Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/c8b8908e-e731-3a3d-9ddb-e4f3670fe2df.roa
File:                     c8b8908e-e731-3a3d-9ddb-e4f3670fe2df.roa (raw, json)
Hash identifier:          pvV+WbZI9FF+Oor6SnqCzjR0Df6QbjwsJ/DpzWEpqUc=
Subject key identifier:   AB:43:0A:E4:DA:C5:BA:2A:DD:38:FE:09:09:68:ED:0F:D3:D2:7F:8D
Certificate issuer:       /CN=89278746-5270-4955-a4eb-d96ac3a3dce1
Certificate serial:       010D0C9F4328584E7A64F65C23D485BBF0B59F80
Authority key identifier: A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/c8b8908e-e731-3a3d-9ddb-e4f3670fe2df.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     401831
IP address blocks:        23.142.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f6:5c:23:d4:85:bb:f0:b5:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89278746-5270-4955-a4eb-d96ac3a3dce1
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=ebdb7627-dfd5-412c-9f53-49fcbc6c377e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:f2:8c:56:bb:ef:3a:5d:f4:ca:d8:20:45:
                    6b:a2:66:79:01:76:fb:c1:9a:5f:38:ff:1c:d2:0d:
                    7f:97:89:fd:69:a2:0c:ab:18:af:b8:2d:5d:2c:0c:
                    78:cb:01:26:6f:a3:aa:21:74:4a:f2:b7:81:c4:b4:
                    53:8e:93:0c:a1:86:f9:aa:d9:f6:ea:5f:d8:e0:28:
                    c8:f8:c9:3f:42:bf:1e:0f:59:8d:43:d8:da:1e:5b:
                    26:08:ff:41:e4:db:70:17:9d:dc:55:f4:f5:0d:29:
                    4a:23:6c:80:b5:0f:ec:b0:cd:00:f4:16:3b:89:93:
                    d8:e3:19:54:d3:8b:ab:08:e9:4c:96:3f:e0:62:c1:
                    94:a8:d9:33:7e:a7:f8:8e:5f:6d:42:5c:94:0f:c9:
                    eb:b0:1e:2a:be:a1:61:0c:10:8c:d6:b6:6e:38:71:
                    91:f9:ba:84:53:e3:bf:5d:df:fe:14:3d:dc:55:b1:
                    db:79:a6:b7:f9:64:be:7b:1f:8c:4a:c8:b5:fb:e9:
                    64:73:0e:40:3b:dd:f1:6b:0d:5e:29:82:a6:f7:24:
                    3e:56:5e:83:b0:94:67:d8:2f:4a:f1:b0:fb:18:b0:
                    a2:99:6d:61:0b:f5:80:2c:76:d6:49:8b:5e:08:19:
                    c6:2a:c2:6d:c6:96:81:93:d9:55:dc:d9:1a:d7:ff:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:0A:E4:DA:C5:BA:2A:DD:38:FE:09:09:68:ED:0F:D3:D2:7F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/c8b8908e-e731-3a3d-9ddb-e4f3670fe2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl

            X509v3 Authority Key Identifier:
                keyid:A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b4:3f:47:49:e0:e7:b7:dd:22:0c:52:c8:51:6a:53:a1:d1:
         71:be:27:04:ad:f5:ae:31:48:fa:c9:42:e7:b9:71:30:b5:3e:
         77:07:07:14:ba:b0:94:26:3b:76:17:89:6b:f2:c0:05:ba:aa:
         3b:89:ed:7a:18:ab:21:11:20:a2:eb:33:21:a7:8b:60:e5:cc:
         5a:73:aa:9e:ab:05:90:f9:7f:5d:f5:59:ad:db:d8:e3:3b:f7:
         df:f3:3d:73:09:82:49:7e:01:de:f6:45:d7:9a:60:52:d7:95:
         16:b6:4f:2b:1d:ae:06:58:fe:48:58:ba:81:14:38:56:67:36:
         e6:88:7d:6e:91:fa:64:a8:03:91:8a:18:59:ab:1a:f2:dc:22:
         0f:87:70:e7:04:56:fc:c8:c7:07:cb:83:a4:6d:3b:be:bf:e5:
         f4:08:2f:6e:10:a1:09:a0:81:ae:c8:8d:1d:31:26:98:18:fa:
         d0:55:95:74:92:1f:20:04:cb:19:63:56:51:e4:d1:47:10:d9:
         ce:8f:7c:79:79:8e:2c:c0:0d:1f:7a:37:ed:fa:21:43:30:d1:
         fd:94:60:20:e3:70:a2:00:13:18:01:1c:65:67:2a:13:8e:fc:
         63:8f:0a:2d:e9:6a:43:1e:76:fb:bc:37:b3:da:f1:0e:57:60:
         55:59:6c:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZPZcI9SFu/C1n4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkyNzg3NDYtNTI3MC00OTU1LWE0ZWItZDk2YWMzYTNk
Y2UxMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
ZWJkYjc2MjctZGZkNS00MTJjLTlmNTMtNDlmY2JjNmMzNzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwnyjFa77zpd9MrYIEVromZ5AXb7wZpfOP8c
0g1/l4n9aaIMqxivuC1dLAx4ywEmb6OqIXRK8reBxLRTjpMMoYb5qtn26l/Y4CjI
+Mk/Qr8eD1mNQ9jaHlsmCP9B5NtwF53cVfT1DSlKI2yAtQ/ssM0A9BY7iZPY4xlU
04urCOlMlj/gYsGUqNkzfqf4jl9tQlyUD8nrsB4qvqFhDBCM1rZuOHGR+bqEU+O/
Xd/+FD3cVbHbeaa3+WS+ex+MSsi1++lkcw5AO93xaw1eKYKm9yQ+Vl6DsJRn2C9K
8bD7GLCimW1hC/WALHbWSYteCBnGKsJtxpaBk9lV3Nka1/+jkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtDCuTaxboq3Tj+CQlo7Q/T0n+NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84OTI3
ODc0Ni01MjcwLTQ5NTUtYTRlYi1kOTZhYzNhM2RjZTEvYzhiODkwOGUtZTczMS0z
YTNkLTlkZGItZTRmMzY3MGZlMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODkyNzg3NDYtNTI3MC00OTU1LWE0
ZWItZDk2YWMzYTNkY2UxLzg5Mjc4NzQ2LTUyNzAtNDk1NS1hNGViLWQ5NmFjM2Ez
ZGNlMS5jcmwwHwYDVR0jBBgwFoAUqert7nmv8bYRdylxsdovFPYCBJAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC84OTI3ODc0Ni01MjcwLTQ5NTUtYTRlYi1kOTZh
YzNhM2RjZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJG0P0dJ4Oe33SIMUshRalOh0XG+JwSt9a4xSPrJQue5cTC1PncHBxS6
sJQmO3YXiWvywAW6qjuJ7XoYqyERIKLrMyGni2DlzFpzqp6rBZD5f131Wa3b2OM7
99/zPXMJgkl+Ad72RdeaYFLXlRa2TysdrgZY/khYuoEUOFZnNuaIfW6R+mSoA5GK
GFmrGvLcIg+HcOcEVvzIxwfLg6RtO76/5fQIL24QoQmgga7IjR0xJpgY+tBVlXSS
HyAEyxljVlHk0UcQ2c6PfHl5jizADR96N+36IUMw0f2UYCDjcKIAExgBHGVnKhOO
/GOPCi3pakMedvu8N7Pa8Q5XYFVZbDo=
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:26 2026 by rpki-client