Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/fcd4bfa4-edcc-34e2-90be-c031ff77f598.roa
File:                     fcd4bfa4-edcc-34e2-90be-c031ff77f598.roa (raw, json)
Hash identifier:          jvJ4uaz4QftbNN2/jBftCI394IqH+CZOCiao2I0DTjs=
Subject key identifier:   CA:16:0F:A5:25:EC:D1:4D:1A:D1:FC:A3:EE:C6:CA:F2:63:99:E3:70
Certificate issuer:       /CN=716e2469-c74e-486a-96b0-bb74f8ae86f8
Certificate serial:       010D0C9F4328584EA79169B59419D29F40486E50
Authority key identifier: 1F:56:86:01:F9:E8:D4:71:7A:20:32:E0:07:65:F5:06:28:B5:80:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/fcd4bfa4-edcc-34e2-90be-c031ff77f598.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21859
IP address blocks:        23.154.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/716e2469-c74e-486a-96b0-bb74f8ae86f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/716e2469-c74e-486a-96b0-bb74f8ae86f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:69:b5:94:19:d2:9f:40:48:6e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716e2469-c74e-486a-96b0-bb74f8ae86f8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=253ef176-f4b8-4c49-a9e5-52e6f9889ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:4f:59:ca:14:56:f0:7e:ac:49:4b:10:94:
                    22:9c:5f:96:f1:a3:81:2c:d4:e0:f8:41:f6:37:c8:
                    50:4d:63:6f:95:f7:3a:ee:ab:53:b3:e2:27:82:62:
                    44:6d:86:b3:cf:d7:ed:e6:99:55:a2:6a:1b:45:9e:
                    10:ce:d0:7c:5a:bf:96:a0:e6:c0:67:ef:6b:e9:29:
                    ee:d2:5e:58:8f:aa:13:fb:3a:46:a7:bb:6c:88:0c:
                    98:92:aa:b3:58:5d:a3:11:af:6e:6c:ed:cf:35:61:
                    4a:98:ff:14:7c:53:02:38:f0:69:76:ab:b9:90:b1:
                    38:d7:e5:cc:d4:1d:27:0b:2e:9a:1d:c9:e9:e8:6b:
                    c3:0c:b5:67:05:77:0d:5f:8f:b9:a4:54:99:07:e2:
                    7b:d2:c9:43:ec:51:f8:95:07:d0:d9:46:30:3c:da:
                    f8:d4:bc:81:88:44:b2:d9:a8:2d:ed:dd:25:6f:ae:
                    41:ff:4b:2c:ed:d8:7b:3c:4f:80:b0:bf:dd:6d:ce:
                    2c:6c:c6:b3:e5:65:9e:ab:73:75:6d:b4:ba:5d:2d:
                    28:84:1e:ac:09:bc:6d:8d:e8:77:32:f7:9b:e9:29:
                    10:1e:2f:d8:7a:23:24:3f:55:46:09:ce:c1:90:29:
                    bf:42:a8:07:ac:bf:2f:08:09:0b:a9:8e:95:23:b8:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:16:0F:A5:25:EC:D1:4D:1A:D1:FC:A3:EE:C6:CA:F2:63:99:E3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/fcd4bfa4-edcc-34e2-90be-c031ff77f598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/716e2469-c74e-486a-96b0-bb74f8ae86f8.crl

            X509v3 Authority Key Identifier:
                keyid:1F:56:86:01:F9:E8:D4:71:7A:20:32:E0:07:65:F5:06:28:B5:80:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d8:50:8d:3c:87:95:05:a0:62:cf:bf:d3:f2:02:2f:8d:85:
         28:d6:a1:38:39:cd:e7:be:f3:3c:09:cc:19:37:0e:93:cd:7d:
         00:c9:6a:3a:fd:a4:ab:58:ad:04:ec:9d:af:3c:59:d2:55:79:
         36:b5:7d:a0:49:3f:53:11:94:c5:56:ea:ab:9d:1a:af:6b:e7:
         95:ef:3d:84:a0:66:5f:f8:2b:3b:30:4f:b6:72:a7:c3:16:ea:
         38:59:d1:69:f9:15:85:64:0d:55:f3:a6:c9:c7:dd:53:5d:d2:
         cd:78:9c:dd:12:d3:0b:06:a2:f1:7f:b8:9a:09:6c:bd:ce:43:
         6b:0e:a9:9a:9d:3e:8e:a0:5d:1f:dd:04:ab:23:eb:df:ca:bd:
         54:d0:23:3c:a5:71:d8:c4:2d:5c:d2:8f:b4:3d:ca:b6:b4:aa:
         48:56:74:84:fa:5a:d2:58:42:d3:f4:f5:0d:46:46:98:46:3c:
         17:32:35:93:78:45:2d:b8:ea:d5:b2:51:87:e4:6b:c4:47:2f:
         e2:19:30:73:7b:15:38:bf:10:2a:4a:19:89:a3:23:c1:87:ad:
         fd:8e:d0:39:b5:8f:f6:98:11:f6:d4:b9:4c:53:8a:b1:c3:e3:
         fc:da:38:26:7f:f4:dc:c4:62:5a:99:f5:a0:bc:63:65:22:62:
         92:12:fd:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkWm1lBnSn0BIblAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE2ZTI0NjktYzc0ZS00ODZhLTk2YjAtYmI3NGY4YWU4
NmY4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjUzZWYxNzYtZjRiOC00YzQ5LWE5ZTUtNTJlNmY5ODg5Y2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMxPWcoUVvB+rElLEJQinF+W8aOBLNTg+EH2
N8hQTWNvlfc67qtTs+IngmJEbYazz9ft5plVomobRZ4QztB8Wr+WoObAZ+9r6Snu
0l5Yj6oT+zpGp7tsiAyYkqqzWF2jEa9ubO3PNWFKmP8UfFMCOPBpdqu5kLE41+XM
1B0nCy6aHcnp6GvDDLVnBXcNX4+5pFSZB+J70slD7FH4lQfQ2UYwPNr41LyBiESy
2agt7d0lb65B/0ss7dh7PE+AsL/dbc4sbMaz5WWeq3N1bbS6XS0ohB6sCbxtjeh3
Mveb6SkQHi/YeiMkP1VGCc7BkCm/QqgHrL8vCAkLqY6VI7gYIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoWD6Ul7NFNGtH8o+7GyvJjmeNwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83MTZl
MjQ2OS1jNzRlLTQ4NmEtOTZiMC1iYjc0ZjhhZTg2ZjgvZmNkNGJmYTQtZWRjYy0z
NGUyLTkwYmUtYzAzMWZmNzdmNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzE2ZTI0NjktYzc0ZS00ODZhLTk2
YjAtYmI3NGY4YWU4NmY4LzcxNmUyNDY5LWM3NGUtNDg2YS05NmIwLWJiNzRmOGFl
ODZmOC5jcmwwHwYDVR0jBBgwFoAUH1aGAfno1HF6IDLgB2X1Bii1gIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi83MTZlMjQ2OS1jNzRlLTQ4NmEtOTZiMC1iYjc0
ZjhhZTg2ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrYUI08h5UFoGLPv9PyAi+NhSjWoTg5zee+8zwJzBk3DpPNfQDJajr9
pKtYrQTsna88WdJVeTa1faBJP1MRlMVW6qudGq9r55XvPYSgZl/4KzswT7Zyp8MW
6jhZ0Wn5FYVkDVXzpsnH3VNd0s14nN0S0wsGovF/uJoJbL3OQ2sOqZqdPo6gXR/d
BKsj69/KvVTQIzylcdjELVzSj7Q9yra0qkhWdIT6WtJYQtP09Q1GRphGPBcyNZN4
RS246tWyUYfka8RHL+IZMHN7FTi/ECpKGYmjI8GHrf2O0Dm1j/aYEfbUuUxTirHD
4/zaOCZ/9NzEYlqZ9aC8Y2UiYpIS/Y8=
-----END CERTIFICATE-----
Generated at Sat Aug 22 22:35:28 2026 by rpki-client