Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa
File:                     4701df24-d7bf-33a8-aa62-b91271027365.roa (raw, json)
Hash identifier:          hz/eAKGPEsgB4cw2Af47DoPbhoAjXYOyLTqyRA6E+FA=
Subject key identifier:   26:54:50:7D:71:B2:92:B6:AE:54:AD:B7:B9:D2:A1:7F:CB:8E:DB:CC
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584E6C6F76498AE5CF0534748740
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     57974
IP address blocks:        23.153.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:76:49:8a:e5:cf:05:34:74:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=4e3c3f61-8e3b-4cb7-890c-24a3826b40b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:5c:8d:b3:28:d4:91:1c:a0:18:d6:60:a2:
                    b2:ea:b1:d8:7e:09:06:42:ab:e7:10:57:df:4b:ff:
                    1e:fc:cf:ee:78:05:95:fc:6b:26:9a:d7:91:35:85:
                    12:71:9d:3b:f0:4c:36:2d:3a:c2:c8:a7:67:07:47:
                    60:70:96:d6:92:23:2d:01:a1:1e:47:09:86:ff:6f:
                    b1:ed:9e:9c:a3:71:e4:cc:ba:2a:50:8b:88:dc:85:
                    17:59:9c:c7:92:02:7f:5d:f3:3b:3e:6b:11:d1:e8:
                    9d:91:d4:cd:86:34:82:e7:b9:2c:ed:2f:90:e9:ec:
                    70:3c:d9:98:dc:63:2d:e9:cb:f9:ec:4e:ac:c6:41:
                    51:3e:56:81:72:d9:a2:00:ee:5f:89:3e:86:81:01:
                    fc:aa:6d:24:b2:9c:11:5e:8c:4e:54:ea:3f:6f:f2:
                    0e:32:0b:4c:78:b2:2b:e9:be:c4:43:e9:0a:7b:4d:
                    6b:f4:57:2a:99:72:6a:83:cd:0c:14:e0:6f:62:50:
                    2e:1b:24:d0:09:45:03:56:58:ad:0e:2a:9b:bb:e1:
                    a3:7b:8a:46:0c:5e:40:6b:a9:80:90:f9:0d:da:b1:
                    f1:80:c8:ee:7c:be:a6:d0:fb:79:fd:1f:15:56:89:
                    2e:ef:68:d0:14:72:08:ea:de:24:45:7d:03:d6:f5:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:54:50:7D:71:B2:92:B6:AE:54:AD:B7:B9:D2:A1:7F:CB:8E:DB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:43:f8:65:c7:6a:04:eb:e6:8a:97:ad:57:93:83:e1:fd:fa:
         82:73:ef:28:cd:31:b3:76:23:10:b4:20:75:36:c8:64:c7:6f:
         d7:d5:5f:10:ab:68:73:74:4a:33:60:d1:27:37:2f:d3:5b:c5:
         00:6c:bb:a9:73:63:90:05:93:8b:4b:62:0a:47:78:5e:ea:4e:
         32:d7:5f:86:e7:d3:fd:6d:f8:04:57:94:75:cb:49:e8:b2:0a:
         2a:38:a8:74:5a:f0:ae:e5:8e:21:4e:63:18:85:3f:98:39:1c:
         85:0d:4b:47:41:fb:26:04:bc:d0:1b:36:9a:7e:67:dd:7d:25:
         12:8f:1f:3c:b3:89:ee:27:fc:4a:1a:6e:e9:e0:f5:97:2b:12:
         df:3e:2c:13:91:8a:62:7a:51:ca:c0:e5:74:1c:5d:81:a0:c2:
         16:89:52:bb:0f:c5:51:e5:20:55:0a:9d:dc:c0:31:b9:42:d1:
         51:90:6d:5b:47:40:f1:5c:48:2f:61:60:ec:a8:c6:13:46:fe:
         ad:e0:b8:d7:4c:80:4c:ee:48:16:10:86:ff:1c:81:83:97:ce:
         88:08:dc:11:1d:41:3b:4c:1a:f2:72:65:c0:7b:dd:1d:fb:5c:
         13:d1:cd:f4:5b:41:6d:ae:31:d3:6e:bd:13:55:bc:b1:ad:db:
         d4:c9:86:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb3ZJiuXPBTR0h0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5
NzA3MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk
NGUzYzNmNjEtOGUzYi00Y2I3LTg5MGMtMjRhMzgyNmI0MGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziFcjbMo1JEcoBjWYKKy6rHYfgkGQqvnEFff
S/8e/M/ueAWV/GsmmteRNYUScZ078Ew2LTrCyKdnB0dgcJbWkiMtAaEeRwmG/2+x
7Z6co3HkzLoqUIuI3IUXWZzHkgJ/XfM7PmsR0eidkdTNhjSC57ks7S+Q6exwPNmY
3GMt6cv57E6sxkFRPlaBctmiAO5fiT6GgQH8qm0kspwRXoxOVOo/b/IOMgtMeLIr
6b7EQ+kKe01r9FcqmXJqg80MFOBvYlAuGyTQCUUDVlitDiqbu+Gje4pGDF5Aa6mA
kPkN2rHxgMjufL6m0Pt5/R8VVoku72jQFHII6t4kRX0D1vXfoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZUUH1xspK2rlStt7nSoX/LjtvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm
Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNDcwMWRmMjQtZDdiZi0z
M2E4LWFhNjItYjkxMjcxMDI3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz
OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi
OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji
ZWFjYjk3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5lIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJD+GXHagTr5oqXrVeTg+H9+oJz7yjNMbN2IxC0IHU2yGTHb9fVXxCr
aHN0SjNg0Sc3L9NbxQBsu6lzY5AFk4tLYgpHeF7qTjLXX4bn0/1t+ARXlHXLSeiy
Cio4qHRa8K7ljiFOYxiFP5g5HIUNS0dB+yYEvNAbNpp+Z919JRKPHzyzie4n/Eoa
bung9ZcrEt8+LBORimJ6UcrA5XQcXYGgwhaJUrsPxVHlIFUKndzAMblC0VGQbVtH
QPFcSC9hYOyoxhNG/q3guNdMgEzuSBYQhv8cgYOXzogI3BEdQTtMGvJyZcB73R37
XBPRzfRbQW2uMdNuvRNVvLGt29TJhgg=
-----END CERTIFICATE-----
Generated at Wed Jul 8 14:29:46 2026 by rpki-client