Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/f89447f4-e73e-34a6-9fb3-83a77ffc2b3c.roa
File:                     f89447f4-e73e-34a6-9fb3-83a77ffc2b3c.roa (raw, json)
Hash identifier:          o8PyZknEo4T3UZpwo2U7sIyv7/qcUUiEdzKE27NpB6U=
Subject key identifier:   E8:A0:28:A1:3C:CC:D8:FC:9F:5D:51:D7:16:62:D3:E3:44:C0:AB:6F
Certificate issuer:       /CN=08dcc485-736f-4f70-9540-27570f90bdf5
Certificate serial:       010D0C9F4328584E709F7D6EA363693E329A25D8
Authority key identifier: A2:0F:30:D1:F2:05:6B:CB:C8:A2:90:A3:91:B3:3C:21:D6:60:53:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/f89447f4-e73e-34a6-9fb3-83a77ffc2b3c.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     152179
IP address blocks:        23.151.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/08dcc485-736f-4f70-9540-27570f90bdf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/08dcc485-736f-4f70-9540-27570f90bdf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7d:6e:a3:63:69:3e:32:9a:25:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08dcc485-736f-4f70-9540-27570f90bdf5
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=e2314dc0-4ca7-4639-ad70-cda378a47981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:39:b4:b1:2c:45:1e:d1:55:73:97:ee:ce:
                    c6:96:05:30:31:2a:67:ad:e3:36:b2:b9:b4:0f:09:
                    01:5e:4b:8a:73:4b:89:7c:57:a0:b9:95:98:ca:07:
                    b7:ba:fa:05:18:ec:11:94:f7:11:15:5f:e3:5d:37:
                    a0:ba:3a:d6:5a:23:1a:46:f4:b2:da:2e:33:f9:e5:
                    4b:83:df:1a:05:ab:20:93:28:94:bb:9a:05:7e:ae:
                    6f:7f:dd:11:a5:8a:21:3e:f1:dd:14:5b:2f:d1:97:
                    98:98:62:fb:e3:d5:9f:d8:e1:69:72:78:28:9b:e1:
                    6d:00:fa:01:4b:6c:d1:f9:b1:37:d7:1e:7a:b4:13:
                    fd:6f:34:a1:81:60:e0:b6:de:43:2d:0c:c1:df:f7:
                    db:8a:aa:fb:26:81:0a:4a:35:06:1f:47:62:58:75:
                    b3:32:54:40:e8:97:56:42:e7:44:78:f3:57:6a:b9:
                    7b:01:f3:ba:d0:0b:07:07:bc:93:b3:da:f9:c3:d2:
                    01:07:e0:6e:40:ca:dc:90:8a:f1:4b:a3:07:d0:8e:
                    8c:0f:6c:ec:d7:18:dd:89:87:8a:6b:0f:45:5e:38:
                    b0:53:f7:d5:c5:5e:cf:6d:0c:52:30:2a:d4:e0:fb:
                    d9:89:5a:e3:85:ea:09:6b:40:48:90:72:c0:34:0c:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A0:28:A1:3C:CC:D8:FC:9F:5D:51:D7:16:62:D3:E3:44:C0:AB:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/f89447f4-e73e-34a6-9fb3-83a77ffc2b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/08dcc485-736f-4f70-9540-27570f90bdf5.crl

            X509v3 Authority Key Identifier:
