Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa
File:                     41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa (raw, json)
Hash identifier:          NBTKWipCuekIMNZo9Nvjua9ot9+x0SsumXCXkvgguBM=
Subject key identifier:   F6:8D:2B:A6:9D:F4:9C:8F:C8:6E:10:C1:A0:0B:87:79:6F:32:26:85
Certificate issuer:       /CN=7d992196-6f15-4590-b76f-b34e1ea329f8
Certificate serial:       010D0C9F4328584D8AC5451B32CFAC8BBD5486C0
Authority key identifier: C4:21:A3:9A:07:C5:49:DD:BC:BD:22:1B:F1:3F:41:EE:20:F3:04:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     63023
IP address blocks:        23.168.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:45:1b:32:cf:ac:8b:bd:54:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d992196-6f15-4590-b76f-b34e1ea329f8
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=8d43a441-ed75-4e55-8afb-cfbd80268ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:8a:67:35:0a:6c:49:cf:8f:72:64:06:65:
                    cb:bb:29:be:fb:68:c3:18:f2:7f:06:c1:74:ae:59:
                    3f:21:93:04:ad:00:98:9a:61:b5:4b:15:1a:5b:26:
                    a6:95:bb:9d:ae:d7:7b:c2:d6:2d:6c:f2:b3:00:3a:
                    55:43:0f:31:98:83:cc:83:3e:b2:e2:c5:e8:16:d6:
                    32:6f:af:23:57:cd:0f:6e:30:c5:04:33:92:a3:15:
                    bd:e3:ae:6d:6e:bc:93:c2:2c:ac:ad:d1:98:79:f4:
                    77:0f:e1:c8:2b:d9:ac:7c:8a:15:34:21:4a:c0:37:
                    21:c8:f5:ba:86:75:3c:d0:8e:2b:55:cd:09:d5:d3:
                    70:a9:8a:ff:77:3d:8b:be:51:bf:31:a3:05:72:af:
                    35:4d:07:92:94:60:f9:0b:02:d0:62:f0:c8:ec:76:
                    1a:31:28:f8:eb:a3:44:a0:a8:c6:10:c4:e5:5a:2c:
                    72:de:c3:a0:93:d7:24:42:fe:ee:9c:f0:23:0f:7c:
                    86:16:9a:f1:16:2e:75:7e:ba:ae:79:48:53:57:a9:
                    5d:9d:2a:19:2e:eb:2b:b5:b8:65:0d:0d:ea:5f:1b:
                    ee:2e:f4:05:8d:6f:4b:b6:59:01:5e:8d:fe:3c:d5:
                    7e:fb:c7:eb:e7:9d:a8:e4:3a:ca:d6:67:44:4b:03:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8D:2B:A6:9D:F4:9C:8F:C8:6E:10:C1:A0:0B:87:79:6F:32:26:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.crl

            X509v3 Authority Key Identifier:
                keyid:C4:21:A3:9A:07:C5:49:DD:BC:BD:22:1B:F1:3F:41:EE:20:F3:04:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:f3:e6:ea:a8:04:12:87:d6:e3:ea:14:6a:2a:57:ce:e9:
         e5:e7:dc:39:02:65:fb:05:d9:44:ab:0e:0e:1b:7e:7b:67:f7:
         b9:86:35:5a:46:50:f7:53:45:de:5d:9a:4c:fc:99:3c:92:a9:
         c5:da:bf:91:bd:d9:d0:2b:21:1d:e6:07:5f:a8:76:e5:d2:f3:
         32:d7:f9:30:d5:6f:6e:07:59:d6:db:5b:6b:fe:52:3e:18:4f:
         c3:20:fa:97:1b:dc:7d:c4:73:37:4e:a4:41:45:3b:2a:08:bb:
         ed:bc:b7:d2:c2:7f:2e:6b:60:97:71:b9:16:95:b5:a3:02:1a:
         de:41:7a:ed:14:6f:80:a2:ef:f3:7b:88:36:79:9e:4a:8a:01:
         b2:7d:86:3f:84:c3:bd:dd:2c:9c:50:5b:9a:49:e7:d3:56:eb:
         02:6f:cd:2a:98:a4:a9:fa:3b:3d:32:15:be:ef:8e:d1:ae:09:
         b0:ac:5d:fc:21:91:b0:0e:78:5e:0c:02:6b:b3:ff:18:b5:22:
         fa:d6:92:11:49:15:59:f5:da:5e:7a:f1:e5:d9:9f:66:2d:af:
         5a:8d:16:ad:87:23:47:24:a1:39:72:9c:34:44:3a:a5:d6:ef:
         5f:3f:56:eb:15:7b:1a:66:d7:e6:23:85:a6:e6:af:8b:ec:de:
         14:4e:18:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUUbMs+si71UhsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q5OTIxOTYtNmYxNS00NTkwLWI3NmYtYjM0ZTFlYTMy
OWY4MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
OGQ0M2E0NDEtZWQ3NS00ZTU1LThhZmItY2ZiZDgwMjY4ZWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApASKZzUKbEnPj3JkBmXLuym++2jDGPJ/BsF0
rlk/IZMErQCYmmG1SxUaWyamlbudrtd7wtYtbPKzADpVQw8xmIPMgz6y4sXoFtYy
b68jV80PbjDFBDOSoxW9465tbryTwiysrdGYefR3D+HIK9msfIoVNCFKwDchyPW6
hnU80I4rVc0J1dNwqYr/dz2LvlG/MaMFcq81TQeSlGD5CwLQYvDI7HYaMSj466NE
oKjGEMTlWixy3sOgk9ckQv7unPAjD3yGFprxFi51frqueUhTV6ldnSoZLusrtbhl
DQ3qXxvuLvQFjW9LtlkBXo3+PNV++8fr552o5DrK1mdESwMtvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPaNK6ad9JyPyG4QwaALh3lvMiaFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZDk5
MjE5Ni02ZjE1LTQ1OTAtYjc2Zi1iMzRlMWVhMzI5ZjgvNDFiODY2NWQtM2JmMi0z
NmMzLTk5NjMtMGYyNmYzZjdiMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2Q5OTIxOTYtNmYxNS00NTkwLWI3
NmYtYjM0ZTFlYTMyOWY4LzdkOTkyMTk2LTZmMTUtNDU5MC1iNzZmLWIzNGUxZWEz
MjlmOC5jcmwwHwYDVR0jBBgwFoAUxCGjmgfFSd28vSIb8T9B7iDzBFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83ZDk5MjE5Ni02ZjE1LTQ1OTAtYjc2Zi1iMzRl
MWVhMzI5ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoD8+bqqAQSh9bj6hRqKlfO6eXn3DkCZfsF2USrDg4bfntn97mGNVpG
UPdTRd5dmkz8mTySqcXav5G92dArIR3mB1+oduXS8zLX+TDVb24HWdbbW2v+Uj4Y
T8Mg+pcb3H3EczdOpEFFOyoIu+28t9LCfy5rYJdxuRaVtaMCGt5Beu0Ub4Ci7/N7
iDZ5nkqKAbJ9hj+Ew73dLJxQW5pJ59NW6wJvzSqYpKn6Oz0yFb7vjtGuCbCsXfwh
kbAOeF4MAmuz/xi1IvrWkhFJFVn12l568eXZn2Ytr1qNFq2HI0ckoTlynDREOqXW
718/VusVexpm1+Yjhabmr4vs3hROGDo=
-----END CERTIFICATE-----
Generated at Tue Apr 21 05:54:00 2026 by rpki-client