Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa
File:                     5c61e36a-6107-3475-8f1b-e616b1350dbe.roa (raw, json)
Hash identifier:          8oEySdJLeAB5nPWnlOMQ5k28VLbZWoyl8aCiwfpHnEI=
Subject key identifier:   03:F8:0B:DA:85:55:DB:77:D9:18:3B:3A:B0:CC:75:41:E2:45:4E:E3
Certificate issuer:       /CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54
Certificate serial:       010D0C9F4328584D4A8FBC97618E722703AFFFC0
Authority key identifier: 19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     401879
IP address blocks:        23.142.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:bc:97:61:8e:72:27:03:af:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=c360575a-a6b0-46ff-a219-8e34d7f93c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:74:d8:d2:42:52:b8:64:4a:43:ba:44:9c:
                    47:33:5a:d5:dd:f9:52:d3:22:43:63:da:fc:4e:9c:
                    0f:3d:0f:1a:53:50:e9:ff:7d:41:34:72:fe:04:70:
                    e1:60:c0:e3:e4:df:ef:04:70:b1:7c:94:a7:fc:6f:
                    ee:e2:67:23:2a:05:4d:d2:27:27:ff:96:7a:b7:18:
                    69:2a:58:b2:43:d5:62:2f:1b:51:40:e2:9b:4b:7e:
                    96:b1:65:15:11:ba:0c:4d:6c:4f:24:96:1e:d1:e8:
                    ee:a5:7e:03:df:6e:79:1b:e5:46:e3:a9:4d:22:db:
                    79:77:33:85:1a:2d:9f:bf:63:ce:65:fa:f9:e3:72:
                    14:bb:75:b1:1d:1e:5a:95:76:00:09:b8:95:8d:89:
                    8f:ba:19:64:74:85:32:46:e9:bd:0a:db:07:20:70:
                    5f:c4:fd:9e:04:81:0f:54:76:2d:24:ac:e0:77:4e:
                    b6:69:42:ca:7b:be:02:0f:86:9f:32:72:f3:4a:67:
                    1a:e2:c4:78:6d:db:69:be:2e:ab:fc:6f:ca:5d:64:
                    84:cb:ce:af:a3:67:5f:5a:e4:7c:16:fc:cc:a9:86:
                    b2:ba:5d:a9:38:cc:c1:73:e1:d7:67:73:02:92:d4:
                    d2:a0:19:61:e8:0a:77:57:b0:a3:82:08:59:e0:fc:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:0B:DA:85:55:DB:77:D9:18:3B:3A:B0:CC:75:41:E2:45:4E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl

            X509v3 Authority Key Identifier:
                keyid:19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a4:3b:13:a4:10:90:d4:0a:d0:57:70:ab:0f:6c:07:78:29:
         cb:c7:5a:c0:b2:6b:ce:ec:28:23:5f:7f:28:6e:bd:59:7f:fa:
         7b:2a:4a:7a:84:c6:47:36:5d:6a:b6:7b:79:f0:a8:0d:c2:c2:
         b6:2a:00:c4:45:11:df:19:20:17:8e:74:4a:a5:8f:ac:ac:b9:
         69:a1:6a:08:f1:15:5a:53:63:0b:9f:7c:4c:78:1d:5f:d4:07:
         84:4a:7f:09:0b:a2:82:14:95:00:70:6f:5d:1c:67:08:dd:6b:
         bc:28:d6:b8:c9:51:0c:e1:00:8a:36:45:03:17:59:6d:52:87:
         44:c5:83:45:91:6e:4a:46:8d:2b:54:3b:e0:e5:1f:15:a2:28:
         38:67:3b:16:e3:84:52:ab:fb:ac:15:00:70:dc:85:bf:0a:d4:
         69:97:f2:9a:ee:49:b7:3f:ed:aa:a8:01:04:46:a7:e7:48:27:
         25:0b:ea:0a:15:1d:ce:b2:9f:59:e4:9a:42:d1:1b:d2:94:d7:
         92:b2:b7:fc:b6:75:2b:c4:52:0d:61:5d:5c:25:e1:5d:b0:03:
         d2:ef:93:c8:b9:41:52:6e:36:03:10:b4:94:99:91:68:7e:24:
         c6:51:28:c8:4c:29:b2:16:34:93:d2:a4:ab:12:e8:e9:2e:7a:
         fb:48:52:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7yXYY5yJwOv/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWI0ZDk5NGMtMTk2Yi00YjRhLWEyYzAtMGYyZTRiNGFj
ZjU0MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
YzM2MDU3NWEtYTZiMC00NmZmLWEyMTktOGUzNGQ3ZjkzYzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLJ02NJCUrhkSkO6RJxHM1rV3flS0yJDY9r8
TpwPPQ8aU1Dp/31BNHL+BHDhYMDj5N/vBHCxfJSn/G/u4mcjKgVN0icn/5Z6txhp
KliyQ9ViLxtRQOKbS36WsWUVEboMTWxPJJYe0ejupX4D3255G+VG46lNItt5dzOF
Gi2fv2POZfr543IUu3WxHR5alXYACbiVjYmPuhlkdIUyRum9CtsHIHBfxP2eBIEP
VHYtJKzgd062aULKe74CD4afMnLzSmca4sR4bdtpvi6r/G/KXWSEy86vo2dfWuR8
FvzMqYayul2pOMzBc+HXZ3MCktTSoBlh6Ap3V7CjgghZ4PxgsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAP4C9qFVdt32Rg7OrDMdUHiRU7jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRk
OTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJlNGI0YWNmNTQvNWM2MWUzNmEtNjEwNy0z
NDc1LThmMWItZTYxNmIxMzUwZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWI0ZDk5NGMtMTk2Yi00YjRhLWEy
YzAtMGYyZTRiNGFjZjU0LzFiNGQ5OTRjLTE5NmItNGI0YS1hMmMwLTBmMmU0YjRh
Y2Y1NC5jcmwwHwYDVR0jBBgwFoAUGU3Xozsv0HPfJ9YW4+MgY3AlxyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRkOTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJl
NGI0YWNmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF470MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGkOxOkEJDUCtBXcKsPbAd4KcvHWsCya87sKCNffyhuvVl/+nsqSnqE
xkc2XWq2e3nwqA3CwrYqAMRFEd8ZIBeOdEqlj6ysuWmhagjxFVpTYwuffEx4HV/U
B4RKfwkLooIUlQBwb10cZwjda7wo1rjJUQzhAIo2RQMXWW1Sh0TFg0WRbkpGjStU
O+DlHxWiKDhnOxbjhFKr+6wVAHDchb8K1GmX8pruSbc/7aqoAQRGp+dIJyUL6goV
Hc6yn1nkmkLRG9KU15Kyt/y2dSvEUg1hXVwl4V2wA9Lvk8i5QVJuNgMQtJSZkWh+
JMZRKMhMKbIWNJPSpKsS6OkuevtIUvU=
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:35 2026 by rpki-client