Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8/1a0a765b-d891-3f7b-94b9-89bec97f76ba.roa
File:                     1a0a765b-d891-3f7b-94b9-89bec97f76ba.roa (raw, json)
Hash identifier:          tQvOvCK1kBUaaVxbv0tsZkXd/Z+cbnOnXh8jfg/W7EA=
Subject key identifier:   75:9B:44:00:4B:A3:73:ED:3B:EA:3D:40:65:F7:31:BF:03:33:15:54
Certificate issuer:       /CN=854382fe-aeb0-4cb5-b66c-f70fb0923af8
Certificate serial:       010D0C9F4328584EAA210EA6514DEBCBA9AC4F00
Authority key identifier: A1:88:73:02:DF:FD:FE:D8:2D:C1:04:7C:39:0C:F1:24:F1:B7:5F:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8/1a0a765b-d891-3f7b-94b9-89bec97f76ba.roa
Signing time:             Wed 29 Jul 2026 23:22:32 +0000
ROA not before:           Wed 29 Jul 2026 23:22:32 +0000
ROA not after:            Tue 27 Oct 2026 23:22:32 +0000
asID:                     8796
IP address blocks:        23.161.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8/854382fe-aeb0-4cb5-b66c-f70fb0923af8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8/854382fe-aeb0-4cb5-b66c-f70fb0923af8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:21:0e:a6:51:4d:eb:cb:a9:ac:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854382fe-aeb0-4cb5-b66c-f70fb0923af8
        Validity
            Not Before: Jul 29 23:22:32 2026 GMT
            Not After : Oct 27 23:22:32 2026 GMT
        Subject: CN=78ab3e19-54a6-4371-8ea8-95e2cc6ab2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:a0:da:4b:68:8a:6b:3e:8a:3c:54:41:e4:
                    ed:91:8f:e5:eb:56:78:e5:37:00:a2:23:f0:ba:cf:
                    76:7b:c3:1b:2d:f6:cf:d3:3f:30:fe:29:7f:b6:d5:
                    47:7d:a2:78:69:95:23:f2:86:2b:39:c5:42:95:dc:
                    fb:7f:db:0f:19:a9:58:48:18:b2:cd:54:4c:14:10:
                    e0:4f:b9:b4:7a:eb:2e:71:b6:6b:32:cc:00:61:21:
                    ec:c5:cb:28:0d:80:da:72:36:f7:00:44:d1:f5:29:
                    fe:20:be:73:4a:f5:27:ae:1f:be:cb:6e:9b:90:38:
                    e7:55:d3:76:5d:27:85:18:9f:da:f7:77:fd:58:ed:
                    9e:23:c0:8e:e4:d2:cc:b1:d2:72:fa:be:b2:33:2b:
                    46:c1:f3:ca:ad:1a:bd:1a:13:d6:fe:bb:78:04:69:
                    e0:5b:54:74:95:cb:d7:b8:c9:a1:97:dd:23:b8:0d:
                    06:25:23:14:49:09:e5:ae:fd:ce:94:2e:8f:1e:7a:
                    ba:ed:e0:81:7f:30:a3:94:bd:9a:30:48:13:bb:0b:
                    f1:32:46:ca:fb:77:5c:1b:fa:9c:88:57:7c:33:a4:
                    ad:d9:f9:9b:24:e0:dc:61:a1:5b:5e:30:a5:71:9d:
                    22:c7:93:49:99:a7:5a:ae:46:ca:78:8f:d1:d5:af:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:44:00:4B:A3:73:ED:3B:EA:3D:40:65:F7:31:BF:03:33:15:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8/1a0a765b-d891-3f7b-94b9-89bec97f76ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8/854382fe-aeb0-4cb5-b66c-f70fb0923af8.crl

            X509v3 Authority Key Identifier:
