Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa
File:                     e397c739-b478-394f-ae21-89fd0af584d8.roa (raw, json)
Hash identifier:          36SikVpPKOVXWdV0Zqt9FEEDoIU+CoLBEG/qCSLO844=
Subject key identifier:   F1:5C:A5:DF:74:E4:B7:9E:56:6B:FF:69:13:DE:31:D6:F6:D6:8A:5F
Certificate issuer:       /CN=0c4c7001-7459-4ca5-93d2-88612666a768
Certificate serial:       010D0C9F4328584D4A8FA0E202F8CF853A29C280
Authority key identifier: 56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     16925
IP address blocks:        23.149.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:a0:e2:02:f8:cf:85:3a:29:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4c7001-7459-4ca5-93d2-88612666a768
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=ba0e4d21-dc98-48de-9b27-1c31bce97781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:88:23:bf:0a:80:86:d5:71:4b:f6:3b:2b:
                    f1:4b:90:1a:32:ac:c0:d1:ba:fc:d1:1e:ec:79:e2:
                    c8:b4:fa:b2:fa:94:05:57:ec:fe:dc:91:a1:de:59:
                    de:c4:55:ae:f0:53:af:a3:01:59:1c:3d:45:1d:1e:
                    74:b5:46:91:5d:a6:27:8f:8b:2b:b1:7c:df:07:4c:
                    4f:3a:50:bf:8c:bf:40:c3:ba:49:10:45:e7:29:db:
                    2a:8e:51:61:97:1f:96:5c:d5:65:c5:4a:a5:01:b8:
                    2c:88:de:88:a2:98:fe:62:1c:a1:3b:4a:72:c9:22:
                    c7:16:9c:14:74:cd:a4:85:76:71:1f:c6:88:80:1c:
                    34:b6:8b:16:20:04:e5:62:b1:15:1a:29:33:54:fc:
                    2b:49:4d:b6:61:df:e8:29:a0:2e:ae:6c:25:51:6d:
                    cd:82:d5:9d:cc:d9:93:4e:eb:fd:22:a9:5b:4f:e1:
                    18:1e:6e:d5:d8:3d:e7:60:42:7f:1f:4b:1b:b6:ff:
                    d2:79:ce:1e:3e:6b:81:da:f3:e9:4e:15:ce:f1:04:
                    6c:ef:fb:5e:f4:3d:9f:7c:00:99:86:c8:bd:e0:01:
                    e6:e6:b6:47:f8:ae:35:1c:cb:89:d2:eb:9b:31:c3:
                    04:7f:62:f4:c0:d9:05:88:89:28:b9:dc:61:7f:b9:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:A5:DF:74:E4:B7:9E:56:6B:FF:69:13:DE:31:D6:F6:D6:8A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl

            X509v3 Authority Key Identifier:
                keyid:56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:bf:31:50:75:a0:dc:9f:19:99:32:72:fe:e0:e6:d6:94:48:
         37:f1:11:47:18:7a:38:73:ef:6a:88:35:c9:0e:9c:db:c8:61:
         dd:57:01:e3:22:88:82:d7:33:da:64:05:9a:59:e5:3d:52:20:
         f1:77:e8:be:73:07:4c:d5:58:2a:81:09:cb:be:0e:48:d1:1e:
         0a:bb:c8:ed:47:a7:03:54:b3:88:00:3e:0d:e7:68:2f:f6:8c:
         cc:97:83:e6:6f:79:74:6e:06:69:3d:63:76:22:c4:9e:06:99:
         ef:ae:94:dd:84:7f:b9:e5:10:c7:b0:d3:04:ec:59:5b:47:34:
         f6:f1:e8:76:4f:52:cd:c7:09:01:1a:23:a8:5d:ed:d6:c8:c1:
         1e:de:6a:b8:85:9a:16:9b:23:fa:0b:25:9d:9f:52:04:6b:47:
         70:56:2b:40:b2:63:2c:83:8f:1d:e2:75:f1:b8:3a:15:73:dd:
         40:c0:d8:9d:18:b3:72:e9:eb:16:11:c8:cc:4c:ea:ce:72:90:
         87:4e:47:a7:db:1d:11:aa:47:90:86:2c:2a:e5:b1:b8:42:d2:
         20:91:cb:83:61:0a:f1:a7:7e:ee:96:80:83:6b:ef:45:a3:e2:
         21:54:78:7e:88:25:86:64:11:1d:14:6a:33:2a:3f:0d:db:37:
         6c:83:8b:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6DiAvjPhTopwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM0YzcwMDEtNzQ1OS00Y2E1LTkzZDItODg2MTI2NjZh
NzY4MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
YmEwZTRkMjEtZGM5OC00OGRlLTliMjctMWMzMWJjZTk3NzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniSII78KgIbVcUv2OyvxS5AaMqzA0br80R7s
eeLItPqy+pQFV+z+3JGh3lnexFWu8FOvowFZHD1FHR50tUaRXaYnj4srsXzfB0xP
OlC/jL9Aw7pJEEXnKdsqjlFhlx+WXNVlxUqlAbgsiN6Iopj+YhyhO0pyySLHFpwU
dM2khXZxH8aIgBw0tosWIATlYrEVGikzVPwrSU22Yd/oKaAurmwlUW3NgtWdzNmT
Tuv9IqlbT+EYHm7V2D3nYEJ/H0sbtv/Sec4ePmuB2vPpThXO8QRs7/te9D2ffACZ
hsi94AHm5rZH+K41HMuJ0uubMcMEf2L0wNkFiIkoudxhf7lkCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFcpd905LeeVmv/aRPeMdb21opfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wYzRj
NzAwMS03NDU5LTRjYTUtOTNkMi04ODYxMjY2NmE3NjgvZTM5N2M3MzktYjQ3OC0z
OTRmLWFlMjEtODlmZDBhZjU4NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGM0YzcwMDEtNzQ1OS00Y2E1LTkz
ZDItODg2MTI2NjZhNzY4LzBjNGM3MDAxLTc0NTktNGNhNS05M2QyLTg4NjEyNjY2
YTc2OC5jcmwwHwYDVR0jBBgwFoAUVs1mkgktTEU0+FZYWiDtAvO+ObkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wYzRjNzAwMS03NDU5LTRjYTUtOTNkMi04ODYx
MjY2NmE3NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5XQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANe/MVB1oNyfGZkycv7g5taUSDfxEUcYejhz72qINckOnNvIYd1XAeMi
iILXM9pkBZpZ5T1SIPF36L5zB0zVWCqBCcu+DkjRHgq7yO1HpwNUs4gAPg3naC/2
jMyXg+ZveXRuBmk9Y3YixJ4Gme+ulN2Ef7nlEMew0wTsWVtHNPbx6HZPUs3HCQEa
I6hd7dbIwR7eariFmhabI/oLJZ2fUgRrR3BWK0CyYyyDjx3idfG4OhVz3UDA2J0Y
s3Lp6xYRyMxM6s5ykIdOR6fbHRGqR5CGLCrlsbhC0iCRy4NhCvGnfu6WgINr70Wj
4iFUeH6IJYZkER0UajMqPw3bN2yDi8Y=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:28 2026 by rpki-client