Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/db4baa0b-d2db-358c-839a-ab3c2ab3a95e.roa
File:                     db4baa0b-d2db-358c-839a-ab3c2ab3a95e.roa (raw, json)
Hash identifier:          1qmL4WzCvfcpTHeY7K10tH68IJidkuXEA+QrP4xk+so=
Subject key identifier:   23:97:DD:FD:B6:13:B3:64:EF:43:82:FE:F7:93:AB:AD:EA:42:E0:3D
Certificate issuer:       /CN=73b0221a-01e7-4f40-8f9b-6e4cf92c6efa
Certificate serial:       010D0C9F4328584EAE81A6ECEAA2662873896900
Authority key identifier: F0:F2:15:30:7C:82:D3:64:6E:75:CE:20:B4:CD:E2:32:30:5F:2C:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/db4baa0b-d2db-358c-839a-ab3c2ab3a95e.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     46998
IP address blocks:        23.176.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a6:ec:ea:a2:66:28:73:89:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b0221a-01e7-4f40-8f9b-6e4cf92c6efa
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=478b2472-d720-4fdc-b25c-bf55292deae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:4c:55:06:a5:6b:97:be:a7:b5:29:98:ee:
                    4e:28:76:40:ec:17:78:59:e8:52:ce:ec:30:95:40:
                    65:f6:4c:a0:d6:28:03:5a:aa:b5:55:ce:f5:e1:23:
                    87:48:29:d6:2f:84:d1:ca:32:d0:39:5a:eb:6a:0a:
                    e9:19:1c:0b:0c:2d:8b:01:3b:d2:35:a7:a7:9c:ca:
                    da:67:43:c4:53:aa:b8:35:0b:33:b3:a6:ae:96:f6:
                    39:01:5b:0b:45:bd:ef:4a:83:c3:53:a8:c8:74:fc:
                    69:e6:aa:c6:2d:a1:53:90:24:b5:b3:4b:b2:75:65:
                    22:7f:c9:d0:2a:38:4a:37:71:3d:5e:6b:95:0d:1f:
                    3b:08:97:8d:9e:51:b9:42:5c:be:f8:8b:7e:1b:87:
                    e0:3a:3b:bc:e0:0b:ba:6b:49:ff:29:0e:37:92:20:
                    f6:f8:9b:7c:67:4c:c5:f1:fb:69:b5:c0:2c:09:ec:
                    8d:9f:59:24:19:ef:79:14:8d:7a:06:51:22:5c:2e:
                    3f:90:84:30:a3:42:90:0f:0e:be:7b:98:b5:29:77:
                    ee:4f:31:74:e8:fd:26:12:15:4f:7c:da:b3:28:6c:
                    c5:82:2c:26:bc:1a:80:5b:3f:2f:27:d2:4b:01:d3:
                    b8:12:84:91:07:90:76:73:31:ac:d1:d0:6d:b3:bd:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:97:DD:FD:B6:13:B3:64:EF:43:82:FE:F7:93:AB:AD:EA:42:E0:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/db4baa0b-d2db-358c-839a-ab3c2ab3a95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.crl

            X509v3 Authority Key Identifier:
                keyid:F0:F2:15:30:7C:82:D3:64:6E:75:CE:20:B4:CD:E2:32:30:5F:2C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/73b0221a-01e7-4f40-8f9b-6e4cf92c6efa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:80:b8:67:fe:4c:73:86:03:71:1c:18:51:69:8d:45:ec:
