:ff:
         82:e4:60:7f:94:3f:82:65:48:14:15:32:0c:cb:7b:d0:b9:98:
         a8:a2:74:88:de:bc:5e:3a:c7:c7:28:b5:98:09:eb:0f:32:2a:
         26:13:12:5f:6a:84:13:25:a0:01:6a:f8:10:c4:79:d4:b2:14:
         77:ad:2a:34:cf:62:50:f0:55:39:b4:b7:be:87:7e:0c:72:7c:
         b6:4d:c7:ad:ff:fd:d7:7e:13:bf:0b:8f:5f:6f:4c:d7:51:55:
         f0:18:3d:5c:8c:c9:38:41:21:95:18:af:de:3e:0a:23:e5:40:
         5a:98:a5:67:1b:03:1e:2d:97:e4:e9:31:0d:28:d8:c6:4e:6e:
         0d:fe:90:5e:1b:7d:b0:32:a9:f8:33:d9:21:33:ed:ff:54:db:
         5a:b1:8e:13:06:9a:f7:3a:d6:e0:b2:d3:4e:09:1f:23:a5:8e:
         75:e5:a4:c7:ad:d5:83:5c:29:2a:65:25:e7:85:43:27:eb:51:
         d9:86:e5:f1:a9:a9:0a:5f:0e:f1:7f:97:47:66:61:10:ec:51:
         d3:6e:16:46:02:30:d2:a7:6c:bd:8a:6e:4e:d7:66:06:20:03:
         73:c2:eb:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVLDLWIPI3GiQooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDYyMmFlMjgtYjE0ZS00MDIxLTkwMGEtYzkxODJjNWI1
YTJlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
OTNkNzBiMGEtMDgxNi00MjQ3LWE0NzYtNzBhYTcyNGZkMjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6jQt2ruSUxZysgJIpOVRhf6QEa4raEi7Dyw
E/4x0l2RdYj6XOByAgxyJP1dca7R2iAteO88ptsRcSt2YnTKByDdkjCOY8t25EFF
6sQ4NoYXJrJAgiThljRHvUilj9vZnkqx1+tZ9sQ2vNm+IKPfw32rAy+zx5+IfWg4
VvvV3qZOzaQ9L5Ds5NlQUKR7xxRZF+ALz3JSIDCEPXFou/keh3NUqMqwkUJzRdGU
D0Bg62epxuBfLbmHaDAt5rVqvfY0e/vgPwKaVGJbLfGEOLCIAUOBU6cG50fP1l1g
ZQDTVf0u5xDUSRcL56Qo61QBDhdo2rXwEuMUWz5Wf8c9AlqKfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP838POMWdEjdEZPi4YZY/UYXWdRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjIy
YWUyOC1iMTRlLTQwMjEtOTAwYS1jOTE4MmM1YjVhMmUvZDYzYWIzZWQtMTAzMC0z
MzU1LWJlMzUtZjdhYzlmZjE1ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDYyMmFlMjgtYjE0ZS00MDIxLTkw
MGEtYzkxODJjNWI1YTJlL2Q2MjJhZTI4LWIxNGUtNDAyMS05MDBhLWM5MTgyYzVi
NWEyZS5jcmwwHwYDVR0jBBgwFoAUjplOKS9UrsYSeNvncA7VBy/6lFcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjIyYWUyOC1iMTRlLTQwMjEtOTAwYS1jOTE4
MmM1YjVhMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4UMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7wA7D99emcYrtJn5NiUhYqkC5MpWjJDKyZxwcRCjP4L43Q/4LkYH+U
P4JlSBQVMgzLe9C5mKiidIjevF46x8cotZgJ6w8yKiYTEl9qhBMloAFq+BDEedSy
FHetKjTPYlDwVTm0t76HfgxyfLZNx63//dd+E78Lj19vTNdRVfAYPVyMyThBIZUY
r94+CiPlQFqYpWcbAx4tl+TpMQ0o2MZObg3+kF4bfbAyqfgz2SEz7f9U21qxjhMG
mvc61uCy004JHyOljnXlpMet1YNcKSplJeeFQyfrUdmG5fGpqQpfDvF/l0dmYRDs
UdNuFkYCMNKnbL2Kbk7XZgYgA3PC6xk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:34:30 2026 by rpki-client