Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/c3758790-f14f-3adb-ac49-9e07dcefddac.roa
File:                     c3758790-f14f-3adb-ac49-9e07dcefddac.roa (raw, json)
Hash identifier:          ZGq7OWsL+ujRUgvcVSchGES0jLgZRELj4l7MR5SiCrQ=
Subject key identifier:   8B:84:61:AF:C6:27:6C:AF:B9:1E:D1:B9:11:28:41:9A:A0:11:EB:04
Certificate issuer:       /CN=caf0457f-9c91-4448-9ab1-89863b146bb7
Certificate serial:       010D0C9F4328584E0108FE8373B2B054B94F65C0
Authority key identifier: 40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/c3758790-f14f-3adb-ac49-9e07dcefddac.roa
Signing time:             Sat 30 May 2026 09:42:27 +0000
ROA not before:           Sat 30 May 2026 09:42:27 +0000
ROA not after:            Fri 28 Aug 2026 09:40:44 +0000
asID:                     14618
IP address blocks:        23.158.148.0/24 maxlen: 24
                          2602:f3b4::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:08:fe:83:73:b2:b0:54:b9:4f:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf0457f-9c91-4448-9ab1-89863b146bb7
        Validity
            Not Before: May 30 09:42:27 2026 GMT
            Not After : Aug 28 09:40:44 2026 GMT
        Subject: CN=f634e8e2-2b79-4185-89bb-a2cc214adc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:26:31:f4:3d:89:20:44:ce:5d:e1:9b:d1:
                    cf:d2:70:78:c7:fd:7d:99:0c:a7:7a:83:24:46:7f:
                    1e:1d:8b:25:bd:6b:4d:e7:10:1e:b5:39:3e:ac:87:
                    4b:61:06:15:62:1f:a0:3d:c3:a4:1d:1f:a0:46:2a:
                    0a:a8:ef:84:57:68:14:61:fb:fd:29:69:b5:fc:6f:
                    aa:8c:0e:67:f2:6b:a3:be:ab:83:d0:dc:f0:07:7c:
                    e7:ad:0d:7f:b6:e8:35:0e:d3:d6:83:7e:b0:cc:07:
                    c4:ee:39:7d:be:65:f2:cb:30:65:29:3f:44:6a:92:
                    84:85:5c:bd:18:e0:5f:e7:b5:75:a9:72:c5:1c:ee:
                    13:6c:23:80:f8:1a:30:01:23:95:3c:ac:d1:55:5b:
                    e6:46:9b:af:97:c4:f1:09:10:97:45:fb:ac:e7:96:
                    79:96:53:1e:a8:31:df:cd:23:f1:56:c4:c5:3c:ff:
                    34:a3:0f:98:b4:76:90:fd:c9:75:14:b2:06:3c:f6:
                    37:7e:f0:0f:f9:31:63:29:f0:bb:5a:0d:da:87:f3:
                    23:74:75:4a:ff:84:6c:e0:df:45:4e:8a:21:ee:0b:
                    0b:7b:b3:40:da:26:58:8c:38:49:d5:78:bb:f8:a1:
                    34:a0:f0:24:9b:02:1f:d4:fc:1f:e1:c1:6a:4d:6b:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:84:61:AF:C6:27:6C:AF:B9:1E:D1:B9:11:28:41:9A:A0:11:EB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/c3758790-f14f-3adb-ac49-9e07dcefddac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl

            X509v3 Authority Key Identifier:
                keyid:40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.148.0/24
                IPv6:
                  2602:f3b4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:91:a2:6e:0d:16:32:b7:2f:06:f2:35:a5:9f:fe:27:b7:
         89:41:ca:f2:a5:9e:1f:8c:47:05:7c:f0:56:08:e6:86:b5:2e:
         4d:82:d3:1d:e5:a2:0d:ac:81:ef:70:53:c4:3e:9b:a4:0e:9b:
         6a:84:ce:d0:73:d9:90:bf:de:b4:29:03:46:1c:5a:75:6f:3f:
         68:52:65:a1:d3:e8:69:c2:41:ea:10:72:10:83:da:67:7e:64:
         a4:d1:4f:db:29:57:f5:e0:f6:98:b8:a6:be:40:29:ab:f7:48:
         70:0f:07:8f:e9:81:95:af:46:33:89:7e:1d:c4:5c:75:3d:ad:
         63:5a:e4:12:27:0d:a6:88:f9:48:94:d7:5f:28:87:7c:c9:64:
         ee:39:1c:45:45:a8:24:80:7e:17:8d:68:fc:61:3c:d1:80:c4:
         d6:e0:34:1a:50:ca:b4:07:fa:88:da:4b:7c:cb:2f:ad:aa:8e:
         35:aa:2b:da:45:da:94:7b:05:ea:f0:94:25:db:93:c6:93:e0:
         de:4e:ea:e9:1f:b2:b5:65:85:36:c8:dc:b7:b9:ed:34:5c:94:
         58:84:dd:04:fe:c9:72:db:48:d9:c4:52:85:1a:cd:35:db:ef:
         8e:7f:ad:2a:8d:ab:4d:37:74:86:b2:42:eb:12:59:86:d7:3b:
         ff:7b:a4:91
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4BCP6Dc7KwVLlPZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2FmMDQ1N2YtOWM5MS00NDQ4LTlhYjEtODk4NjNiMTQ2
YmI3MB4XDTI2MDUzMDA5NDIyN1oXDTI2MDgyODA5NDA0NFowLzEtMCsGA1UEAxMk
ZjYzNGU4ZTItMmI3OS00MTg1LTg5YmItYTJjYzIxNGFkYzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJImMfQ9iSBEzl3hm9HP0nB4x/19mQyneoMk
Rn8eHYslvWtN5xAetTk+rIdLYQYVYh+gPcOkHR+gRioKqO+EV2gUYfv9KWm1/G+q
jA5n8mujvquD0NzwB3znrQ1/tug1DtPWg36wzAfE7jl9vmXyyzBlKT9EapKEhVy9
GOBf57V1qXLFHO4TbCOA+BowASOVPKzRVVvmRpuvl8TxCRCXRfus55Z5llMeqDHf
zSPxVsTFPP80ow+YtHaQ/cl1FLIGPPY3fvAP+TFjKfC7Wg3ah/MjdHVK/4Rs4N9F
Tooh7gsLe7NA2iZYjDhJ1Xi7+KE0oPAkmwIf1Pwf4cFqTWvrUQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFIuEYa/GJ2yvuR7RuREoQZqgEesEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYWYw
NDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2M2IxNDZiYjcvYzM3NTg3OTAtZjE0Zi0z
YWRiLWFjNDktOWUwN2RjZWZkZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2FmMDQ1N2YtOWM5MS00NDQ4LTlh
YjEtODk4NjNiMTQ2YmI3L2NhZjA0NTdmLTljOTEtNDQ0OC05YWIxLTg5ODYzYjE0
NmJiNy5jcmwwHwYDVR0jBBgwFoAUQPtioi5pP2TsOYXFKKcNK2TLDggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9jYWYwNDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2
M2IxNDZiYjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF56UMA4E
AgACMAgDBgAmAvO0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgzpGibg0WMrcvBvI1pZ/+J7eJQcrypZ4f
jEcFfPBWCOaGtS5NgtMd5aINrIHvcFPEPpukDptqhM7Qc9mQv960KQNGHFp1bz9o
UmWh0+hpwkHqEHIQg9pnfmSk0U/bKVf14PaYuKa+QCmr90hwDweP6YGVr0YziX4d
xFx1Pa1jWuQSJw2miPlIlNdfKId8yWTuORxFRagkgH4XjWj8YTzRgMTW4DQaUMq0
B/qI2kt8yy+tqo41qivaRdqUewXq8JQl25PGk+DeTurpH7K1ZYU2yNy3ue00XJRY
hN0E/sly20jZxFKFGs012++Of60qjatNN3SGskLrElmG1zv/e6SR
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:49:34 2026 by rpki-client