Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/afa7e034-6794-33b6-8334-fe085fd0cb69.roa
File:                     afa7e034-6794-33b6-8334-fe085fd0cb69.roa (raw, json)
Hash identifier:          VvIvPB5wkiaCqdeWCrtSQ+3m8elbO21qsmaPcVXyBUA=
Subject key identifier:   A4:B0:2D:6F:5A:60:9E:2A:14:68:43:1D:32:77:27:FC:A5:9F:F4:3D
Certificate issuer:       /CN=4965f432-2d7f-4618-aa63-bb50ab54c527
Certificate serial:       010D0C9F4328584DBC489F1FBDE51E2ADC1D3C80
Authority key identifier: 83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/afa7e034-6794-33b6-8334-fe085fd0cb69.roa
Signing time:             Tue 05 May 2026 18:39:52 +0000
ROA not before:           Tue 05 May 2026 18:39:52 +0000
ROA not after:            Wed 29 Jul 2026 19:47:26 +0000
asID:                     396313
IP address blocks:        23.134.32.0/24 maxlen: 24
                          2604:d040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:48:9f:1f:bd:e5:1e:2a:dc:1d:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4965f432-2d7f-4618-aa63-bb50ab54c527
        Validity
            Not Before: May  5 18:39:52 2026 GMT
            Not After : Jul 29 19:47:26 2026 GMT
        Subject: CN=e1913812-7da5-4134-aa11-6e5eaf8b2392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:e7:46:e5:4d:c6:4b:c5:ea:55:6e:3e:85:
                    85:77:4c:00:fe:6b:d2:79:c9:32:5d:b0:8a:dc:8d:
                    bc:27:62:ff:68:1f:d6:d7:57:28:18:22:f6:88:37:
                    47:40:ff:98:df:43:1b:79:8a:89:b1:57:97:bc:74:
                    f8:62:99:7e:8e:51:c4:4b:f1:ed:5e:38:07:eb:f8:
                    33:ae:77:a3:5a:ec:8a:9e:0c:ab:0e:8f:a8:0e:67:
                    51:f3:6c:03:12:82:80:9a:65:52:10:23:17:c1:fd:
                    05:a4:79:21:80:92:05:91:34:f8:bf:3c:bd:20:be:
                    55:1e:45:f7:d7:46:23:aa:6b:34:91:54:aa:6d:fa:
                    6c:e4:9a:c2:11:14:54:34:75:de:09:a5:b8:07:a5:
                    58:6e:94:60:95:1c:7c:fd:9d:67:b3:a8:ff:23:8d:
                    79:a9:0c:0d:ed:69:23:1f:c4:30:2d:62:bb:95:22:
                    29:ee:c9:b6:fc:44:04:4b:49:55:81:86:2c:ae:64:
                    ba:58:8d:56:e2:93:3f:f4:a9:bc:11:2e:05:ac:f0:
                    e9:7d:86:87:f6:cc:dc:52:bb:0a:cf:ed:f9:e8:71:
                    e6:9e:31:c9:d2:f3:85:63:26:01:2b:3f:e1:4d:55:
                    33:0f:23:c3:92:7c:37:9e:dd:bf:9e:46:53:2e:cd:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B0:2D:6F:5A:60:9E:2A:14:68:43:1D:32:77:27:FC:A5:9F:F4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/afa7e034-6794-33b6-8334-fe085fd0cb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.crl

            X509v3 Authority Key Identifier:
                keyid:83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.32.0/24
                IPv6:
