Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/9848fcdf-1f42-3039-9c5d-150d7744c940.roa
File:                     9848fcdf-1f42-3039-9c5d-150d7744c940.roa (raw, json)
Hash identifier:          lEujcVoTY2nXyuLPiY6DspUaKipiITRYvJ9YfMj7MQw=
Subject key identifier:   4C:1C:C4:0C:04:FD:A3:9A:46:2D:23:85:AC:6B:1A:F3:6F:2C:09:70
Certificate issuer:       /CN=23a36039-999e-482c-a907-eb5291746b2b
Certificate serial:       010D0C9F4328584FA39A6A3FFCEA2478D1E0CC00
Authority key identifier: FA:B5:3B:D4:74:47:50:BA:0E:F9:B4:9C:98:8C:20:DD:87:78:66:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/9848fcdf-1f42-3039-9c5d-150d7744c940.roa
Signing time:             Tue 27 Oct 2026 08:03:20 +0000
ROA not before:           Tue 27 Oct 2026 08:03:20 +0000
ROA not after:            Mon 25 Jan 2027 09:03:20 +0000
asID:                     403141
IP address blocks:        23.166.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/23a36039-999e-482c-a907-eb5291746b2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/23a36039-999e-482c-a907-eb5291746b2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a3:9a:6a:3f:fc:ea:24:78:d1:e0:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a36039-999e-482c-a907-eb5291746b2b
        Validity
            Not Before: Oct 27 08:03:20 2026 GMT
            Not After : Jan 25 09:03:20 2027 GMT
        Subject: CN=68905313-9ae8-4c24-ba88-66a16db30bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:b9:d1:ac:79:4a:89:e4:85:76:8f:98:34:
                    83:7c:0f:c2:ba:20:6f:03:a8:45:c6:94:7c:33:dc:
                    ab:25:60:3f:02:2b:bd:0e:30:96:99:41:f8:55:93:
                    53:69:c7:bc:79:b5:d6:1b:f7:78:e7:f1:4d:2a:a5:
                    c9:60:a0:71:a6:cb:ae:b2:c2:48:bd:14:2a:9f:4f:
                    e7:15:29:67:be:54:b6:05:88:0a:8e:2f:50:e4:08:
                    17:e6:5a:25:e1:c9:1e:82:ec:2d:a2:50:f9:cc:0a:
                    4a:3a:a2:dc:87:9d:83:a5:3c:a9:99:36:f5:8e:61:
                    74:79:af:08:dc:76:c1:18:84:93:a1:39:d6:c4:41:
                    4c:50:fa:51:05:d8:dc:15:4d:c2:3e:0d:98:11:5a:
                    1f:99:15:10:22:94:92:74:73:92:65:9e:44:f0:56:
                    40:41:c5:e0:d4:52:f4:46:2f:40:3c:96:8d:b8:dd:
                    a8:58:da:37:36:aa:af:e9:7c:d9:bc:b2:e0:ae:5c:
                    51:78:1f:57:b7:14:fe:67:19:32:86:c2:53:32:b7:
                    ab:e1:1e:e6:4f:88:3b:91:15:56:e1:76:d4:0d:17:
                    61:4b:d8:64:2f:63:86:81:44:c8:3d:98:dc:40:75:
                    3e:d9:f8:98:7f:47:48:61:a5:a6:73:fd:dd:e9:1f:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1C:C4:0C:04:FD:A3:9A:46:2D:23:85:AC:6B:1A:F3:6F:2C:09:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/9848fcdf-1f42-3039-9c5d-150d7744c940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/23a36039-999e-482c-a907-eb5291746b2b.crl

