Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/82a0f85a-49a5-3333-8aab-caabdee03501.roa
File:                     82a0f85a-49a5-3333-8aab-caabdee03501.roa (raw, json)
Hash identifier:          0C9qmYLt6oT3tWHDl+s+GkKWfpsACP9JrNxPA+CpgMs=
Subject key identifier:   D9:A9:B9:35:9E:D5:3C:64:49:42:90:5D:53:D4:86:5F:6B:E4:75:92
Certificate issuer:       /CN=615e3014-2b5e-4140-99a9-b29fdbb13284
Certificate serial:       010D0C9F4328584E4129DA4C6776EDDB8A99CAC0
Authority key identifier: 37:B6:C5:AA:C1:03:27:2F:B9:4F:03:F7:7D:F9:97:4A:CD:87:53:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/82a0f85a-49a5-3333-8aab-caabdee03501.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     395657
IP address blocks:        23.183.0.0/24 maxlen: 24
                          168.151.240.0/21 maxlen: 24
                          192.160.184.0/24 maxlen: 24
                          2607:c580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/615e3014-2b5e-4140-99a9-b29fdbb13284.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/615e3014-2b5e-4140-99a9-b29fdbb13284.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:da:4c:67:76:ed:db:8a:99:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615e3014-2b5e-4140-99a9-b29fdbb13284
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=e0621f25-3f14-4a96-8250-af9384ba5bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:be:01:37:85:0c:f5:b6:a8:fd:4b:3a:93:46:
                    87:96:dc:61:39:5c:e9:d6:0a:13:22:49:19:0e:f7:
                    4b:43:b3:db:de:9c:02:a8:b8:d0:a5:15:a6:09:6d:
                    34:23:aa:53:dc:40:b6:15:99:e5:45:9c:fb:c9:7c:
                    a1:a3:57:1a:f7:6f:a7:f4:0d:05:5a:78:b8:99:c2:
                    6c:63:39:e0:74:e9:f7:cd:43:26:c8:46:18:74:44:
                    f6:03:81:ea:4f:dd:05:05:94:40:76:78:98:02:85:
                    87:2d:38:fa:65:ca:24:0a:f5:3d:a2:ad:35:e8:4a:
                    8f:01:b8:ed:27:d8:e7:c0:14:dc:85:23:82:b7:8f:
                    bf:26:e1:a1:83:43:63:24:fd:05:86:d6:29:7b:d7:
                    e7:2c:58:a1:75:34:66:25:bd:31:2b:2c:3e:41:38:
                    79:a7:fb:2d:0f:cb:a7:c7:e7:83:7d:52:8b:b8:07:
                    37:3f:34:6f:5c:82:fe:c5:69:99:93:20:40:52:ba:
                    d5:38:69:7d:0c:55:5a:ef:55:69:94:cd:42:9e:ae:
                    6a:cc:40:42:2e:d8:ea:a1:5e:2e:e6:a8:c2:88:13:
                    1b:36:de:84:4d:d9:74:82:23:b4:d4:c6:41:93:8b:
                    aa:7e:95:1a:05:90:5c:d5:5b:88:45:79:7f:a8:48:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A9:B9:35:9E:D5:3C:64:49:42:90:5D:53:D4:86:5F:6B:E4:75:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/82a0f85a-49a5-3333-8aab-caabdee03501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/615e3014-2b5e-4140-99a9-b29fdbb13284.crl

            X509v3 Authority Key Identifier:
                keyid:37:B6:C5:AA:C1:03:27:2F:B9:4F:03:F7:7D:F9:97:4A:CD:87:53:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.0.0/24