                keyid:A1:88:73:02:DF:FD:FE:D8:2D:C1:04:7C:39:0C:F1:24:F1:B7:5F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/854382fe-aeb0-4cb5-b66c-f70fb0923af8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:18:83:41:34:76:d2:ee:f9:b0:e6:2a:40:1b:3f:d3:ed:
         c5:c3:66:a4:a8:c8:b5:55:a7:5f:80:cf:d9:f0:c1:33:db:64:
         a3:eb:5b:0b:62:6a:12:99:18:55:b4:a5:35:10:88:a5:86:39:
         71:51:78:7f:10:33:05:8b:51:98:76:a4:98:8a:cc:06:78:dc:
         f6:48:b1:af:73:37:a8:e9:4b:24:b2:18:9d:b9:cc:15:69:33:
         58:91:1d:9d:10:76:0d:49:d5:b7:42:03:a1:21:c9:93:21:f2:
         8a:8b:72:7a:cc:ce:a6:ce:04:c8:4a:ee:90:cd:a0:27:3e:c3:
         45:35:12:67:d3:a0:03:6a:f5:62:a3:33:73:a6:d6:6e:93:53:
         8a:e9:97:a7:f2:8c:ea:7c:d2:91:1d:5e:9b:fd:6c:b2:fb:26:
         5e:32:9f:d4:84:02:e4:a1:e6:5a:e6:10:47:9e:31:81:9d:fb:
         8c:c6:bb:9e:8c:af:be:fb:5b:cd:a7:9c:71:a0:a1:cf:a1:bf:
         70:46:00:fd:7a:ad:5e:7d:5d:ee:09:bd:d5:30:9d:ae:ed:bd:
         de:19:5f:6e:d6:fb:a6:35:72:d4:4a:51:45:b4:bd:0f:93:d1:
         a7:75:d7:e2:74:df:c2:27:03:07:f3:d5:ec:9f:0a:45:28:70:
         52:ca:80:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qIQ6mUU3ry6msTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODU0MzgyZmUtYWViMC00Y2I1LWI2NmMtZjcwZmIwOTIz
YWY4MB4XDTI2MDcyOTIzMjIzMloXDTI2MTAyNzIzMjIzMlowLzEtMCsGA1UEAxMk
NzhhYjNlMTktNTRhNi00MzcxLThlYTgtOTVlMmNjNmFiMmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvCg2ktoims+ijxUQeTtkY/l61Z45TcAoiPw
us92e8MbLfbP0z8w/il/ttVHfaJ4aZUj8oYrOcVCldz7f9sPGalYSBiyzVRMFBDg
T7m0eusucbZrMswAYSHsxcsoDYDacjb3AETR9Sn+IL5zSvUnrh++y26bkDjnVdN2
XSeFGJ/a93f9WO2eI8CO5NLMsdJy+r6yMytGwfPKrRq9GhPW/rt4BGngW1R0lcvX
uMmhl90juA0GJSMUSQnlrv3OlC6PHnq67eCBfzCjlL2aMEgTuwvxMkbK+3dcG/qc
iFd8M6St2fmbJODcYaFbXjClcZ0ix5NJmadarkbKeI/R1a8lvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWbRABLo3PtO+o9QGX3Mb8DMxVUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84NTQz
ODJmZS1hZWIwLTRjYjUtYjY2Yy1mNzBmYjA5MjNhZjgvMWEwYTc2NWItZDg5MS0z
ZjdiLTk0YjktODliZWM5N2Y3NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvODU0MzgyZmUtYWViMC00Y2I1LWI2
NmMtZjcwZmIwOTIzYWY4Lzg1NDM4MmZlLWFlYjAtNGNiNS1iNjZjLWY3MGZiMDky
M2FmOC5jcmwwHwYDVR0jBBgwFoAUoYhzAt/9/tgtwQR8OQzxJPG3X8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi84NTQzODJmZS1hZWIwLTRjYjUtYjY2Yy1mNzBm
YjA5MjNhZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6HEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACniGINBNHbS7vmw5ipAGz/T7cXDZqSoyLVVp1+Az9nwwTPbZKPrWwti
ahKZGFW0pTUQiKWGOXFReH8QMwWLUZh2pJiKzAZ43PZIsa9zN6jpSySyGJ25zBVp
M1iRHZ0Qdg1J1bdCA6EhyZMh8oqLcnrMzqbOBMhK7pDNoCc+w0U1EmfToANq9WKj
M3Om1m6TU4rpl6fyjOp80pEdXpv9bLL7Jl4yn9SEAuSh5lrmEEeeMYGd+4zGu56M
r777W82nnHGgoc+hv3BGAP16rV59Xe4JvdUwna7tvd4ZX27W+6Y1ctRKUUW0vQ+T
0ad11+J038InAwfz1eyfCkUocFLKgEA=
-----END CERTIFICATE-----
Generated at Sat Aug 8 07:20:12 2026 by rpki-client