                keyid:A2:0F:30:D1:F2:05:6B:CB:C8:A2:90:A3:91:B3:3C:21:D6:60:53:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:e7:ba:f5:0f:85:6e:ff:5b:14:cb:b0:ba:64:80:40:1e:
         b5:77:22:a9:08:af:19:c8:9b:bb:f3:11:72:d2:59:34:07:73:
         e1:ca:12:12:0c:d9:62:59:69:fb:1d:00:4c:39:6b:17:e3:63:
         8a:4a:22:e8:7a:9b:1a:a4:13:c5:9b:ad:a1:59:c7:4a:4a:17:
         65:d4:e9:bf:6b:9f:19:83:08:3c:9f:a1:74:2f:18:33:02:c9:
         63:b0:ae:c3:f2:d8:8f:60:26:8d:48:7b:14:b9:1a:c1:92:f2:
         39:d1:f0:58:de:59:ab:da:86:69:1b:36:a6:03:a0:01:f4:70:
         cc:7d:a2:91:f5:8f:e2:7e:26:f3:63:1d:0d:71:5c:15:8f:54:
         7b:a7:a1:ce:0c:f9:67:35:8c:7e:28:b1:32:6f:41:e7:62:42:
         51:89:18:9d:06:92:c5:19:ea:cb:02:e4:9a:49:93:a8:33:27:
         94:98:f0:e8:95:20:0b:4f:00:6d:cd:91:de:6b:3c:59:62:84:
         74:51:d8:11:cc:78:76:87:c8:10:58:09:f0:ad:d7:e8:ff:ab:
         49:bb:7a:9d:70:b5:ea:03:e9:ce:7a:00:1b:28:89:79:8a:3b:
         f7:37:df:47:96:67:d9:a3:79:7f:12:f8:d0:7f:ec:b9:0a:56:
         e4:56:ca:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn31uo2NpPjKaJdgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhkY2M0ODUtNzM2Zi00ZjcwLTk1NDAtMjc1NzBmOTBi
ZGY1MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk
ZTIzMTRkYzAtNGNhNy00NjM5LWFkNzAtY2RhMzc4YTQ3OTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1E5tLEsRR7RVXOX7s7GlgUwMSpnreM2srm0
DwkBXkuKc0uJfFeguZWYyge3uvoFGOwRlPcRFV/jXTegujrWWiMaRvSy2i4z+eVL
g98aBasgkyiUu5oFfq5vf90RpYohPvHdFFsv0ZeYmGL749Wf2OFpcngom+FtAPoB
S2zR+bE31x56tBP9bzShgWDgtt5DLQzB3/fbiqr7JoEKSjUGH0diWHWzMlRA6JdW
QudEePNXarl7AfO60AsHB7yTs9r5w9IBB+BuQMrckIrxS6MH0I6MD2zs1xjdiYeK
aw9FXjiwU/fVxV7PbQxSMCrU4PvZiVrjheoJa0BIkHLANAypFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOigKKE8zNj8n11R1xZi0+NEwKtvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wOGRj
YzQ4NS03MzZmLTRmNzAtOTU0MC0yNzU3MGY5MGJkZjUvZjg5NDQ3ZjQtZTczZS0z
NGE2LTlmYjMtODNhNzdmZmMyYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDhkY2M0ODUtNzM2Zi00ZjcwLTk1
NDAtMjc1NzBmOTBiZGY1LzA4ZGNjNDg1LTczNmYtNGY3MC05NTQwLTI3NTcwZjkw
YmRmNS5jcmwwHwYDVR0jBBgwFoAUog8w0fIFa8vIopCjkbM8IdZgUxwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8wOGRjYzQ4NS03MzZmLTRmNzAtOTU0MC0yNzU3
MGY5MGJkZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5dUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4057r1D4Vu/1sUy7C6ZIBAHrV3IqkIrxnIm7vzEXLSWTQHc+HKEhIM
2WJZafsdAEw5axfjY4pKIuh6mxqkE8WbraFZx0pKF2XU6b9rnxmDCDyfoXQvGDMC
yWOwrsPy2I9gJo1IexS5GsGS8jnR8FjeWavahmkbNqYDoAH0cMx9opH1j+J+JvNj
HQ1xXBWPVHunoc4M+Wc1jH4osTJvQediQlGJGJ0GksUZ6ssC5JpJk6gzJ5SY8OiV
IAtPAG3Nkd5rPFlihHRR2BHMeHaHyBBYCfCt1+j/q0m7ep1wteoD6c56ABsoiXmK
O/c330eWZ9mjeX8S+NB/7LkKVuRWyug=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:13:21 2026 by rpki-client