Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/bf63bab3-aed4-304b-b82e-926d239bb3ca.roa
File:                     bf63bab3-aed4-304b-b82e-926d239bb3ca.roa (raw, json)
Hash identifier:          c0uDQweOu9dyZVq98dqxvVXVyC3aalpw/lSw3bMlkh4=
Subject key identifier:   EA:1C:14:50:52:83:AE:50:8B:E4:5D:35:AF:42:1F:57:B1:DB:EF:6F
Certificate issuer:       /CN=e328149d-d077-4e6a-93b2-829a96c70afd
Certificate serial:       010D0C9F4328584F4F07F61494D4B1B795B47000
Authority key identifier: 4D:69:28:3B:C6:E3:14:A3:B3:31:A2:8D:F8:D2:91:66:1F:1D:75:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/bf63bab3-aed4-304b-b82e-926d239bb3ca.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     402587
IP address blocks:        23.158.164.0/24 maxlen: 24
                          2602:f3b7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f6:14:94:d4:b1:b7:95:b4:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e328149d-d077-4e6a-93b2-829a96c70afd
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=83fb0465-ea19-46ee-9e11-5985be8deba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:0c:b6:bf:f4:a0:dc:49:2c:34:39:63:fc:
                    7b:34:1e:db:b3:ef:6b:61:1e:5a:a5:ce:5a:e0:2d:
                    4b:e4:18:c7:ec:11:5b:6f:5c:f9:a5:3b:72:e1:c3:
                    35:fb:04:32:8f:15:38:88:3a:4b:15:1f:fa:9d:4c:
                    00:79:3f:70:33:c9:f3:6f:a0:18:34:bf:9b:66:76:
                    ff:34:f8:0e:4d:1c:2f:2a:44:e3:16:2e:20:50:62:
                    18:a4:dd:79:c7:d5:37:24:8c:91:fd:be:3f:c3:82:
                    08:18:54:5e:53:bd:6e:c1:57:4e:7c:e0:b6:23:7f:
                    16:3d:30:b4:47:f1:3e:04:19:14:56:ef:53:11:9f:
                    cc:d6:96:cc:f0:a7:3a:96:f1:39:dc:f6:27:d9:8d:
                    bb:46:7f:20:ba:b1:f8:6b:cd:91:a3:f4:c5:c9:30:
                    91:a8:a2:c4:37:6a:5d:79:00:a4:7e:fa:63:37:3c:
                    10:df:40:a3:17:6b:14:39:3c:95:03:ec:9c:4a:54:
                    40:3a:0b:c0:f6:1c:77:72:bf:67:39:3a:0c:1a:f4:
                    1c:ee:b5:dd:16:9c:ca:05:9c:9b:21:4e:8f:26:57:
                    86:a9:a9:c3:35:36:46:bb:41:d6:ba:0d:d0:56:bc:
                    2b:03:dd:23:84:7a:07:16:17:b0:a4:b0:32:af:af:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1C:14:50:52:83:AE:50:8B:E4:5D:35:AF:42:1F:57:B1:DB:EF:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/bf63bab3-aed4-304b-b82e-926d239bb3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.crl

            X509v3 Authority Key Identifier:
                keyid:4D:69:28:3B:C6:E3:14:A3:B3:31:A2:8D:F8:D2:91:66:1F:1D:75:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.164.0/24
                IPv6:
                  2602:f3b7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:6d:a9:dd:44:79:d3:9c:84:d6:8f:49:cd:3e:f6:7a:ea:68:
         55:45:54:d5:b6:f4:97:64:b1:3f:4a:84:a0:a9:a8:22:28:ca:
         02:34:dc:83:b7:ab:06:98:46:7f:80:45:32:14:6c:3f:14:75:
         7e:bd:f3:59:e2:db:5a:40:6c:b2:26:1f:f4:f3:dc:9a:f0:b0:
         e1:24:c3:1b:3c:a0:5c:4a:5d:7c:6e:90:85:ae:e9:d7:c4:24:
         f9:fe:3a:05:dc:87:24:a6:85:dc:06:f4:66:bf:b0:60:e8:d0:
         42:a9:90:eb:bc:14:60:07:fa:b2:53:b0:94:74:1f:94:c2:d1:
         eb:76:27:5a:0c:36:d3:78:48:6e:b2:5d:a3:a1:e5:c9:9e:67:
         1a:ca:4f:6a:9c:cc:2f:00:16:62:f5:8a:9d:2a:f2:17:ca:a1:
         88:8c:99:82:60:57:d5:6c:99:20:e8:ae:b7:a7:e3:cc:2c:68:
         6b:ce:97:34:f6:e5:b6:0c:a8:70:c0:36:5a:42:b0:c9:a6:69:
         65:5e:db:d7:aa:d3:e8:22:36:82:0b:ca:13:a6:95:21:c0:aa:
         41:8f:e6:b5:9e:b9:70:d8:4c:7a:1a:85:cf:55:f7:aa:da:d8:
         ce:0a:4c:4b:f4:c9:06:84:fb:25:06:8d:45:55:a4:01:f1:ea:
         54:3e:9b:7e
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9PB/YUlNSxt5W0cAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMyODE0OWQtZDA3Ny00ZTZhLTkzYjItODI5YTk2Yzcw
YWZkMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ODNmYjA0NjUtZWExOS00NmVlLTllMTEtNTk4NWJlOGRlYmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobYMtr/0oNxJLDQ5Y/x7NB7bs+9rYR5apc5a
4C1L5BjH7BFbb1z5pTty4cM1+wQyjxU4iDpLFR/6nUwAeT9wM8nzb6AYNL+bZnb/
NPgOTRwvKkTjFi4gUGIYpN15x9U3JIyR/b4/w4IIGFReU71uwVdOfOC2I38WPTC0
R/E+BBkUVu9TEZ/M1pbM8Kc6lvE53PYn2Y27Rn8gurH4a82Ro/TFyTCRqKLEN2pd
eQCkfvpjNzwQ30CjF2sUOTyVA+ycSlRAOgvA9hx3cr9nOToMGvQc7rXdFpzKBZyb
IU6PJleGqanDNTZGu0HWug3QVrwrA90jhHoHFhewpLAyr68OuQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFOocFFBSg65Qi+RdNa9CH1ex2+9vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lMzI4
MTQ5ZC1kMDc3LTRlNmEtOTNiMi04MjlhOTZjNzBhZmQvYmY2M2JhYjMtYWVkNC0z
MDRiLWI4MmUtOTI2ZDIzOWJiM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZTMyODE0OWQtZDA3Ny00ZTZhLTkz
YjItODI5YTk2YzcwYWZkL2UzMjgxNDlkLWQwNzctNGU2YS05M2IyLTgyOWE5NmM3
MGFmZC5jcmwwHwYDVR0jBBgwFoAUTWkoO8bjFKOzMaKN+NKRZh8ddW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lMzI4MTQ5ZC1kMDc3LTRlNmEtOTNiMi04Mjlh
OTZjNzBhZmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF56kMA4E
AgACMAgDBgAmAvO3ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDEbandRHnTnITWj0nNPvZ66mhVRVTVtvSX
ZLE/SoSgqagiKMoCNNyDt6sGmEZ/gEUyFGw/FHV+vfNZ4ttaQGyyJh/089ya8LDh
JMMbPKBcSl18bpCFrunXxCT5/joF3IckpoXcBvRmv7Bg6NBCqZDrvBRgB/qyU7CU
dB+UwtHrdidaDDbTeEhusl2joeXJnmcayk9qnMwvABZi9YqdKvIXyqGIjJmCYFfV
bJkg6K63p+PMLGhrzpc09uW2DKhwwDZaQrDJpmllXtvXqtPoIjaCC8oTppUhwKpB
j+a1nrlw2Ex6GoXPVfeq2tjOCkxL9MkGhPslBo1FVaQB8epUPpt+
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:54:56 2026 by rpki-client