Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa
File:                     42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa (raw, json)
Hash identifier:          5GNNUofhu8lrppL3BSO3Kj4Tk8daAY8JyjPnu0laM08=
Subject key identifier:   A2:F2:1C:12:48:F6:60:26:08:DA:CE:8A:4A:7C:FD:7B:ED:A7:DB:B7
Certificate issuer:       /CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0
Certificate serial:       010D0C9F4328584F4976FBC3B86640887041CE80
Authority key identifier: D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        23.235.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:fb:c3:b8:66:40:88:70:41:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=43207528-9b78-4ad9-bc3d-af1e5df3a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:c5:96:13:da:66:18:f0:22:fc:2f:c0:13:
                    b8:fb:3e:1e:cd:c9:01:2d:b0:1a:e9:00:22:15:3f:
                    08:6c:d1:b7:21:1b:ae:03:6e:ec:95:9e:82:d2:1e:
                    86:68:2b:ca:1a:99:da:6a:85:97:ec:cf:e7:b2:53:
                    0f:97:61:13:84:89:22:ad:1a:9d:b6:8c:91:b4:a5:
                    94:97:be:b6:fc:29:9b:c9:65:eb:ff:8f:e1:07:b8:
                    40:57:e3:08:b8:b2:60:f8:c9:90:8c:74:45:b6:e2:
                    a6:b4:7a:e5:ee:ad:d1:19:ef:a8:6e:46:91:78:b6:
                    c1:72:13:7d:eb:03:6c:39:04:7f:58:55:89:03:4a:
                    cd:70:50:d3:5f:e0:2a:45:cd:12:21:9a:7c:4e:bb:
                    1f:06:3f:78:de:69:29:e9:ce:e3:d2:3b:75:bc:df:
                    6c:6b:86:91:4c:95:40:c5:46:4d:6c:c1:47:cc:d0:
                    68:95:44:78:46:19:0e:2b:88:f7:6f:37:75:f4:b0:
                    75:a2:f1:7f:15:36:cb:a9:6e:b4:90:70:b0:ff:60:
                    67:91:68:8d:84:41:6d:03:60:a7:f1:6d:a7:78:94:
                    7b:d2:37:44:31:cb:3d:8f:f7:0d:be:c5:08:37:5c:
                    74:b1:bc:b3:1d:21:5e:ba:7f:7e:81:1a:a2:56:5a:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:1C:12:48:F6:60:26:08:DA:CE:8A:4A:7C:FD:7B:ED:A7:DB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl

            X509v3 Authority Key Identifier:
                keyid:D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:df:af:14:5d:2c:9b:84:45:0e:e6:39:70:45:d1:72:37:
         98:e1:1c:ec:16:45:c1:2e:d0:39:78:cd:b3:2e:2d:fa:84:83:
         96:c2:f2:a4:64:c5:8a:4a:95:0f:4f:29:fe:b4:8e:58:bf:dc:
         40:03:f2:70:e9:62:98:fc:84:4f:2e:05:91:10:dc:f6:39:ce:
         b3:38:99:2f:26:7b:f0:23:aa:15:63:18:81:74:62:1a:b9:7b:
         29:e9:e4:f9:d8:d2:b4:91:91:b5:64:90:58:65:3b:2d:9a:33:
         d9:a8:28:19:75:1b:37:69:83:66:1e:42:a6:80:27:f8:50:25:
         8d:7c:1e:7f:af:34:9c:e3:3f:11:21:67:34:0e:d0:72:4b:88:
         31:fb:60:ad:0b:e2:8d:32:dd:3f:70:1c:cb:b4:88:e0:40:95:
         87:81:c8:fe:41:9b:74:f9:1c:a6:b0:35:3f:57:7f:9c:57:e4:
         a2:5c:5a:cd:2f:a8:d3:2b:91:5e:a9:8a:c9:aa:48:93:69:06:
         76:73:1e:56:46:61:a7:c7:1c:f3:56:fd:1f:2b:76:cf:b8:e2:
         f3:70:6b:9f:e3:65:d1:23:b0:5a:d5:4c:ab:14:2c:b3:82:17:
         bc:56:5b:14:66:3c:93:38:e6:2d:f8:ac:b6:58:1e:07:8b:b9:
         96:d7:56:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdvvDuGZAiHBBzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQyM2M1YWItZTJlNi00Mjk1LWFiYzctYmUzZmFkMmIy
NWIwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDMyMDc1MjgtOWI3OC00YWQ5LWJjM2QtYWYxZTVkZjNhM2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsnFlhPaZhjwIvwvwBO4+z4ezckBLbAa6QAi
FT8IbNG3IRuuA27slZ6C0h6GaCvKGpnaaoWX7M/nslMPl2EThIkirRqdtoyRtKWU
l762/CmbyWXr/4/hB7hAV+MIuLJg+MmQjHRFtuKmtHrl7q3RGe+obkaReLbBchN9
6wNsOQR/WFWJA0rNcFDTX+AqRc0SIZp8TrsfBj943mkp6c7j0jt1vN9sa4aRTJVA
xUZNbMFHzNBolUR4RhkOK4j3bzd19LB1ovF/FTbLqW60kHCw/2BnkWiNhEFtA2Cn
8W2neJR70jdEMcs9j/cNvsUIN1x0sbyzHSFeun9+gRqiVloHnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLyHBJI9mAmCNrOikp8/Xvtp9u3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NDIz
YzVhYi1lMmU2LTQyOTUtYWJjNy1iZTNmYWQyYjI1YjAvNDJkZDVmYzMtZWI0MS0z
YmM4LThhYzgtMzFiNTk0YmJiNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzQyM2M1YWItZTJlNi00Mjk1LWFi
YzctYmUzZmFkMmIyNWIwLzc0MjNjNWFiLWUyZTYtNDI5NS1hYmM3LWJlM2ZhZDJi
MjViMC5jcmwwHwYDVR0jBBgwFoAU0CVhDSM+xkzR1NNBlEZH2PBarAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NDIzYzVhYi1lMmU2LTQyOTUtYWJjNy1iZTNm
YWQyYjI1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+t+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsl368UXSybhEUO5jlwRdFyN5jhHOwWRcEu0Dl4zbMuLfqEg5bC8qRk
xYpKlQ9PKf60jli/3EAD8nDpYpj8hE8uBZEQ3PY5zrM4mS8me/AjqhVjGIF0Yhq5
eynp5PnY0rSRkbVkkFhlOy2aM9moKBl1Gzdpg2YeQqaAJ/hQJY18Hn+vNJzjPxEh
ZzQO0HJLiDH7YK0L4o0y3T9wHMu0iOBAlYeByP5Bm3T5HKawNT9Xf5xX5KJcWs0v
qNMrkV6pismqSJNpBnZzHlZGYafHHPNW/R8rds+44vNwa5/jZdEjsFrVTKsULLOC
F7xWWxRmPJM45i34rLZYHgeLuZbXVhU=
-----END CERTIFICATE-----
Generated at Tue Oct 6 02:41:33 2026 by rpki-client