Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
File:                     11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa (raw, json)
Hash identifier:          xcHI1CbZ/mgRHp8mPBwdD6roGFdaw4yk2qQnCJhNyDs=
Subject key identifier:   F3:7D:85:85:CD:C6:2F:58:00:CD:48:06:63:E9:BE:1C:D5:73:C9:C1
Certificate issuer:       /CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Certificate serial:       010D0C9F4328584ECD372F4288DDF8ACFE7FF3D8
Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     394144
IP address blocks:        23.143.8.0/24 maxlen: 24
                          130.51.127.0/24 maxlen: 24
                          2602:27c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:2f:42:88:dd:f8:ac:fe:7f:f3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=8906d4c6-bf61-4a1e-89f4-360f6a881eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:94:da:73:19:be:c6:b7:23:d2:4a:97:89:
                    6f:70:6a:ba:2c:6b:78:97:c1:a0:b1:06:e8:1f:62:
                    85:f3:3c:ec:da:0e:9b:0e:89:35:f2:ae:81:ef:70:
                    88:d9:bd:e6:43:ff:ec:20:dc:fa:24:e9:de:2e:14:
                    2b:4b:96:7b:b0:14:0c:5f:ac:db:c1:3d:26:e6:55:
                    c0:c7:16:93:f3:2b:25:08:09:bb:20:3b:af:c3:12:
                    07:8c:45:27:86:ce:ac:cf:55:3b:64:97:eb:69:2a:
                    a3:32:64:23:35:1a:be:a6:2f:ec:35:60:98:f8:ec:
                    3a:7a:a9:55:37:e8:ec:2a:95:6c:04:ef:a3:6c:5e:
                    b3:ad:3d:26:16:77:ee:3f:67:2c:4b:60:6a:4f:f2:
                    61:1c:84:59:50:89:28:32:e1:d9:f6:a4:e1:b2:d5:
                    42:ee:b4:00:c6:e0:3c:dc:fc:19:1a:38:5a:bb:3e:
                    f9:e9:29:0b:0c:87:1a:14:e2:df:e5:9c:4f:8f:49:
                    b6:76:fa:37:c0:d2:59:21:04:38:d4:84:4c:ce:ee:
                    12:c2:7a:95:08:96:a5:f5:47:9d:79:a2:9f:31:ec:
                    a7:91:9e:40:4b:02:5f:6b:93:7e:ba:96:ac:cd:6d:
                    10:0f:cf:ba:9f:54:f6:7c:0a:ec:1c:70:f4:88:02:
                    7b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7D:85:85:CD:C6:2F:58:00:CD:48:06:63:E9:BE:1C:D5:73:C9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl

            X509v3 Authority Key Identifier:
                keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.8.0/24
                  130.51.127.0/24
                IPv6:
                  2602:27c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:de:08:c5:f2:12:7d:fb:c3:12:b2:4f:c8:34:fa:f8:98:
         e8:33:75:be:85:ad:4b:13:0e:41:ec:65:36:87:7a:f7:96:08:
         ec:77:39:0d:1a:45:5f:fc:5d:22:73:9b:42:99:b7:79:48:ef:
         bc:17:fe:33:ef:28:a7:b5:6a:4d:36:44:92:b0:30:95:76:3e:
         63:cc:20:45:81:ea:95:03:f4:d3:26:df:71:3b:8b:2b:b6:c0:
         03:8d:b2:c3:63:3b:d1:1a:c9:44:43:04:89:f5:b4:13:71:49:
         5b:cb:0c:ad:2d:6e:c3:e7:43:cc:5d:5e:8f:87:ad:a7:be:c1:
         33:06:86:d6:88:2a:e6:fd:33:d8:ec:6e:ec:26:d5:2e:41:6b:
         c7:70:7c:b6:56:96:bc:e5:f1:93:b5:b5:57:6e:67:48:9d:73:
         f1:4a:76:e7:dd:b4:ed:ee:f9:c0:4f:6c:77:5f:c8:50:1d:a3:
         2f:96:83:89:6d:65:a8:00:a3:e7:e9:bf:34:8c:60:9a:1b:46:
         fe:1e:95:ba:e2:01:af:e3:43:48:7c:d1:ca:f6:d1:37:0c:87:
         4d:6f:32:af:4e:14:2c:93:98:1c:e6:b4:31:02:a1:dd:98:7b:
         d0:e0:c1:b7:6f:5a:4f:2c:80:17:c2:b7:38:c0:dc:1d:59:6b:
         25:a7:48:e7
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE7NNy9CiN34rP5/89gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwYjk3OGEtOTQ0YS00MDFjLWFhMjUtMmViYmQ0ZDU4
MzQwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk
ODkwNmQ0YzYtYmY2MS00YTFlLTg5ZjQtMzYwZjZhODgxZWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWSU2nMZvsa3I9JKl4lvcGq6LGt4l8GgsQbo
H2KF8zzs2g6bDok18q6B73CI2b3mQ//sINz6JOneLhQrS5Z7sBQMX6zbwT0m5lXA
xxaT8yslCAm7IDuvwxIHjEUnhs6sz1U7ZJfraSqjMmQjNRq+pi/sNWCY+Ow6eqlV
N+jsKpVsBO+jbF6zrT0mFnfuP2csS2BqT/JhHIRZUIkoMuHZ9qThstVC7rQAxuA8
3PwZGjhauz756SkLDIcaFOLf5ZxPj0m2dvo3wNJZIQQ41IRMzu4SwnqVCJal9Ued
eaKfMeynkZ5ASwJfa5N+upaszW0QD8+6n1T2fArsHHD0iAJ7eQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFPN9hYXNxi9YAM1IBmPpvhzVc8nBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBi
OTc4YS05NDRhLTQwMWMtYWEyNS0yZWJiZDRkNTgzNDAvMTFkMmJiZTEtNmI0Ni0z
NmQzLTk4OTctOWZmMzEwZmI3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwYjk3OGEtOTQ0YS00MDFjLWFh
MjUtMmViYmQ0ZDU4MzQwL2Q3MGI5NzhhLTk0NGEtNDAxYy1hYTI1LTJlYmJkNGQ1
ODM0MC5jcmwwHwYDVR0jBBgwFoAUcx9dnRTzp+3CNGp0KmTLcKr/LnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBiOTc4YS05NDRhLTQwMWMtYWEyNS0yZWJi
ZDRkNTgzNDAuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF48IAwQA
gjN/MA4EAgACMAgDBgQmAgJ8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/Cd4IxfISffvDErJPyDT6+Jjo
M3W+ha1LEw5B7GU2h3r3lgjsdzkNGkVf/F0ic5tCmbd5SO+8F/4z7yintWpNNkSS
sDCVdj5jzCBFgeqVA/TTJt9xO4srtsADjbLDYzvRGslEQwSJ9bQTcUlbywytLW7D
50PMXV6Ph62nvsEzBobWiCrm/TPY7G7sJtUuQWvHcHy2Vpa85fGTtbVXbmdInXPx
Snbn3bTt7vnAT2x3X8hQHaMvloOJbWWoAKPn6b80jGCaG0b+HpW64gGv40NIfNHK
9tE3DIdNbzKvThQsk5gc5rQxAqHdmHvQ4MG3b1pPLIAXwrc4wNwdWWslp0jn
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:17:04 2026 by rpki-client