Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/395ddc12-f594-330c-a06d-5729ddd66ad0.roa
File:                     395ddc12-f594-330c-a06d-5729ddd66ad0.roa (raw, json)
Hash identifier:          Oqj0s71WoaajnnV/YT4PsGI2ihHZR4Epyvv54TsPK5I=
Subject key identifier:   2D:34:40:F1:62:04:5F:3E:3C:B0:0C:6B:28:9A:79:F0:89:87:02:00
Certificate issuer:       /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214
Certificate serial:       010D0C9F4328584D95EFF82B236C9C665C241B80
Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/395ddc12-f594-330c-a06d-5729ddd66ad0.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     32205
IP address blocks:        23.145.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f8:2b:23:6c:9c:66:5c:24:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=011995b9-0b9f-4a63-9f24-fd8cbb965d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:10:59:7b:18:9d:7c:b9:32:a0:a5:8c:bb:
                    65:e9:5f:e2:48:7d:eb:2d:a7:66:c9:e6:65:a3:e9:
                    0c:3b:40:fc:33:c2:b7:30:a8:34:8c:ce:d3:96:2d:
                    37:94:c0:fa:2b:d4:42:0d:48:89:ab:c5:a8:ff:6e:
                    e2:f3:c4:e7:96:e6:ac:c8:6b:c6:b4:5d:61:4f:2e:
                    20:74:a0:d5:f7:d0:19:ae:74:2f:6b:76:4c:00:8f:
                    ff:8a:02:db:2a:b1:fd:f3:b8:c9:cb:ce:b1:69:03:
                    e2:09:04:71:7f:29:33:86:a9:49:9e:61:87:26:85:
                    86:82:db:50:fb:72:75:3d:2a:a1:3e:5d:c2:a5:24:
                    c2:ed:6b:4a:c1:d3:2d:1c:59:36:ed:49:27:43:5a:
                    2a:8b:8b:4d:56:da:5e:51:b7:7b:0b:ce:d4:5b:f9:
                    da:f1:08:64:be:06:77:05:a1:f7:42:33:df:44:d6:
                    c2:93:c0:66:f0:2f:80:3d:61:07:8a:e1:91:28:4f:
                    a0:57:4e:d1:75:1a:99:f0:cc:2f:e5:ba:fa:a6:14:
                    35:4a:8a:0b:64:9c:d9:bb:39:60:44:cf:64:e7:12:
                    30:04:50:2e:48:40:c2:57:9a:ed:83:64:61:84:4e:
                    7a:43:e6:25:5d:55:26:fb:31:45:2f:5a:ff:53:02:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:40:F1:62:04:5F:3E:3C:B0:0C:6B:28:9A:79:F0:89:87:02:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/395ddc12-f594-330c-a06d-5729ddd66ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl

            X509v3 Authority Key Identifier:
                keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:26:34:c4:70:ac:95:7a:98:d5:4a:c2:68:94:bc:86:06:
         05:82:6e:4c:2f:c2:98:62:5a:39:a5:97:31:c8:e3:c9:ad:e0:
         76:a5:9c:e1:9c:7d:f0:21:e3:d2:44:e4:78:3b:e9:c4:4c:aa:
         5a:c1:5d:77:38:df:dd:3e:e0:52:3e:07:5f:52:bc:91:cc:78:
         7c:ce:7a:72:de:ab:2d:9a:04:72:4b:8d:37:9e:23:56:f9:8c:
         5e:14:f6:01:e9:f6:cf:47:81:54:ca:e0:8e:b0:e2:bb:89:5f:
         6c:66:06:09:67:97:23:fb:4e:2c:00:72:1d:a5:08:70:88:b4:
         f3:61:99:05:6c:93:a8:39:aa:1c:cf:3d:55:37:13:7b:85:eb:
         7c:99:97:6c:35:07:a2:8a:bc:c0:f2:e6:c4:be:c5:c4:24:39:
         8b:1e:a7:1e:15:40:fb:40:73:39:06:e8:c1:93:db:44:4a:75:
         1a:e7:b1:ee:02:63:a6:22:62:24:de:27:98:e0:42:1d:8d:dd:
         db:2a:e1:60:d3:0e:8e:8a:f6:9e:63:de:e2:88:b0:bb:01:7d:
         8c:78:aa:5f:0a:f1:f0:3f:a0:61:e3:01:f8:b5:4c:0d:fa:e5:
         3c:98:39:6e:83:d5:26:b7:05:b6:6a:5f:c5:94:2d:e1:d8:19:
         7a:3d:f3:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7/grI2ycZlwkG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNmYWFiNGItN2Q0OS00M2I3LTgwZGQtODRhYjBlYmVi
MjE0MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
MDExOTk1YjktMGI5Zi00YTYzLTlmMjQtZmQ4Y2JiOTY1ZDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0EQWXsYnXy5MqCljLtl6V/iSH3rLadmyeZl
o+kMO0D8M8K3MKg0jM7Tli03lMD6K9RCDUiJq8Wo/27i88TnluasyGvGtF1hTy4g
dKDV99AZrnQva3ZMAI//igLbKrH987jJy86xaQPiCQRxfykzhqlJnmGHJoWGgttQ
+3J1PSqhPl3CpSTC7WtKwdMtHFk27UknQ1oqi4tNVtpeUbd7C87UW/na8QhkvgZ3
BaH3QjPfRNbCk8Bm8C+APWEHiuGRKE+gV07RdRqZ8Mwv5br6phQ1SooLZJzZuzlg
RM9k5xIwBFAuSEDCV5rtg2RhhE56Q+YlXVUm+zFFL1r/UwKvmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC00QPFiBF8+PLAMayiaefCJhwIAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Zh
YWI0Yi03ZDQ5LTQzYjctODBkZC04NGFiMGViZWIyMTQvMzk1ZGRjMTItZjU5NC0z
MzBjLWEwNmQtNTcyOWRkZDY2YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNmYWFiNGItN2Q0OS00M2I3LTgw
ZGQtODRhYjBlYmViMjE0LzljZmFhYjRiLTdkNDktNDNiNy04MGRkLTg0YWIwZWJl
YjIxNC5jcmwwHwYDVR0jBBgwFoAUYZ3XubI1BYSlrEpe24EOAMY4JC0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC85Y2ZhYWI0Yi03ZDQ5LTQzYjctODBkZC04NGFi
MGViZWIyMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJM9JjTEcKyVepjVSsJolLyGBgWCbkwvwphiWjmllzHI48mt4HalnOGc
ffAh49JE5Hg76cRMqlrBXXc4390+4FI+B19SvJHMeHzOenLeqy2aBHJLjTeeI1b5
jF4U9gHp9s9HgVTK4I6w4ruJX2xmBglnlyP7TiwAch2lCHCItPNhmQVsk6g5qhzP
PVU3E3uF63yZl2w1B6KKvMDy5sS+xcQkOYsepx4VQPtAczkG6MGT20RKdRrnse4C
Y6YiYiTeJ5jgQh2N3dsq4WDTDo6K9p5j3uKIsLsBfYx4ql8K8fA/oGHjAfi1TA36
5TyYOW6D1Sa3BbZqX8WULeHYGXo988A=
-----END CERTIFICATE-----
Generated at Wed May 13 11:24:24 2026 by rpki-client