Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
File:                     98ea8d1f-6d28-3754-8463-218ef6072d68.roa (raw, json)
Hash identifier:          qI6RF8WKXifs5Cab4RAOoVpE+oSFe/AkzRrivDKLgUk=
Subject key identifier:   34:96:78:00:FF:36:24:BA:77:E6:B8:35:E8:B6:64:74:67:82:26:8F
Certificate issuer:       /CN=6205d76d-4f52-4364-a347-5456e5513fc3
Certificate serial:       010D0C9F4328584E31CF1C4823F8751762971380
Authority key identifier: 51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        23.189.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:1c:48:23:f8:75:17:62:97:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6205d76d-4f52-4364-a347-5456e5513fc3
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=6d9efc37-487d-4d50-a541-d2e111dd526b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:8f:30:58:7c:1a:73:bd:46:09:f7:8a:eb:
                    a3:1f:c0:9c:cd:2d:fd:4a:b1:a3:65:b5:9a:9a:11:
                    71:c1:89:8a:36:c8:c0:69:1c:f2:f1:1e:a7:a5:39:
                    26:66:14:99:87:82:fc:f3:a9:bd:e9:e7:0e:e8:92:
                    a7:7f:1a:08:5c:fb:08:20:89:00:04:02:4e:01:9c:
                    f4:ce:d8:4b:0c:a8:21:22:e4:f0:d4:65:4b:fb:33:
                    b2:56:fe:0f:c1:88:0e:6e:af:f6:54:a6:48:38:b7:
                    7b:ed:79:3a:77:23:da:dd:8e:9f:22:b0:93:2c:e5:
                    74:d1:11:ea:38:a1:83:ee:81:dd:27:ae:58:e9:4b:
                    b0:0e:d9:74:8f:1d:46:f6:e1:e2:ca:15:bc:37:f1:
                    08:e7:58:6f:b5:9a:60:04:8d:e7:3a:b5:68:4e:17:
                    9d:d6:8f:54:3b:fb:b0:8d:92:1a:20:a4:4b:c6:82:
                    8e:68:4d:7b:52:25:f1:b6:10:ce:cb:32:73:31:6d:
                    f6:0c:94:b8:63:06:64:ad:4c:c0:0c:12:25:3d:c9:
                    d6:02:55:a8:4a:c2:25:e3:10:eb:2e:98:d8:17:94:
                    85:f7:17:d7:66:39:e6:06:16:d3:ab:b1:5c:78:41:
                    5a:81:9f:70:6d:ec:d1:7a:ef:ab:75:8a:fc:15:27:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:96:78:00:FF:36:24:BA:77:E6:B8:35:E8:B6:64:74:67:82:26:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl

            X509v3 Authority Key Identifier:
                keyid:51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c9:81:10:3d:ff:1e:58:b8:85:f1:5e:6f:d8:3a:fc:85:a2:
         e0:19:28:6b:05:32:5d:ae:7e:f4:03:d7:1e:5f:05:f1:f0:29:
         44:6b:88:6d:6f:72:f9:38:cc:33:25:48:48:60:fa:ef:9e:b9:
         61:a6:7f:9c:5f:0d:a0:72:cc:f1:18:5b:fd:8c:a8:d4:39:73:
         72:ba:fe:bc:1b:a6:b6:5d:70:b0:56:7d:73:b0:65:11:35:5b:
         e8:c7:f1:44:41:3d:56:4d:49:ad:cf:26:23:c0:60:5f:b8:cf:
         53:d0:29:c0:1d:1d:7f:5e:72:3d:55:f4:e0:3f:c1:7f:a5:59:
         e0:1e:9d:e9:e8:34:6a:c1:1b:e8:72:24:73:d7:69:b2:c8:32:
         91:62:d0:5b:0b:0c:1c:cc:6f:18:b5:af:6e:23:a7:63:e6:44:
         66:50:da:dc:5d:83:08:42:42:6d:f2:a0:cf:cc:c1:e6:0c:95:
         aa:36:6b:0f:bf:a9:6a:04:36:8f:9e:97:10:45:8e:3f:7b:7b:
         09:03:05:3a:13:47:db:b2:bc:75:d6:ee:03:d1:7b:b5:eb:4f:
         b8:07:2b:03:c9:76:d5:b5:aa:44:40:c9:ce:8e:27:85:6f:aa:
         e0:f3:a1:95:a1:df:c6:ea:84:36:37:1f:4e:3f:cf:5e:ad:ea:
         1d:c2:20:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxxII/h1F2KXE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjIwNWQ3NmQtNGY1Mi00MzY0LWEzNDctNTQ1NmU1NTEz
ZmMzMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
NmQ5ZWZjMzctNDg3ZC00ZDUwLWE1NDEtZDJlMTExZGQ1MjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipmPMFh8GnO9Rgn3iuujH8CczS39SrGjZbWa
mhFxwYmKNsjAaRzy8R6npTkmZhSZh4L886m96ecO6JKnfxoIXPsIIIkABAJOAZz0
zthLDKghIuTw1GVL+zOyVv4PwYgObq/2VKZIOLd77Xk6dyPa3Y6fIrCTLOV00RHq
OKGD7oHdJ65Y6UuwDtl0jx1G9uHiyhW8N/EI51hvtZpgBI3nOrVoThed1o9UO/uw
jZIaIKRLxoKOaE17UiXxthDOyzJzMW32DJS4YwZkrUzADBIlPcnWAlWoSsIl4xDr
LpjYF5SF9xfXZjnmBhbTq7FceEFagZ9wbezReu+rdYr8FSfXSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSWeAD/NiS6d+a4Nei2ZHRngiaPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MjA1
ZDc2ZC00ZjUyLTQzNjQtYTM0Ny01NDU2ZTU1MTNmYzMvOThlYThkMWYtNmQyOC0z
NzU0LTg0NjMtMjE4ZWY2MDcyZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjIwNWQ3NmQtNGY1Mi00MzY0LWEz
NDctNTQ1NmU1NTEzZmMzLzYyMDVkNzZkLTRmNTItNDM2NC1hMzQ3LTU0NTZlNTUx
M2ZjMy5jcmwwHwYDVR0jBBgwFoAUUT3ZuhFhekXgSpGo8kmq9aAg8BkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjA1ZDc2ZC00ZjUyLTQzNjQtYTM0Ny01NDU2
ZTU1MTNmYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHJgRA9/x5YuIXxXm/YOvyFouAZKGsFMl2ufvQD1x5fBfHwKURriG1v
cvk4zDMlSEhg+u+euWGmf5xfDaByzPEYW/2MqNQ5c3K6/rwbprZdcLBWfXOwZRE1
W+jH8URBPVZNSa3PJiPAYF+4z1PQKcAdHX9ecj1V9OA/wX+lWeAenenoNGrBG+hy
JHPXabLIMpFi0FsLDBzMbxi1r24jp2PmRGZQ2txdgwhCQm3yoM/MweYMlao2aw+/
qWoENo+elxBFjj97ewkDBToTR9uyvHXW7gPRe7XrT7gHKwPJdtW1qkRAyc6OJ4Vv
quDzoZWh38bqhDY3H04/z16t6h3CIMs=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:15 2026 by rpki-client