Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/57b08375-edfa-3ca6-816f-7c71735f8648.roa
File:                     57b08375-edfa-3ca6-816f-7c71735f8648.roa (raw, json)
Hash identifier:          d+9ZL8Npy0SR1gtd1LNXx7o6Pqep4kM5p9ckQm5wTRs=
Subject key identifier:   47:FF:3B:11:4C:CC:D4:AF:4A:DA:11:03:0D:BF:95:CA:17:4A:25:B9
Certificate issuer:       /CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2
Certificate serial:       010D0C9F4328584DADAAEF2F530F1B1B7CC46280
Authority key identifier: 3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/57b08375-edfa-3ca6-816f-7c71735f8648.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     152179
IP address blocks:        23.152.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ef:2f:53:0f:1b:1b:7c:c4:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=c3e82248-ffaa-4077-af49-3f4e5cc92a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:23:7b:4b:12:ad:0f:13:d2:80:01:1c:02:
                    6d:38:98:c0:a8:c3:c6:75:31:ea:28:ad:e4:a8:b8:
                    9d:b0:b6:74:44:58:00:29:ae:40:8d:7f:b2:94:48:
                    ac:70:71:ee:ac:2e:18:26:79:51:f1:12:16:ea:71:
                    af:c5:ce:27:16:5c:b9:cf:10:f1:46:7f:ee:4a:34:
                    eb:f3:48:a3:ad:42:e7:e5:7b:01:36:72:1a:2a:77:
                    2d:69:a3:d8:27:d0:2e:af:94:8b:ae:29:57:47:04:
                    32:cb:ae:53:a1:31:1b:96:c8:36:38:9c:6f:bf:41:
                    07:3e:1b:e3:f7:af:f8:db:ec:82:41:a0:5e:df:f1:
                    40:4a:dd:c7:b8:74:e5:b9:e3:9a:1c:6a:6a:0b:d1:
                    ad:a0:04:86:b5:5e:a1:b0:34:8d:7e:77:ff:de:7b:
                    95:c5:7d:43:2b:9f:f2:0b:a5:af:fc:90:f3:88:58:
                    86:ba:c7:69:e1:0c:74:b8:73:82:41:83:06:5d:12:
                    45:b4:dc:f0:6f:c4:4e:23:b3:bf:67:1f:73:c7:d1:
                    75:cd:f5:ac:aa:62:38:fa:1a:f7:fe:1f:91:86:1c:
                    57:ec:30:38:94:9c:72:67:3b:5c:70:3b:6b:a5:63:
                    07:47:41:29:97:31:75:1a:94:50:d6:47:dd:15:a8:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FF:3B:11:4C:CC:D4:AF:4A:DA:11:03:0D:BF:95:CA:17:4A:25:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/57b08375-edfa-3ca6-816f-7c71735f8648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl

            X509v3 Authority Key Identifier:
                keyid:3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a7:82:1e:47:91:e0:d0:ed:c7:db:5d:ff:e2:15:45:2b:c5:
         5e:e1:d7:f8:a7:c1:cb:9e:c6:80:15:e7:4e:82:ae:4d:1b:64:
         10:52:55:61:d2:a4:92:17:c5:41:0f:de:f6:82:90:0f:6e:8f:
         3b:49:39:a9:f1:46:ae:de:6e:f6:d3:4c:8f:50:51:82:ef:71:
         0b:dd:b9:a5:54:3d:96:5e:ee:b0:46:7f:0d:96:e6:68:19:c6:
         f3:9f:e1:0b:d9:ee:93:6d:05:22:f5:89:d7:d2:1b:2f:86:89:
         27:61:13:1f:11:88:c5:cb:23:a3:c6:76:b6:5e:fe:3d:44:6d:
         66:83:ce:9e:8a:79:6a:8f:ba:cf:6b:61:40:81:7b:91:53:63:
         6e:d2:e6:0e:c6:ac:fb:a5:e6:f7:f5:50:45:86:bc:cf:17:cc:
         32:b0:fd:b8:4f:0d:75:29:69:92:55:80:6e:60:07:36:39:c4:
         85:24:2a:cb:78:e2:c6:86:c7:50:8d:07:83:0d:38:9a:6d:a2:
         b8:1c:f2:23:c7:82:ad:72:68:17:17:fe:91:4c:7f:2e:af:c5:
         0d:06:17:c0:52:84:0b:b3:d0:c5:16:8c:6f:44:a3:a0:72:96:
         d6:5b:3c:f0:76:f9:fa:18:22:f0:9c:5d:9d:f2:aa:e7:45:48:
         b4:8b:d2:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqu8vUw8bG3zEYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRmMWQ4OGMtNGIxZC00YThhLTgzMTktNWQ3ODRlOTk1
YmUyMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk
YzNlODIyNDgtZmZhYS00MDc3LWFmNDktM2Y0ZTVjYzkyYTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvAje0sSrQ8T0oABHAJtOJjAqMPGdTHqKK3k
qLidsLZ0RFgAKa5AjX+ylEiscHHurC4YJnlR8RIW6nGvxc4nFly5zxDxRn/uSjTr
80ijrULn5XsBNnIaKnctaaPYJ9Aur5SLrilXRwQyy65ToTEblsg2OJxvv0EHPhvj
96/42+yCQaBe3/FASt3HuHTlueOaHGpqC9GtoASGtV6hsDSNfnf/3nuVxX1DK5/y
C6Wv/JDziFiGusdp4Qx0uHOCQYMGXRJFtNzwb8ROI7O/Zx9zx9F1zfWsqmI4+hr3
/h+RhhxX7DA4lJxyZztccDtrpWMHR0EplzF1GpRQ1kfdFajZoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEf/OxFMzNSvStoRAw2/lcoXSiW5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYx
ZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4NGU5OTViZTIvNTdiMDgzNzUtZWRmYS0z
Y2E2LTgxNmYtN2M3MTczNWY4NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWRmMWQ4OGMtNGIxZC00YThhLTgz
MTktNWQ3ODRlOTk1YmUyLzFkZjFkODhjLTRiMWQtNGE4YS04MzE5LTVkNzg0ZTk5
NWJlMi5jcmwwHwYDVR0jBBgwFoAUO4o8adHio5sJm2d2r75YFyzbC08wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZGYxZDg4Yy00YjFkLTRhOGEtODMxOS01ZDc4
NGU5OTViZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5i0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWngh5HkeDQ7cfbXf/iFUUrxV7h1/inwcuexoAV506Crk0bZBBSVWHS
pJIXxUEP3vaCkA9ujztJOanxRq7ebvbTTI9QUYLvcQvduaVUPZZe7rBGfw2W5mgZ
xvOf4QvZ7pNtBSL1idfSGy+GiSdhEx8RiMXLI6PGdrZe/j1EbWaDzp6KeWqPus9r
YUCBe5FTY27S5g7GrPul5vf1UEWGvM8XzDKw/bhPDXUpaZJVgG5gBzY5xIUkKst4
4saGx1CNB4MNOJptorgc8iPHgq1yaBcX/pFMfy6vxQ0GF8BShAuz0MUWjG9Eo6By
ltZbPPB2+foYIvCcXZ3yqudFSLSL0kU=
-----END CERTIFICATE-----
Generated at Wed May 13 05:08:24 2026 by rpki-client