                  168.151.240.0/21
                  192.160.184.0/24
                IPv6:
                  2607:c580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:05:a8:cf:30:6c:59:0d:08:f9:37:29:5d:99:e6:3e:93:
         eb:f0:8a:d7:97:ea:de:27:2f:e5:f9:11:ca:ad:26:19:94:c4:
         03:6d:70:41:76:6d:fe:ae:f0:0c:ca:45:6f:c2:fc:31:5b:7f:
         91:37:1f:2e:a6:a8:b5:20:8a:2e:73:2e:8c:10:59:f7:09:65:
         32:81:6a:f2:dc:5c:e5:3f:9e:ec:9b:80:02:91:09:11:46:e0:
         d3:c3:02:ce:5d:37:4e:f4:75:03:3d:b6:20:91:c7:f9:bc:e3:
         5f:91:5b:38:36:89:e4:82:e4:95:0e:d9:57:c2:2e:40:c5:95:
         cd:e2:03:7c:05:94:80:f5:c6:1d:74:8e:b9:8b:aa:80:d4:32:
         79:b3:16:e1:df:ad:94:d0:5e:39:98:e3:bd:9b:88:03:7c:94:
         31:44:e6:91:2f:ec:f3:86:43:04:42:41:9f:d3:39:49:74:be:
         09:e0:5e:00:d7:14:90:39:e3:90:9c:27:d1:7a:78:66:e0:ba:
         1f:65:9d:fc:33:00:72:f5:7c:dd:74:94:2c:cc:d0:17:ec:f5:
         3a:19:85:e1:11:18:53:7b:bf:3b:25:ab:09:8c:38:ca:69:8b:
         6f:31:04:54:79:67:95:18:71:21:2e:bf:cb:aa:09:fc:64:aa:
         69:cb:29:27
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE5BKdpMZ3bt24qZysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1ZTMwMTQtMmI1ZS00MTQwLTk5YTktYjI5ZmRiYjEz
Mjg0MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZTA2MjFmMjUtM2YxNC00YTk2LTgyNTAtYWY5Mzg0YmE1YmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L4BN4UM9bao/Us6k0aHltxhOVzp1goTIkkZ
DvdLQ7Pb3pwCqLjQpRWmCW00I6pT3EC2FZnlRZz7yXyho1ca92+n9A0FWni4mcJs
YzngdOn3zUMmyEYYdET2A4HqT90FBZRAdniYAoWHLTj6ZcokCvU9oq016EqPAbjt
J9jnwBTchSOCt4+/JuGhg0NjJP0FhtYpe9fnLFihdTRmJb0xKyw+QTh5p/stD8un
x+eDfVKLuAc3PzRvXIL+xWmZkyBAUrrVOGl9DFVa71VplM1Cnq5qzEBCLtjqoV4u
5qjCiBMbNt6ETdl0giO01MZBk4uqfpUaBZBc1VuIRXl/qEj+7QIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFNmpuTWe1TxkSUKQXVPUhl9r5HWSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTVl
MzAxNC0yYjVlLTQxNDAtOTlhOS1iMjlmZGJiMTMyODQvODJhMGY4NWEtNDlhNS0z
MzMzLThhYWItY2FhYmRlZTAzNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjE1ZTMwMTQtMmI1ZS00MTQwLTk5
YTktYjI5ZmRiYjEzMjg0LzYxNWUzMDE0LTJiNWUtNDE0MC05OWE5LWIyOWZkYmIx
MzI4NC5jcmwwHwYDVR0jBBgwFoAUN7bFqsEDJy+5TwP3ffmXSs2HUxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MTVlMzAxNC0yYjVlLTQxNDAtOTlhOS1iMjlm
ZGJiMTMyODQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF7cAAwQD
qJfwAwQAwKC4MA0EAgACMAcDBQAmB8WAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEyzBajPMGxZDQj5Nyld
meY+k+vwiteX6t4nL+X5EcqtJhmUxANtcEF2bf6u8AzKRW/C/DFbf5E3Hy6mqLUg
ii5zLowQWfcJZTKBavLcXOU/nuybgAKRCRFG4NPDAs5dN070dQM9tiCRx/m841+R
Wzg2ieSC5JUO2VfCLkDFlc3iA3wFlID1xh10jrmLqoDUMnmzFuHfrZTQXjmY472b
iAN8lDFE5pEv7POGQwRCQZ/TOUl0vgngXgDXFJA545CcJ9F6eGbguh9lnfwzAHL1
fN10lCzM0Bfs9ToZheERGFN7vzslqwmMOMppi28xBFR5Z5UYcSEuv8uqCfxkqmnL
KSc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:45 2026 by rpki-client