Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa
File:                     284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa (raw, json)
Hash identifier:          mbfIO/1rV3QHkRniw1hhTcZJvZqP5M8sVC7/TtSAjVg=
Subject key identifier:   EA:C9:E3:2A:9A:4C:F0:8F:E3:44:5D:A3:85:9A:CE:4A:59:D7:E6:CC
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584F655D784E1B0202D86E6E59E0
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     22188
IP address blocks:        23.134.96.0/23 maxlen: 24
                          2604:bc40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:78:4e:1b:02:02:d8:6e:6e:59:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=268a9879-e8f3-47f5-849b-bd38163eb6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b8:b2:60:d1:a0:c2:a8:5d:4e:cb:c8:52:52:
                    07:21:40:a8:a8:45:9d:41:2a:4b:28:9d:8d:3a:4b:
                    7c:cf:e1:9d:43:6e:e3:e7:99:e9:dc:7d:3e:f2:5d:
                    ac:6f:3a:84:c6:2e:3b:80:d1:ee:43:87:b9:c6:31:
                    91:81:ae:6c:17:93:6a:9c:64:e9:f9:6f:3d:1b:67:
                    6f:28:a3:96:18:a5:aa:e0:d1:11:e7:59:2a:f0:3d:
                    90:19:f8:f4:39:c4:ff:9d:f7:01:ad:60:18:1a:fc:
                    b3:46:66:44:56:81:be:ec:26:79:9d:25:18:76:1a:
                    79:de:5d:48:ce:4d:29:0f:be:dd:c0:7e:f3:d7:3c:
                    11:ea:a9:5a:46:3a:e5:62:ac:e9:1f:cf:be:95:a3:
                    7b:d6:77:36:54:bf:d1:55:cd:cf:45:1a:5a:d4:2d:
                    b9:8b:c2:22:e0:b6:fb:71:56:8b:de:42:b0:65:28:
                    b2:4a:30:d9:e0:e8:8b:82:0a:de:42:31:6a:e0:f7:
                    c7:99:c8:c7:b6:7b:3d:09:68:35:60:28:c1:77:ad:
                    c2:0c:a7:61:a2:8f:a3:50:42:25:b2:aa:48:7b:f0:
                    ca:54:9b:3e:5c:64:92:c4:4d:a6:85:51:3e:8f:97:
                    37:03:6d:7a:b2:cc:9e:77:6c:11:97:cf:07:6f:d7:
                    99:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C9:E3:2A:9A:4C:F0:8F:E3:44:5D:A3:85:9A:CE:4A:59:D7:E6:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.96.0/23
                IPv6:
                  2604:bc40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:24:39:e5:52:86:7e:07:9e:f6:ed:07:ec:44:ae:e3:ee:d2:
         3d:37:a0:07:88:dc:07:61:a1:54:58:49:c1:a3:64:cf:57:e5:
         21:c8:47:bc:6f:92:04:79:28:24:c3:1d:cf:a7:32:5c:ee:2f:
         b7:a0:36:1c:1d:ed:c4:c0:6e:32:f7:8e:1e:8e:0e:78:eb:be:
         02:e6:32:a2:99:f6:5c:9e:28:14:2e:b1:db:ee:1f:c8:04:fe:
         e8:49:9b:69:7b:9f:bd:27:76:18:c5:b7:1b:75:af:01:cd:35:
         0a:bf:75:bd:f4:ab:08:7b:e6:f1:35:9f:1e:37:1d:c7:51:b0:
         bb:c3:d7:92:8f:ad:b5:55:54:55:fa:0a:df:f0:d7:11:96:1e:
         0f:ef:19:68:54:f3:2e:36:0c:82:4c:e8:e0:2a:c4:ae:fe:35:
         7f:dd:ad:9b:ea:f6:e2:fa:d6:aa:c2:f6:99:d9:52:68:40:ba:
         67:56:a0:4b:bb:55:4c:99:f7:d7:ba:e7:60:f9:c0:5c:40:ce:
         fb:7c:27:ea:61:88:4c:33:bf:82:ed:91:59:a6:de:15:8c:3b:
         4d:2d:9e:f4:09:ea:cf:04:7b:3a:fb:fd:2c:5c:67:4a:4b:5a:
         89:c4:41:ed:dc:43:0e:cf:d9:77:d0:8c:98:62:54:be:aa:81:
         51:ba:12:bc
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9lXXhOGwIC2G5uWeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5
M2E4MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MjY4YTk4NzktZThmMy00N2Y1LTg0OWItYmQzODE2M2ViNmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbiyYNGgwqhdTsvIUlIHIUCoqEWdQSpLKJ2N
Okt8z+GdQ27j55np3H0+8l2sbzqExi47gNHuQ4e5xjGRga5sF5NqnGTp+W89G2dv
KKOWGKWq4NER51kq8D2QGfj0OcT/nfcBrWAYGvyzRmZEVoG+7CZ5nSUYdhp53l1I
zk0pD77dwH7z1zwR6qlaRjrlYqzpH8++laN71nc2VL/RVc3PRRpa1C25i8Ii4Lb7
cVaL3kKwZSiySjDZ4OiLggreQjFq4PfHmcjHtns9CWg1YCjBd63CDKdhoo+jUEIl
sqpIe/DKVJs+XGSSxE2mhVE+j5c3A216ssyed2wRl88Hb9eZ9wIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFOrJ4yqaTPCP40Rdo4WazkpZ1+bMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw
NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvMjg0YWIxMjItYWU1Yi0z
MGExLWIwY2YtMWUwNDg4NmMxNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4
ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx
OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi
ZTZlMTkzYTguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF4ZgMA0E
AgACMAcDBQAmBLxAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAH8kOeVShn4HnvbtB+xEruPu0j03oAeI3Adh
oVRYScGjZM9X5SHIR7xvkgR5KCTDHc+nMlzuL7egNhwd7cTAbjL3jh6ODnjrvgLm
MqKZ9lyeKBQusdvuH8gE/uhJm2l7n70ndhjFtxt1rwHNNQq/db30qwh75vE1nx43
HcdRsLvD15KPrbVVVFX6Ct/w1xGWHg/vGWhU8y42DIJM6OAqxK7+NX/drZvq9uL6
1qrC9pnZUmhAumdWoEu7VUyZ99e652D5wFxAzvt8J+phiEwzv4LtkVmm3hWMO00t
nvQJ6s8Eezr7/SxcZ0pLWonEQe3cQw7P2XfQjJhiVL6qgVG6Erw=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:39:43 2026 by rpki-client