Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa
File:                     304f2600-cd93-3a8d-a33f-9f57f863cc94.roa (raw, json)
Hash identifier:          vVV48ZdrI3d4hjWbe5knvti1NrSQH72bC9IafnkgX0c=
Subject key identifier:   16:06:DE:BD:D8:5B:73:BE:0B:F7:F3:B9:CE:11:DC:9B:6C:B1:B9:4A
Certificate issuer:       /CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b
Certificate serial:       010D0C9F4328584FD0F6A2115E5D044F88B19B40
Authority key identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa
Signing time:             Thu 12 Nov 2026 14:00:13 +0000
ROA not before:           Thu 12 Nov 2026 14:00:13 +0000
ROA not after:            Wed 10 Feb 2027 14:00:13 +0000
asID:                     396982
IP address blocks:        23.148.252.0/24 maxlen: 24
                          70.40.190.0/23 maxlen: 23
                          2602:f4df:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d0:f6:a2:11:5e:5d:04:4f:88:b1:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b
        Validity
            Not Before: Nov 12 14:00:13 2026 GMT
            Not After : Feb 10 14:00:13 2027 GMT
        Subject: CN=640501d0-3163-45a4-8db3-e2ad48babbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ca:62:50:2f:05:b7:24:bc:76:81:13:d9:62:
                    c4:67:70:fd:2b:a1:2f:7d:57:25:3e:23:bc:72:30:
                    80:c7:32:04:a5:aa:de:39:76:24:28:fd:84:ad:15:
                    95:22:b8:09:79:19:71:d2:ab:e1:a8:71:bb:e2:d4:
                    8a:77:28:6f:9f:87:2b:7d:87:2c:09:be:e4:7f:3f:
                    9e:ef:55:31:ad:bc:f1:8c:4e:db:c1:1c:51:c6:8a:
                    40:8e:6c:42:b7:81:aa:ac:03:5e:40:47:44:24:19:
                    7f:eb:5e:49:69:53:d9:89:c1:6f:bd:22:42:1c:48:
                    36:a4:1d:b1:7b:02:09:f8:c6:1f:b1:28:81:6e:65:
                    d2:cc:fd:f7:15:7a:24:bf:8c:33:92:6b:6b:47:b3:
                    10:30:ca:cd:c1:0e:84:8a:cd:ba:68:3c:91:68:36:
                    7d:fe:11:c5:58:cc:0d:97:53:04:0b:78:e7:4d:33:
                    6d:ff:06:c9:69:93:46:1d:c7:93:df:37:ba:ce:b1:
                    c4:a1:d3:02:d5:f2:3e:f6:d5:5d:45:85:bf:f3:ad:
                    3c:6a:56:1c:c7:54:fa:49:eb:8e:31:55:88:49:b3:
                    6e:2d:4d:20:62:08:22:48:84:55:d8:25:5d:a8:78:
                    ac:54:69:7d:9a:23:9c:6b:e8:aa:0c:c9:e7:67:e0:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:DE:BD:D8:5B:73:BE:0B:F7:F3:B9:CE:11:DC:9B:6C:B1:B9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl

            X509v3 Authority Key Identifier:
                keyid:D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.252.0/24
                  70.40.190.0/23
                IPv6:
                  2602:f4df:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f9:81:00:b5:be:d9:b1:e9:b6:0d:05:bb:5f:9b:35:ab:40:
         f1:bb:cc:a8:47:37:42:30:a4:10:4a:79:18:c2:ed:0c:12:bb:
         c6:9d:56:0f:2d:1d:e5:17:e7:02:68:4d:ea:9c:2e:21:07:a3:
         46:11:16:a9:67:c9:bf:1c:49:16:23:a6:97:52:b2:b1:01:df:
         e2:cc:74:a1:84:3e:8d:3e:1d:ed:24:ff:f8:60:88:cc:67:53:
         6a:52:f0:0f:83:1f:d0:75:de:7f:c0:3c:a4:b3:5d:1b:bd:47:
         10:de:69:e8:1d:4a:de:2a:eb:6a:ee:de:6e:d4:25:ab:b6:d3:
         19:fd:cb:a3:12:b7:26:4b:97:b0:5f:9f:6f:8e:6a:78:0b:71:
         3f:d4:59:1a:b1:f6:65:3f:b4:dd:76:f3:be:2f:7e:85:41:7e:
         60:a8:55:4d:84:ae:f3:84:12:a7:30:05:7e:0d:79:2d:b6:0a:
         4c:4f:51:db:37:8c:7b:83:7e:07:23:cc:b1:19:1a:e5:30:be:
         98:31:5d:a7:74:91:14:d3:bf:3c:7d:5d:72:bf:61:7c:d2:48:
         d7:52:03:1c:72:5b:71:0b:e5:5e:1e:7f:c5:ba:34:38:d4:d5:
         70:19:07:ff:41:3e:2f:3a:81:01:ea:12:ec:11:a1:28:35:48:
         44:7e:0c:1b
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE/Q9qIRXl0ET4ixm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTlkZDcwYTctYTZmNS00OTc1LTljMjMtMGFiMTIzNmU2
MDJiMB4XDTI2MTExMjE0MDAxM1oXDTI3MDIxMDE0MDAxM1owLzEtMCsGA1UEAxMk
NjQwNTAxZDAtMzE2My00NWE0LThkYjMtZTJhZDQ4YmFiYmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcpiUC8FtyS8doET2WLEZ3D9K6EvfVclPiO8
cjCAxzIEpareOXYkKP2ErRWVIrgJeRlx0qvhqHG74tSKdyhvn4crfYcsCb7kfz+e
71UxrbzxjE7bwRxRxopAjmxCt4GqrANeQEdEJBl/615JaVPZicFvvSJCHEg2pB2x
ewIJ+MYfsSiBbmXSzP33FXokv4wzkmtrR7MQMMrNwQ6Eis26aDyRaDZ9/hHFWMwN
l1MEC3jnTTNt/wbJaZNGHceT3ze6zrHEodMC1fI+9tVdRYW/8608alYcx1T6SeuO
MVWISbNuLU0gYggiSIRV2CVdqHisVGl9miOca+iqDMnnZ+CD3wIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFBYG3r3YW3O+C/fzuc4R3JtssblKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOWRk
NzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIxMjM2ZTYwMmIvMzA0ZjI2MDAtY2Q5My0z
YThkLWEzM2YtOWY1N2Y4NjNjYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTlkZDcwYTctYTZmNS00OTc1LTlj
MjMtMGFiMTIzNmU2MDJiL2U5ZGQ3MGE3LWE2ZjUtNDk3NS05YzIzLTBhYjEyMzZl
NjAyYi5jcmwwHwYDVR0jBBgwFoAU0RJH4f9RDhpe5bL8Dz2d+y6AlYkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOWRkNzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIx
MjM2ZTYwMmIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5T8AwQB
Rii+MA4EAgACMAgDBgAmAvTfATBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAP+YEAtb7Zsem2DQW7X5s1q0Dx
u8yoRzdCMKQQSnkYwu0MErvGnVYPLR3lF+cCaE3qnC4hB6NGERapZ8m/HEkWI6aX
UrKxAd/izHShhD6NPh3tJP/4YIjMZ1NqUvAPgx/Qdd5/wDyks10bvUcQ3mnoHUre
Kutq7t5u1CWrttMZ/cujErcmS5ewX59vjmp4C3E/1FkasfZlP7TddvO+L36FQX5g
qFVNhK7zhBKnMAV+DXkttgpMT1HbN4x7g34HI8yxGRrlML6YMV2ndJEU0788fV1y
v2F80kjXUgMccltxC+VeHn/FujQ41NVwGQf/QT4vOoEB6hLsEaEoNUhEfgwb
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:38 2026 by rpki-client