                  2604:d040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:18:52:d2:da:47:8a:5e:37:66:f2:85:bf:28:dd:9f:c8:
         bb:81:6f:72:81:17:2b:e9:8d:f6:c4:f9:b5:bc:02:90:01:e3:
         2c:22:aa:36:c6:5f:86:76:16:dd:9b:d6:72:c2:72:c2:62:61:
         1a:74:92:2e:35:32:a6:cc:b8:b4:18:63:5d:eb:b7:8f:67:8e:
         78:21:39:47:b9:02:0f:ce:50:c8:de:cc:4b:77:8e:08:b9:5c:
         15:d5:36:c8:d0:4b:93:22:70:30:02:75:8f:41:4f:6b:40:3f:
         5f:f6:35:e6:45:9c:1c:1a:c8:da:0f:f5:2f:09:b3:51:19:68:
         0e:27:b7:01:8e:e3:ad:b9:64:4d:92:7d:50:86:88:87:a7:23:
         ea:93:9b:37:22:26:c3:66:14:f4:50:89:2a:f6:67:78:bc:9e:
         ff:f4:1e:d3:54:be:87:ee:4c:47:fa:d2:1e:cf:91:94:e1:65:
         2a:81:46:f9:f5:8c:eb:9d:4c:6a:18:6c:75:01:df:84:3d:fb:
         69:e6:88:f0:1e:09:15:61:48:5d:82:7b:e0:0d:09:18:26:ca:
         05:06:72:0b:75:d8:6e:75:05:d5:94:79:f9:e5:bd:4a:c9:9b:
         b4:ef:09:a4:e2:eb:2c:22:7c:7b:9a:08:89:d4:29:f3:ba:4c:
         84:f7:6d:1c
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE28SJ8fveUeKtwdPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDk2NWY0MzItMmQ3Zi00NjE4LWFhNjMtYmI1MGFiNTRj
NTI3MB4XDTI2MDUwNTE4Mzk1MloXDTI2MDcyOTE5NDcyNlowLzEtMCsGA1UEAxMk
ZTE5MTM4MTItN2RhNS00MTM0LWFhMTEtNmU1ZWFmOGIyMzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHjnRuVNxkvF6lVuPoWFd0wA/mvSeckyXbCK
3I28J2L/aB/W11coGCL2iDdHQP+Y30MbeYqJsVeXvHT4Ypl+jlHES/HtXjgH6/gz
rnejWuyKngyrDo+oDmdR82wDEoKAmmVSECMXwf0FpHkhgJIFkTT4vzy9IL5VHkX3
10Yjqms0kVSqbfps5JrCERRUNHXeCaW4B6VYbpRglRx8/Z1ns6j/I415qQwN7Wkj
H8QwLWK7lSIp7sm2/EQES0lVgYYsrmS6WI1W4pM/9Km8ES4FrPDpfYaH9szcUrsK
z+356HHmnjHJ0vOFYyYBKz/hTVUzDyPDknw3nt2/nkZTLs1zWQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFKSwLW9aYJ4qFGhDHTJ3J/yln/Q9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80OTY1
ZjQzMi0yZDdmLTQ2MTgtYWE2My1iYjUwYWI1NGM1MjcvYWZhN2UwMzQtNjc5NC0z
M2I2LTgzMzQtZmUwODVmZDBjYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDk2NWY0MzItMmQ3Zi00NjE4LWFh
NjMtYmI1MGFiNTRjNTI3LzQ5NjVmNDMyLTJkN2YtNDYxOC1hYTYzLWJiNTBhYjU0
YzUyNy5jcmwwHwYDVR0jBBgwFoAUg5HK0oUWBiu/+9I8d+eIObddngkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi80OTY1ZjQzMi0yZDdmLTQ2MTgtYWE2My1iYjUw
YWI1NGM1MjcuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4YgMA0E
AgACMAcDBQAmBNBAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAJNtGFLS2keKXjdm8oW/KN2fyLuBb3KBFyvp
jfbE+bW8ApAB4ywiqjbGX4Z2Ft2b1nLCcsJiYRp0ki41MqbMuLQYY13rt49njngh
OUe5Ag/OUMjezEt3jgi5XBXVNsjQS5MicDACdY9BT2tAP1/2NeZFnBwayNoP9S8J
s1EZaA4ntwGO4625ZE2SfVCGiIenI+qTmzciJsNmFPRQiSr2Z3i8nv/0HtNUvofu
TEf60h7PkZThZSqBRvn1jOudTGoYbHUB34Q9+2nmiPAeCRVhSF2Ce+ANCRgmygUG
cgt12G51BdWUefnlvUrJm7TvCaTi6ywifHuaCInUKfO6TIT3bRw=
-----END CERTIFICATE-----
Generated at Sat May 9 22:53:04 2026 by rpki-client