Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a/90b2e92a-60b8-3292-bfd3-434cffb1b3ec.roa
File:                     90b2e92a-60b8-3292-bfd3-434cffb1b3ec.roa (raw, json)
Hash identifier:          zSb1VsrD6GP2WP4LTMFEdGEne1nVFwnZwlKEPUUjb48=
Subject key identifier:   21:62:47:63:D5:56:78:EB:69:BE:EB:66:44:A5:AB:17:42:73:C2:92
Certificate issuer:       /CN=a0d29769-2871-412c-947c-09171272229a
Certificate serial:       010D0C9F4328584F00F1B6C0B56FF350673E4B40
Authority key identifier: AE:ED:3A:48:C4:44:5E:01:8A:FE:DB:99:11:48:6B:3F:4D:D5:59:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a/90b2e92a-60b8-3292-bfd3-434cffb1b3ec.roa
Signing time:             Sun 30 Aug 2026 01:42:28 +0000
ROA not before:           Sun 30 Aug 2026 01:42:28 +0000
ROA not after:            Sat 28 Nov 2026 02:42:28 +0000
asID:                     402862
IP address blocks:        23.162.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a/a0d29769-2871-412c-947c-09171272229a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a/a0d29769-2871-412c-947c-09171272229a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:f1:b6:c0:b5:6f:f3:50:67:3e:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0d29769-2871-412c-947c-09171272229a
        Validity
            Not Before: Aug 30 01:42:28 2026 GMT
            Not After : Nov 28 02:42:28 2026 GMT
        Subject: CN=a3aee916-8cff-469a-b13c-503090b338eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:a7:57:18:05:4c:a7:2d:45:64:1a:82:d9:
                    4d:21:71:ab:d5:d4:5e:8c:3b:08:ad:6f:d3:fc:56:
                    d6:91:d6:7a:dd:af:23:3b:22:5a:11:cb:70:af:64:
                    e5:50:4c:d5:3f:cc:be:d5:dc:d2:27:ec:23:68:ff:
                    88:1a:74:a0:91:9a:ac:a2:ef:d6:2a:37:f7:63:a6:
                    06:dd:a6:95:2b:45:95:ce:4f:3b:59:5d:8f:90:1a:
                    3c:04:18:ed:ba:49:aa:46:c5:0e:be:17:ed:f7:b5:
                    5a:c3:96:26:e7:a1:f8:d4:c7:3e:01:2a:b5:f0:0c:
                    17:04:a9:24:8c:b1:81:bb:23:95:6e:27:cb:9e:35:
                    c8:5d:9a:32:a3:d5:e0:8b:fa:ea:25:69:0b:4a:66:
                    a9:ff:c7:f9:16:7a:98:32:bb:4a:c0:21:3c:cb:87:
                    33:49:a1:77:45:bc:e3:e4:f6:96:6d:5b:ce:c2:ce:
                    e4:40:77:a6:5b:05:36:cd:29:09:8b:14:5f:33:d4:
                    4d:fc:51:7f:d8:1d:cc:ef:48:66:25:38:12:ed:cc:
                    b6:db:a3:e5:78:16:d2:b7:78:57:fe:c2:d0:eb:ba:
                    7e:57:ed:d7:34:ea:55:43:1d:22:03:66:28:68:59:
                    c0:28:c3:05:19:9a:88:75:70:09:a1:33:24:30:af:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:62:47:63:D5:56:78:EB:69:BE:EB:66:44:A5:AB:17:42:73:C2:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a/90b2e92a-60b8-3292-bfd3-434cffb1b3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a/a0d29769-2871-412c-947c-09171272229a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:ED:3A:48:C4:44:5E:01:8A:FE:DB:99:11:48:6B:3F:4D:D5:59:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a0d29769-2871-412c-947c-09171272229a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:42:66:80:1b:2a:8b:9d:d7:28:0e:b5:72:64:7e:e5:9c:01:
         2b:75:a8:ab:27:ad:ec:0a:5e:01:dd:ac:16:ce:f9:83:6f:90:
         ea:88:82:1f:fc:ea:f3:23:fb:f8:49:87:ea:d3:99:02:3e:e0:
         71:2e:73:70:93:f9:f8:6c:e9:34:37:2c:d5:de:0d:98:29:b0:
         30:d1:06:27:a5:10:30:71:fd:ac:9e:d5:88:af:e7:76:5a:08:
         7d:cd:0c:6a:51:0d:ac:2b:eb:62:a6:29:d7:6c:6c:8a:1c:ba:
         dc:bb:8d:3b:3e:93:ed:6c:ee:c2:d9:ba:b1:8e:3e:a0:5a:07:
         20:af:77:94:7e:73:df:de:5a:6b:b3:6c:4a:46:f0:21:09:0c:
         06:af:d5:ba:58:0d:eb:9c:bb:44:0f:60:f6:01:36:67:66:4a:
         fe:5b:ed:7b:c3:ad:df:17:61:ea:20:b2:fc:72:6a:ae:0d:44:
         07:97:13:56:05:7c:8d:e7:b8:4e:5e:2b:f3:6b:a9:a6:13:ff:
         d3:00:ff:39:68:f1:cc:a9:4a:07:93:a9:f2:ce:b7:3a:b6:a2:
         16:8b:65:51:bd:91:f0:3d:e4:e3:e5:7d:2a:ca:3d:1e:90:f0:
         42:34:06:11:9b:68:04:f4:d6:43:d6:6c:14:50:96:7f:a0:00:
         bf:98:e1:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A8bbAtW/zUGc+S0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTBkMjk3NjktMjg3MS00MTJjLTk0N2MtMDkxNzEyNzIy
MjlhMB4XDTI2MDgzMDAxNDIyOFoXDTI2MTEyODAyNDIyOFowLzEtMCsGA1UEAxMk
YTNhZWU5MTYtOGNmZi00NjlhLWIxM2MtNTAzMDkwYjMzOGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV2nVxgFTKctRWQagtlNIXGr1dRejDsIrW/T
/FbWkdZ63a8jOyJaEctwr2TlUEzVP8y+1dzSJ+wjaP+IGnSgkZqsou/WKjf3Y6YG
3aaVK0WVzk87WV2PkBo8BBjtukmqRsUOvhft97Vaw5Ym56H41Mc+ASq18AwXBKkk
jLGBuyOVbifLnjXIXZoyo9Xgi/rqJWkLSmap/8f5FnqYMrtKwCE8y4czSaF3Rbzj
5PaWbVvOws7kQHemWwU2zSkJixRfM9RN/FF/2B3M70hmJTgS7cy226PleBbSt3hX
/sLQ67p+V+3XNOpVQx0iA2YoaFnAKMMFGZqIdXAJoTMkMK/OAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFiR2PVVnjrab7rZkSlqxdCc8KSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMGQy
OTc2OS0yODcxLTQxMmMtOTQ3Yy0wOTE3MTI3MjIyOWEvOTBiMmU5MmEtNjBiOC0z
MjkyLWJmZDMtNDM0Y2ZmYjFiM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTBkMjk3NjktMjg3MS00MTJjLTk0
N2MtMDkxNzEyNzIyMjlhL2EwZDI5NzY5LTI4NzEtNDEyYy05NDdjLTA5MTcxMjcy
MjI5YS5jcmwwHwYDVR0jBBgwFoAUru06SMREXgGK/tuZEUhrP03VWUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMGQyOTc2OS0yODcxLTQxMmMtOTQ3Yy0wOTE3
MTI3MjIyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6I0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRCZoAbKoud1ygOtXJkfuWcASt1qKsnrewKXgHdrBbO+YNvkOqIgh/8
6vMj+/hJh+rTmQI+4HEuc3CT+fhs6TQ3LNXeDZgpsDDRBielEDBx/aye1Yiv53Za
CH3NDGpRDawr62KmKddsbIocuty7jTs+k+1s7sLZurGOPqBaByCvd5R+c9/eWmuz
bEpG8CEJDAav1bpYDeucu0QPYPYBNmdmSv5b7XvDrd8XYeogsvxyaq4NRAeXE1YF
fI3nuE5eK/NrqaYT/9MA/zlo8cypSgeTqfLOtzq2ohaLZVG9kfA95OPlfSrKPR6Q
8EI0BhGbaAT01kPWbBRQln+gAL+Y4bU=
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:30:24 2026 by rpki-client