            X509v3 Authority Key Identifier:
                keyid:FA:B5:3B:D4:74:47:50:BA:0E:F9:B4:9C:98:8C:20:DD:87:78:66:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:df:58:e4:c7:53:98:3d:c6:5c:9d:77:d3:7c:fe:80:38:
         08:cc:11:ab:6c:4e:8f:ac:5c:ec:5e:75:84:4a:a1:dd:80:73:
         92:1f:62:f0:22:1d:2a:01:d1:5a:6d:30:8b:c1:6b:de:c2:55:
         0e:9e:c0:b6:5c:49:3c:b4:4f:21:10:10:c1:8a:22:a9:28:7d:
         c5:50:33:1d:99:1f:ca:f9:83:fa:5d:00:b8:04:66:38:65:09:
         e5:7d:4e:14:fe:1c:61:c7:57:31:79:b5:88:1f:e2:6d:64:e2:
         50:d4:bf:ba:f8:99:61:cf:ce:da:60:7b:0f:c0:71:a3:df:ce:
         23:1d:d9:4d:a5:dc:39:bd:64:6d:74:54:89:7c:bd:89:fa:d9:
         f0:6e:c7:7b:f5:fe:53:be:90:5d:08:d1:f1:32:e0:0f:8f:54:
         4f:87:f3:d4:9b:81:04:41:33:42:17:47:16:67:7f:e6:5f:8f:
         38:e8:6d:4a:f9:73:d3:3b:06:2e:8b:ee:8d:54:c5:9e:cc:28:
         23:93:2f:dd:70:f2:35:66:0f:c1:d3:d8:a7:e8:72:0b:d3:15:
         f7:80:f4:a6:e3:ba:2a:48:fb:5d:27:60:ae:c7:23:5a:26:e6:
         d7:3e:3b:3b:91:5d:a1:42:17:14:25:3f:c8:b4:f5:39:09:cd:
         2d:75:9a:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jmmo//OokeNHgzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNhMzYwMzktOTk5ZS00ODJjLWE5MDctZWI1MjkxNzQ2
YjJiMB4XDTI2MTAyNzA4MDMyMFoXDTI3MDEyNTA5MDMyMFowLzEtMCsGA1UEAxMk
Njg5MDUzMTMtOWFlOC00YzI0LWJhODgtNjZhMTZkYjMwYmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7650ax5SonkhXaPmDSDfA/CuiBvA6hFxpR8
M9yrJWA/Aiu9DjCWmUH4VZNTace8ebXWG/d45/FNKqXJYKBxpsuussJIvRQqn0/n
FSlnvlS2BYgKji9Q5AgX5lol4ckeguwtolD5zApKOqLch52DpTypmTb1jmF0ea8I
3HbBGISToTnWxEFMUPpRBdjcFU3CPg2YEVofmRUQIpSSdHOSZZ5E8FZAQcXg1FL0
Ri9APJaNuN2oWNo3Nqqv6XzZvLLgrlxReB9XtxT+ZxkyhsJTMrer4R7mT4g7kRVW
4XbUDRdhS9hkL2OGgUTIPZjcQHU+2fiYf0dIYaWmc/3d6R+lWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwcxAwE/aOaRi0jhaxrGvNvLAlwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yM2Ez
NjAzOS05OTllLTQ4MmMtYTkwNy1lYjUyOTE3NDZiMmIvOTg0OGZjZGYtMWY0Mi0z
MDM5LTljNWQtMTUwZDc3NDRjOTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMjNhMzYwMzktOTk5ZS00ODJjLWE5
MDctZWI1MjkxNzQ2YjJiLzIzYTM2MDM5LTk5OWUtNDgyYy1hOTA3LWViNTI5MTc0
NmIyYi5jcmwwHwYDVR0jBBgwFoAU+rU71HRHULoO+bScmIwg3Yd4ZqQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8yM2EzNjAzOS05OTllLTQ4MmMtYTkwNy1lYjUy
OTE3NDZiMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6YkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUr31jkx1OYPcZcnXfTfP6AOAjMEatsTo+sXOxedYRKod2Ac5IfYvAi
HSoB0VptMIvBa97CVQ6ewLZcSTy0TyEQEMGKIqkofcVQMx2ZH8r5g/pdALgEZjhl
CeV9ThT+HGHHVzF5tYgf4m1k4lDUv7r4mWHPztpgew/AcaPfziMd2U2l3Dm9ZG10
VIl8vYn62fBux3v1/lO+kF0I0fEy4A+PVE+H89SbgQRBM0IXRxZnf+ZfjzjobUr5
c9M7Bi6L7o1UxZ7MKCOTL91w8jVmD8HT2KfocgvTFfeA9KbjuipI+10nYK7HI1om
5tc+OzuRXaFCFxQlP8i09TkJzS11miw=
-----END CERTIFICATE-----
Generated at Wed Nov 4 20:25:15 2026 by rpki-client