Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa
File:                     133357b4-8693-3ae2-8de6-4feac1c1f686.roa (raw, json)
Hash identifier:          pS8P8i93qMoe1qkvG8rEm3/NBzyQC98660yvQCiwxZU=
Subject key identifier:   50:4A:D1:35:EC:92:96:78:9B:BC:D5:19:9E:89:7F:34:C6:59:4D:31
Certificate issuer:       /CN=342900a2-b5ea-4a40-a31f-ef2cb2552fc6
Certificate serial:       010D0C9F4328584F74B826D0131001771F231480
Authority key identifier: 29:0E:5B:DA:D5:2D:43:C6:8E:82:A2:F2:52:51:8D:17:9F:BC:41:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa
Signing time:             Sat 10 Oct 2026 13:00:13 +0000
ROA not before:           Sat 10 Oct 2026 13:00:13 +0000
ROA not after:            Fri 08 Jan 2027 14:00:13 +0000
asID:                     216047
IP address blocks:        23.159.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b8:26:d0:13:10:01:77:1f:23:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342900a2-b5ea-4a40-a31f-ef2cb2552fc6
        Validity
            Not Before: Oct 10 13:00:13 2026 GMT
            Not After : Jan  8 14:00:13 2027 GMT
        Subject: CN=4c6eaa8f-6559-4fe1-b209-095c687e6ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:49:00:96:0e:62:4a:ab:d2:29:f9:59:45:
                    31:b3:9c:e5:b0:de:6d:2e:1c:82:4b:de:18:e3:6d:
                    90:ae:66:c3:55:c6:59:5f:82:89:a8:0e:36:c1:3f:
                    15:49:16:16:be:1d:38:8b:14:21:86:3e:ec:4a:e6:
                    d3:d4:5f:94:e5:0f:25:5f:39:eb:37:b1:83:9a:50:
                    ef:0b:5b:17:5d:07:d9:fe:3d:5f:d2:11:a0:bc:3e:
                    cc:c4:cf:7b:eb:d5:e2:63:d5:d4:07:fd:84:d7:66:
                    49:89:a7:0e:a8:6d:0b:70:dc:de:21:14:06:9d:f6:
                    38:d3:0b:cd:45:c4:40:1a:1c:d6:26:f9:3f:df:7a:
                    99:13:28:04:9f:0f:54:66:3c:6a:50:58:c5:bf:e2:
                    b7:05:97:65:62:16:e9:53:f0:ee:7c:4d:66:b4:fe:
                    74:c9:be:36:20:03:51:ab:00:f3:65:c4:7a:5b:5b:
                    52:88:ef:fa:98:e9:62:08:07:0b:06:46:cd:1c:88:
                    5a:ce:84:e6:40:11:4c:20:d2:7f:f1:09:c3:0a:a5:
                    f8:71:ff:a7:b2:31:c8:09:37:dc:fe:fd:19:80:39:
                    cc:1d:15:4e:fa:88:2f:b7:c7:97:4a:98:16:f3:4e:
                    24:f2:d5:98:7d:04:28:61:28:19:c8:2f:ed:d7:15:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4A:D1:35:EC:92:96:78:9B:BC:D5:19:9E:89:7F:34:C6:59:4D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.crl

            X509v3 Authority Key Identifier:
                keyid:29:0E:5B:DA:D5:2D:43:C6:8E:82:A2:F2:52:51:8D:17:9F:BC:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:f2:17:a8:c2:81:30:f1:07:24:dc:39:79:35:23:54:ea:
