Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa
File:                     91e1a3cc-e019-3754-b8b6-315f387f30d2.roa (raw, json)
Hash identifier:          1tSdLl+2IXjJ8KW937sl6xlJvKi7MbipVgxSc57ImSc=
Subject key identifier:   32:72:D4:92:85:E4:A8:0A:36:E6:FD:54:63:7E:C0:2D:EB:79:F8:5C
Certificate issuer:       /CN=478a0a21-d101-464c-8706-25bb157545c8
Certificate serial:       010D0C9F4328584EC20C6FBCE9814F63BA841480
Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     401457
IP address blocks:        23.128.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6f:bc:e9:81:4f:63:ba:84:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=64c92f00-adb8-48c2-9087-11f980607bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:2c:a7:a6:9f:66:16:6d:cc:d8:ae:8b:41:
                    e1:27:ba:12:9a:6b:37:53:21:0f:9a:62:76:68:cb:
                    ef:6e:77:8e:d8:e6:0f:90:a1:ab:63:7a:db:cf:66:
                    f4:de:3e:9b:b3:10:54:54:68:87:e1:20:c9:b8:3d:
                    a9:81:9a:20:ba:49:3e:c0:2e:19:78:48:87:44:60:
                    4d:4c:b7:2f:c8:5a:3a:59:04:67:44:0e:fc:c5:fc:
                    8f:5c:85:0e:9a:de:d8:7a:6d:70:45:1e:93:67:96:
                    7b:7e:bf:ea:fb:2b:d0:82:7f:9a:59:45:09:70:7b:
                    be:c1:8c:2c:35:9e:84:6d:33:b0:ef:6a:40:75:9c:
                    f2:d8:6b:a8:e1:cb:92:82:e3:26:4b:1d:68:b4:ca:
                    f1:4d:24:38:e5:fc:30:a9:a2:01:53:ee:e8:b1:a5:
                    bb:d4:c7:40:b0:eb:30:c2:1c:54:73:f0:e0:dd:67:
                    af:f6:9c:91:16:08:f6:b7:62:32:1b:07:32:4c:50:
                    97:ab:1c:f7:e7:4b:34:78:62:e1:47:d0:ce:03:dc:
                    76:4c:8d:55:df:56:86:61:b4:b8:9f:e8:47:01:6d:
                    02:e8:f8:a7:bc:f3:be:21:fc:99:dc:e0:91:bf:a9:
                    6f:6d:fe:27:e4:09:d3:1c:d1:9e:60:fa:16:88:b7:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:72:D4:92:85:E4:A8:0A:36:E6:FD:54:63:7E:C0:2D:EB:79:F8:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl

            X509v3 Authority Key Identifier:
                keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ae:a0:53:1c:3c:7e:18:f6:58:b4:9a:7d:34:11:41:6a:9d:
         e0:ff:00:7c:df:86:a5:84:86:4d:bf:cf:af:b7:ec:4c:8b:2f:
         48:bf:da:bc:99:45:4d:5b:8f:3b:92:61:1c:05:1a:32:62:29:
         de:17:df:60:99:95:8c:53:cc:92:7a:5d:53:76:b8:a2:da:17:
         d3:37:c6:ea:e5:30:6b:c6:b8:2b:06:0e:3c:98:ba:49:1b:47:
         e9:30:f2:c8:d7:9f:69:d1:57:16:9d:68:dc:76:c8:db:9b:69:
         7d:ee:5d:d7:24:93:5a:5c:15:03:f8:11:c3:9a:2f:de:96:2c:
         3b:e0:02:ef:10:c4:ef:7c:36:e1:e1:3d:2f:cb:bb:05:fb:0a:
         8d:bf:71:16:6a:f5:a1:9f:2c:64:0f:5d:85:e2:09:85:fb:49:
         2c:e9:96:fe:45:f6:aa:24:5a:75:81:f5:fe:64:9d:a2:d5:05:
         d5:54:19:ac:eb:9c:d3:1d:c2:0e:40:85:00:fa:01:e5:55:df:
         3a:a8:9f:f6:30:bf:a6:73:d3:53:29:c0:bd:d9:72:a9:6b:63:
         28:1d:a3:0a:02:de:1c:f8:8f:80:0c:73:0d:24:7a:a9:e5:16:
         22:8d:89:24:41:4d:54:0b:1a:a2:b8:b7:7f:e4:ea:94:d8:78:
         9d:22:b3:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDG+86YFPY7qEFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDc4YTBhMjEtZDEwMS00NjRjLTg3MDYtMjViYjE1NzU0
NWM4MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
NjRjOTJmMDAtYWRiOC00OGMyLTkwODctMTFmOTgwNjA3YmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN8sp6afZhZtzNiui0HhJ7oSmms3UyEPmmJ2
aMvvbneO2OYPkKGrY3rbz2b03j6bsxBUVGiH4SDJuD2pgZogukk+wC4ZeEiHRGBN
TLcvyFo6WQRnRA78xfyPXIUOmt7Yem1wRR6TZ5Z7fr/q+yvQgn+aWUUJcHu+wYws
NZ6EbTOw72pAdZzy2Guo4cuSguMmSx1otMrxTSQ45fwwqaIBU+7osaW71MdAsOsw
whxUc/Dg3Wev9pyRFgj2t2IyGwcyTFCXqxz350s0eGLhR9DOA9x2TI1V31aGYbS4
n+hHAW0C6PinvPO+IfyZ3OCRv6lvbf4n5AnTHNGeYPoWiLcN7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJy1JKF5KgKNub9VGN+wC3refhcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80Nzhh
MGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJiMTU3NTQ1YzgvOTFlMWEzY2MtZTAxOS0z
NzU0LWI4YjYtMzE1ZjM4N2YzMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDc4YTBhMjEtZDEwMS00NjRjLTg3
MDYtMjViYjE1NzU0NWM4LzQ3OGEwYTIxLWQxMDEtNDY0Yy04NzA2LTI1YmIxNTc1
NDVjOC5jcmwwHwYDVR0jBBgwFoAUNcXLPqvEc4Whq6zjIWHTNz4I6RowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NzhhMGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJi
MTU3NTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFeuoFMcPH4Y9li0mn00EUFqneD/AHzfhqWEhk2/z6+37EyLL0i/2ryZ
RU1bjzuSYRwFGjJiKd4X32CZlYxTzJJ6XVN2uKLaF9M3xurlMGvGuCsGDjyYukkb
R+kw8sjXn2nRVxadaNx2yNubaX3uXdckk1pcFQP4EcOaL96WLDvgAu8QxO98NuHh
PS/LuwX7Co2/cRZq9aGfLGQPXYXiCYX7SSzplv5F9qokWnWB9f5knaLVBdVUGazr
nNMdwg5AhQD6AeVV3zqon/Ywv6Zz01MpwL3ZcqlrYygdowoC3hz4j4AMcw0keqnl
FiKNiSRBTVQLGqK4t3/k6pTYeJ0isxQ=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:10:54 2026 by rpki-client