Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa
File:                     a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa (raw, json)
Hash identifier:          p1Eau83f8vkM3QNdxDHK1VpqHlQM2SrVQujqTLIsO40=
Subject key identifier:   56:3B:72:61:63:D9:FA:16:86:0F:CD:F1:52:49:F4:17:BE:DA:75:91
Certificate issuer:       /CN=457522b0-cf44-4757-ac16-6215c2516e52
Certificate serial:       010D0C9F4328584E3B946EA8AFEB5B7BC47CCB00
Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     401890
IP address blocks:        23.143.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:6e:a8:af:eb:5b:7b:c4:7c:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=96848a95-387b-45fd-a4a6-cccb1155defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:49:5e:cd:82:83:1f:a2:14:2d:65:e2:3c:
                    d7:2c:8b:37:02:25:d1:ca:4d:6d:58:3c:84:d7:fb:
                    08:a0:74:f3:8c:52:f4:8f:be:79:49:73:55:61:ae:
                    d8:f3:01:5d:14:ca:e8:f7:46:ee:5a:9b:9e:f6:46:
                    00:1a:a6:4f:d7:91:a8:6c:7f:62:af:5b:bc:28:17:
                    f6:c5:b7:7a:cd:cf:2d:a8:75:e8:f6:6b:ca:fa:0f:
                    8a:e6:da:39:d8:a7:a9:06:77:1d:13:3e:26:e7:e9:
                    24:2b:98:62:a2:5b:b8:c3:2f:f1:03:46:de:c5:1c:
                    1a:aa:f4:d3:02:1f:31:07:0f:7c:fa:1d:53:bb:9a:
                    ad:57:d9:38:54:df:4a:87:fc:b2:28:27:ae:ab:43:
                    63:9c:7c:36:ae:a0:6d:41:da:bd:ac:08:fd:2b:cf:
                    8a:1e:c6:83:73:dc:eb:04:94:22:20:fc:09:a4:98:
                    ed:23:c8:fe:a2:c2:17:21:5b:02:dd:c9:4b:c1:76:
                    16:ba:56:63:e9:c2:e5:aa:fb:5a:e4:47:1c:11:d3:
                    d1:71:ca:f1:3f:a1:44:9f:5b:af:c3:5c:3f:29:e1:
                    4e:41:ea:23:f5:34:7f:4e:f0:b0:c5:66:00:ee:3a:
                    b9:41:74:af:4a:32:bd:4b:bb:cd:07:7b:fa:ec:fb:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3B:72:61:63:D9:FA:16:86:0F:CD:F1:52:49:F4:17:BE:DA:75:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl

            X509v3 Authority Key Identifier:
                keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:ef:ca:2f:0d:12:d1:7a:73:b0:c3:29:b3:35:03:2d:7d:
         3c:78:59:1d:d7:dd:ed:8a:73:7b:a5:3a:1b:a5:54:97:a8:9b:
         b3:e4:cb:f9:fa:8d:27:2e:82:b8:e1:e4:4f:70:81:1a:fa:14:
         59:c7:a7:7c:e8:a7:c9:6c:3a:15:e6:cc:11:62:24:8b:0b:1a:
         c9:44:50:34:dd:65:48:12:c9:6b:d3:30:5b:27:67:d4:68:79:
         e2:8f:76:03:3f:59:5b:8e:63:67:63:b8:1a:75:f4:81:03:bf:
         fc:02:0e:8c:a7:2c:c8:5e:c5:d7:a2:19:d4:8d:0a:76:98:a5:
         53:c2:62:b3:e5:4f:89:c1:af:7b:c9:f5:2a:ae:55:a9:54:82:
         fd:16:ca:2d:55:6b:38:cf:a4:61:83:c2:6f:d5:5c:1b:52:20:
         03:d4:bd:f3:8b:7f:ef:48:6d:3f:21:6f:51:5e:aa:4e:4b:37:
         3f:d1:04:1b:36:da:28:88:b0:04:be:2e:8f:88:f8:63:ee:9c:
         9d:6a:b2:6e:ec:87:a7:94:82:cb:37:c0:86:7c:35:82:6f:e3:
         40:f2:c5:f3:0b:53:59:c0:80:8a:53:de:dc:32:5e:8c:82:cd:
         be:38:06:b8:b9:f2:36:24:a2:c1:f5:ca:64:d7:2c:13:3e:96:
         45:c8:72:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lG6or+tbe8R8ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU3NTIyYjAtY2Y0NC00NzU3LWFjMTYtNjIxNWMyNTE2
ZTUyMB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk
OTY4NDhhOTUtMzg3Yi00NWZkLWE0YTYtY2NjYjExNTVkZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnpJXs2Cgx+iFC1l4jzXLIs3AiXRyk1tWDyE
1/sIoHTzjFL0j755SXNVYa7Y8wFdFMro90buWpue9kYAGqZP15GobH9ir1u8KBf2
xbd6zc8tqHXo9mvK+g+K5to52KepBncdEz4m5+kkK5hiolu4wy/xA0bexRwaqvTT
Ah8xBw98+h1Tu5qtV9k4VN9Kh/yyKCeuq0NjnHw2rqBtQdq9rAj9K8+KHsaDc9zr
BJQiIPwJpJjtI8j+osIXIVsC3clLwXYWulZj6cLlqvta5EccEdPRccrxP6FEn1uv
w1w/KeFOQeoj9TR/TvCwxWYA7jq5QXSvSjK9S7vNB3v67PvdQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFY7cmFj2foWhg/N8VJJ9Be+2nWRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1
MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1YzI1MTZlNTIvYTVhNDkyYTktYzVjZS0z
NjJlLThlMjAtZmRkYmQ4N2JlNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3NTIyYjAtY2Y0NC00NzU3LWFj
MTYtNjIxNWMyNTE2ZTUyLzQ1NzUyMmIwLWNmNDQtNDc1Ny1hYzE2LTYyMTVjMjUx
NmU1Mi5jcmwwHwYDVR0jBBgwFoAUkNOCVjLjh/164p+2zSPb1vY6+FkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1
YzI1MTZlNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF48cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrl78ovDRLRenOwwymzNQMtfTx4WR3X3e2Kc3ulOhulVJeom7Pky/n6
jScugrjh5E9wgRr6FFnHp3zop8lsOhXmzBFiJIsLGslEUDTdZUgSyWvTMFsnZ9Ro
eeKPdgM/WVuOY2djuBp19IEDv/wCDoynLMhexdeiGdSNCnaYpVPCYrPlT4nBr3vJ
9SquValUgv0Wyi1VazjPpGGDwm/VXBtSIAPUvfOLf+9IbT8hb1Feqk5LNz/RBBs2
2iiIsAS+Lo+I+GPunJ1qsm7sh6eUgss3wIZ8NYJv40DyxfMLU1nAgIpT3twyXoyC
zb44Bri58jYkosH1ymTXLBM+lkXIcgY=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:56 2026 by rpki-client