         dc:1c:e7:2a:ad:5c:b1:af:2d:83:d1:d7:20:af:5b:9c:0c:65:
         7a:0a:98:00:0a:63:4c:bf:6d:33:64:c9:3a:5c:ce:68:92:9b:
         71:59:9f:eb:92:02:68:1e:6c:7b:f1:7c:f3:6b:4f:c8:2d:b4:
         0d:ab:84:ff:e0:12:94:10:d8:5a:52:d1:3c:32:bc:31:a4:56:
         a8:26:1c:31:54:1b:9d:76:ca:15:44:79:42:83:bb:e4:e9:bd:
         98:20:ad:59:cd:e2:5a:54:26:85:fa:0d:6d:83:1a:bf:35:d2:
         d4:d4:6a:6c:98:54:5c:84:bf:ea:37:4a:d6:49:ef:37:fc:e7:
         14:62:b1:5e:bf:fd:91:b8:1e:d1:4f:c2:1f:04:f0:b4:72:0e:
         2b:97:74:a4:c0:b6:be:b1:ec:4f:c2:4c:dd:c4:73:5c:51:79:
         1e:45:6d:e5:4e:fb:ca:ee:65:83:e1:b3:fe:4b:21:89:b9:7a:
         a4:69:53:0d:db:d7:d0:0e:b4:7f:1d:98:4d:a9:b0:ba:56:94:
         e3:ee:54:5d:94:31:00:89:91:88:ec:3b:c3:f2:38:19:ad:a4:
         d2:a4:a3:d7:a0:9e:bc:79:4b:6a:a1:5c:e1:81:28:68:fa:26:
         6f:ae:82:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCbQExABdx8jFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQyOTAwYTItYjVlYS00YTQwLWEzMWYtZWYyY2IyNTUy
ZmM2MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk
NGM2ZWFhOGYtNjU1OS00ZmUxLWIyMDktMDk1YzY4N2U2ZWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBJJAJYOYkqr0in5WUUxs5zlsN5tLhyCS94Y
422QrmbDVcZZX4KJqA42wT8VSRYWvh04ixQhhj7sSubT1F+U5Q8lXznrN7GDmlDv
C1sXXQfZ/j1f0hGgvD7MxM9769XiY9XUB/2E12ZJiacOqG0LcNzeIRQGnfY40wvN
RcRAGhzWJvk/33qZEygEnw9UZjxqUFjFv+K3BZdlYhbpU/DufE1mtP50yb42IANR
qwDzZcR6W1tSiO/6mOliCAcLBkbNHIhazoTmQBFMINJ/8QnDCqX4cf+nsjHICTfc
/v0ZgDnMHRVO+ogvt8eXSpgW804k8tWYfQQoYSgZyC/t1xUxJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBK0TXskpZ4m7zVGZ6JfzTGWU0xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNDI5
MDBhMi1iNWVhLTRhNDAtYTMxZi1lZjJjYjI1NTJmYzYvMTMzMzU3YjQtODY5My0z
YWUyLThkZTYtNGZlYWMxYzFmNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzQyOTAwYTItYjVlYS00YTQwLWEz
MWYtZWYyY2IyNTUyZmM2LzM0MjkwMGEyLWI1ZWEtNGE0MC1hMzFmLWVmMmNiMjU1
MmZjNi5jcmwwHwYDVR0jBBgwFoAUKQ5b2tUtQ8aOgqLyUlGNF5+8QaMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8zNDI5MDBhMi1iNWVhLTRhNDAtYTMxZi1lZjJj
YjI1NTJmYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF59MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0I8heowoEw8Qck3Dl5NSNU6twc5yqtXLGvLYPR1yCvW5wMZXoKmAAK
Y0y/bTNkyTpczmiSm3FZn+uSAmgebHvxfPNrT8gttA2rhP/gEpQQ2FpS0TwyvDGk
VqgmHDFUG512yhVEeUKDu+TpvZggrVnN4lpUJoX6DW2DGr810tTUamyYVFyEv+o3
StZJ7zf85xRisV6//ZG4HtFPwh8E8LRyDiuXdKTAtr6x7E/CTN3Ec1xReR5FbeVO
+8ruZYPhs/5LIYm5eqRpUw3b19AOtH8dmE2psLpWlOPuVF2UMQCJkYjsO8PyOBmt
pNKko9egnrx5S2qhXOGBKGj6Jm+uglg=
-----END CERTIFICATE-----
Generated at Wed Oct 21 07:44:38 2026 by rpki-client