Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
File:                     5d90966f-a528-3b8b-8dc3-ede422faaf58.roa (raw, json)
Hash identifier:          LMMYgNR+NHXeJHBvBhJo2zo1wX91qFFmkluyK7PWFZQ=
Subject key identifier:   86:24:AA:5C:84:81:85:7A:7A:95:99:CC:83:D9:30:E4:35:D6:A3:21
Certificate issuer:       /CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe
Certificate serial:       010D0C9F4328584D44FA32D8132C14240A8CC100
Authority key identifier: C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     397592
IP address blocks:        23.134.112.0/24 maxlen: 24
                          2620:13f:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:32:d8:13:2c:14:24:0a:8c:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=07e65bb9-3651-4e55-9c40-38a5874f7ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:1e:cc:e1:e7:d8:c4:bd:3e:84:21:db:84:
                    3b:3e:a9:d9:7e:cd:77:67:d5:7f:6a:59:e4:20:ec:
                    d7:dc:a8:44:b8:75:83:16:61:32:b0:a2:78:95:dd:
                    9a:79:c4:8d:7d:e3:9d:dd:a9:88:2d:23:e6:be:de:
                    c2:26:35:05:d9:73:ae:7c:c5:da:ff:dc:ee:2c:7b:
                    e8:cf:27:42:fa:0c:aa:22:37:ec:3d:76:fe:1b:54:
                    04:fc:4d:28:83:7d:b2:88:a9:51:74:a8:3d:9f:ed:
                    c6:27:f4:62:70:e4:57:a3:32:f3:75:2f:11:dc:22:
                    a0:e3:d9:93:8e:14:62:13:9e:c3:0b:96:6a:c5:db:
                    c5:73:74:9c:8c:7c:d2:cf:f3:35:c4:f3:bc:08:6b:
                    d2:49:46:3e:36:25:44:72:06:e8:1e:7d:8e:55:30:
                    f9:14:14:ab:2c:b4:02:3a:cf:ed:b3:6a:11:51:c4:
                    2b:ac:1f:77:43:64:5f:2c:18:da:0a:f3:c1:6f:02:
                    da:5e:1f:9c:5a:21:70:51:19:2b:73:5a:8e:77:a0:
                    d3:61:80:e6:dd:22:19:74:28:7f:1d:e3:fc:6c:59:
                    8a:52:2c:6b:40:ae:c5:2d:23:06:7f:98:fd:51:5f:
                    38:14:54:ba:ec:8b:d1:e8:57:62:8e:d4:c6:ad:4c:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:24:AA:5C:84:81:85:7A:7A:95:99:CC:83:D9:30:E4:35:D6:A3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl

            X509v3 Authority Key Identifier:
                keyid:C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.112.0/24
                IPv6:
                  2620:13f:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:53:fd:09:1a:d3:73:8c:1d:60:21:e8:f0:30:38:f2:e3:
         e6:99:26:8d:38:ba:4e:59:b0:2b:15:ce:20:35:51:8c:ba:7a:
         47:2d:d9:25:1f:16:d4:4d:e3:54:eb:0a:0e:93:69:6a:51:f8:
         14:62:35:d2:4f:78:98:e4:c5:d5:6a:db:2c:f7:62:fe:fb:34:
         4b:61:bc:fd:f5:37:8f:97:ad:5e:e1:9d:41:59:9f:d4:42:62:
         cb:18:fb:8b:d8:c5:18:3d:45:7e:73:62:70:57:3a:74:32:8d:
         e3:a4:49:57:10:ac:4c:4d:f1:60:2d:25:26:f0:4c:d0:79:1c:
         60:ee:d1:c0:ab:92:01:13:f4:2e:4b:46:4c:43:3c:0b:c1:34:
         b7:78:76:e3:aa:99:7f:a4:50:6f:92:af:ed:a7:bb:75:10:5e:
         ac:38:6e:ac:e1:7c:27:11:a2:5c:a9:31:d5:b1:1b:ab:44:d0:
         26:1d:14:f8:7a:10:dc:e1:da:23:09:ed:0d:06:ab:4d:af:6d:
         9b:13:3a:73:ee:14:1b:8e:47:ef:ca:51:db:7a:f0:c5:ee:9a:
         06:c0:44:9a:34:83:fe:0d:6a:68:2e:a4:02:e5:6b:8b:a4:37:
         84:dc:b6:1e:35:86:c6:2e:78:b4:5f:62:2f:a8:2c:96:b9:79:
         e8:06:8e:5e
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1E+jLYEywUJAqMwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRhMWY3NzgtYWVjZC00YmI4LWE1NDUtYjhjYjRiMThi
M2ZlMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
MDdlNjViYjktMzY1MS00ZTU1LTljNDAtMzhhNTg3NGY3ZWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaQezOHn2MS9PoQh24Q7PqnZfs13Z9V/alnk
IOzX3KhEuHWDFmEysKJ4ld2aecSNfeOd3amILSPmvt7CJjUF2XOufMXa/9zuLHvo
zydC+gyqIjfsPXb+G1QE/E0og32yiKlRdKg9n+3GJ/RicORXozLzdS8R3CKg49mT
jhRiE57DC5ZqxdvFc3ScjHzSz/M1xPO8CGvSSUY+NiVEcgboHn2OVTD5FBSrLLQC
Os/ts2oRUcQrrB93Q2RfLBjaCvPBbwLaXh+cWiFwURkrc1qOd6DTYYDm3SIZdCh/
HeP8bFmKUixrQK7FLSMGf5j9UV84FFS67IvR6FdijtTGrUywZwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIYkqlyEgYV6epWZzIPZMOQ11qMhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGEx
Zjc3OC1hZWNkLTRiYjgtYTU0NS1iOGNiNGIxOGIzZmUvNWQ5MDk2NmYtYTUyOC0z
YjhiLThkYzMtZWRlNDIyZmFhZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRhMWY3NzgtYWVjZC00YmI4LWE1
NDUtYjhjYjRiMThiM2ZlLzhkYTFmNzc4LWFlY2QtNGJiOC1hNTQ1LWI4Y2I0YjE4
YjNmZS5jcmwwHwYDVR0jBBgwFoAUws5R985w6ZOvOqtng4XVfwJI6c8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGExZjc3OC1hZWNkLTRiYjgtYTU0NS1iOGNi
NGIxOGIzZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4ZwMA8E
AgACMAkDBwQmIAE/UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARuJT/Qka03OMHWAh6PAwOPLj5pkmjTi6
TlmwKxXOIDVRjLp6Ry3ZJR8W1E3jVOsKDpNpalH4FGI10k94mOTF1WrbLPdi/vs0
S2G8/fU3j5etXuGdQVmf1EJiyxj7i9jFGD1FfnNicFc6dDKN46RJVxCsTE3xYC0l
JvBM0HkcYO7RwKuSARP0LktGTEM8C8E0t3h246qZf6RQb5Kv7ae7dRBerDhurOF8
JxGiXKkx1bEbq0TQJh0U+HoQ3OHaIwntDQarTa9tmxM6c+4UG45H78pR23rwxe6a
BsBEmjSD/g1qaC6kAuVri6Q3hNy2HjWGxi54tF9iL6gslrl56AaOXg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:20 2026 by rpki-client