         86:23:48:e9:3b:9d:a1:af:5d:8a:c6:db:94:62:a0:00:d5:54:
         23:00:80:7b:fb:16:6f:5b:15:8e:08:be:39:cc:0b:93:42:6b:
         82:47:79:f0:fc:10:90:a1:f2:ba:f3:81:47:14:d4:75:dd:b6:
         89:fc:44:79:d1:07:4f:b1:8f:32:91:8c:6a:59:3c:03:b9:6f:
         23:6c:74:0b:bf:44:84:a7:13:40:62:de:03:f7:71:92:37:3c:
         7e:0f:55:b8:b0:70:b8:3d:4d:1d:9d:5e:83:1e:ab:75:de:64:
         b4:56:5e:88:4f:60:ec:51:45:22:ef:14:6e:c2:e0:37:be:18:
         03:16:f7:83:79:df:11:82:78:f3:5f:04:d1:fc:2b:1b:fa:08:
         65:71:92:aa:19:33:f3:c7:c2:15:81:ca:79:09:8d:6a:60:9c:
         09:4b:f6:4f:b5:af:ee:5e:f5:0d:49:1a:69:ae:cb:d7:4c:6e:
         b9:6f:e4:73:7f:c5:fd:fb:a6:b3:7b:df:e7:4d:35:4f:13:8b:
         2b:2d:5c:92:ef:5a:01:66:82:6e:09:f1:19:c9:a8:ec:fb:36:
         bd:00:37:a6:f0:97:7b:ab:6e:d6:4e:4e:d1:e9:d9:b1:c1:c8:
         34:31:75:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugabs6qJmKHOJaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNiMDIyMWEtMDFlNy00ZjQwLThmOWItNmU0Y2Y5MmM2
ZWZhMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
NDc4YjI0NzItZDcyMC00ZmRjLWIyNWMtYmY1NTI5MmRlYWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkBMVQala5e+p7UpmO5OKHZA7Bd4WehSzuww
lUBl9kyg1igDWqq1Vc714SOHSCnWL4TRyjLQOVrragrpGRwLDC2LATvSNaennMra
Z0PEU6q4NQszs6aulvY5AVsLRb3vSoPDU6jIdPxp5qrGLaFTkCS1s0uydWUif8nQ
KjhKN3E9XmuVDR87CJeNnlG5Qly++It+G4fgOju84Au6a0n/KQ43kiD2+Jt8Z0zF
8ftptcAsCeyNn1kkGe95FI16BlEiXC4/kIQwo0KQDw6+e5i1KXfuTzF06P0mEhVP
fNqzKGzFgiwmvBqAWz8vJ9JLAdO4EoSRB5B2czGs0dBts727GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOX3f22E7Nk70OC/veTq63qQuA9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83M2Iw
MjIxYS0wMWU3LTRmNDAtOGY5Yi02ZTRjZjkyYzZlZmEvZGI0YmFhMGItZDJkYi0z
NThjLTgzOWEtYWIzYzJhYjNhOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzNiMDIyMWEtMDFlNy00ZjQwLThm
OWItNmU0Y2Y5MmM2ZWZhLzczYjAyMjFhLTAxZTctNGY0MC04ZjliLTZlNGNmOTJj
NmVmYS5jcmwwHwYDVR0jBBgwFoAU8PIVMHyC02Rudc4gtM3iMjBfLAYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83M2IwMjIxYS0wMWU3LTRmNDAtOGY5Yi02ZTRj
ZjkyYzZlZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7AIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTMgLhn/kxzhgNxHBhRaY1F7IYjSOk7naGvXYrG25RioADVVCMAgHv7
Fm9bFY4IvjnMC5NCa4JHefD8EJCh8rrzgUcU1HXdton8RHnRB0+xjzKRjGpZPAO5
byNsdAu/RISnE0Bi3gP3cZI3PH4PVbiwcLg9TR2dXoMeq3XeZLRWXohPYOxRRSLv
FG7C4De+GAMW94N53xGCePNfBNH8Kxv6CGVxkqoZM/PHwhWBynkJjWpgnAlL9k+1
r+5e9Q1JGmmuy9dMbrlv5HN/xf37prN73+dNNU8TiystXJLvWgFmgm4J8RnJqOz7
Nr0AN6bwl3urbtZOTtHp2bHByDQxdek=
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:12:56 2026 by rpki-client