Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/6fd57e35-cd0d-30ce-a689-08517547fd19.roa
File:                     6fd57e35-cd0d-30ce-a689-08517547fd19.roa (raw, json)
Hash identifier:          60e1ObtdvgR/a6K3gbjHP5vn6s6lmBXFVFQkVjG80bI=
Subject key identifier:   77:09:D9:59:C7:89:29:A4:F9:4E:AF:65:13:57:0E:E0:45:37:B7:E6
Certificate issuer:       /CN=92d1570d-08ed-4cb4-83ab-788f1dcfd4bf
Certificate serial:       010D0C9F4328584DDBBB1049BAD6BD412AD13300
Authority key identifier: DA:45:34:D4:19:67:3C:53:57:48:6C:27:27:52:AE:ED:5B:28:54:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/6fd57e35-cd0d-30ce-a689-08517547fd19.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     400767
IP address blocks:        23.141.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:10:49:ba:d6:bd:41:2a:d1:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d1570d-08ed-4cb4-83ab-788f1dcfd4bf
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=cf33b3f1-add9-4807-89cd-8e7c6fa20f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:8c:72:ea:1c:db:01:fc:6b:77:b2:2f:de:
                    6a:95:ca:0d:50:33:95:3f:98:5f:f2:83:a7:64:ac:
                    c5:b4:d3:c4:54:b2:f1:20:19:a7:bf:7e:9f:b4:c9:
                    96:ec:1d:dd:ea:d9:1b:f7:77:cf:77:78:7c:08:11:
                    bb:d7:c3:6a:bd:83:34:9d:84:8d:5a:f6:2a:72:5e:
                    ab:09:02:ea:5a:c7:a8:03:d5:80:c5:f6:db:41:c2:
                    d9:87:2a:e1:80:24:66:85:d0:14:c9:cb:ef:9e:57:
                    9a:25:2e:3d:a1:bb:90:02:7c:38:65:1d:67:8d:8a:
                    6a:4c:ce:cb:64:7a:89:90:aa:30:fb:09:3c:78:72:
                    a9:5e:56:2a:b9:6a:87:0c:6d:cf:ff:d4:a2:fe:12:
                    65:a2:5c:c8:ad:e4:7f:ce:29:4e:99:eb:bc:47:2f:
                    de:58:9d:3b:cc:37:7e:43:07:80:e4:55:87:8a:ae:
                    f6:62:41:86:9e:c3:02:06:e9:97:ec:76:2b:88:30:
                    84:5a:79:e7:b0:fb:08:10:1a:3a:a7:1e:10:94:04:
                    37:08:5a:61:c7:e6:17:a6:c8:f2:35:f5:53:70:97:
                    ce:a2:74:2c:a1:7c:3f:bd:3b:8c:32:cc:e9:2c:12:
                    43:4b:ec:ba:e9:ee:5a:9d:b9:93:5b:69:06:4b:53:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:09:D9:59:C7:89:29:A4:F9:4E:AF:65:13:57:0E:E0:45:37:B7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/6fd57e35-cd0d-30ce-a689-08517547fd19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.crl

            X509v3 Authority Key Identifier:
                keyid:DA:45:34:D4:19:67:3C:53:57:48:6C:27:27:52:AE:ED:5B:28:54:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:4d:ab:ef:41:a6:f0:8b:e8:c8:9f:ba:0a:bb:5a:33:d7:3a:
         1f:eb:d0:56:e0:e9:91:25:85:a7:8e:18:45:20:1d:fe:29:0a:
         a5:35:72:9e:05:b8:9e:70:c8:d5:f7:7f:ab:8e:15:ae:3f:ca:
         d6:38:71:c4:ae:e5:59:0f:fd:26:a3:19:a6:7c:27:ce:89:6a:
         a6:f8:e5:0e:64:1f:34:f9:b2:54:28:14:d7:27:a1:5b:e9:2b:
         07:26:cb:3a:ba:a9:24:e5:51:00:39:b9:f5:a6:84:71:c7:8f:
         3e:49:a5:41:1f:57:93:dc:de:85:04:1f:a5:95:f2:9f:a9:a1:
         ae:84:d2:0b:00:5c:ec:e9:f9:dd:f6:c3:e5:e9:b6:25:a3:98:
         27:78:fd:d7:e4:15:03:96:fc:b4:40:85:2a:db:81:a2:fc:44:
         77:21:b5:0b:56:22:6b:6e:c5:9b:4d:9c:f7:b0:c5:dd:47:bd:
         b6:e4:84:cc:bf:a5:d6:a3:bb:ce:94:09:aa:bc:97:bb:6d:b9:
         3e:41:9a:11:9e:8e:4d:70:2b:55:4f:e3:17:fe:68:13:be:d4:
         6d:99:33:b0:fc:76:e5:e2:3f:45:d3:2c:cf:e6:91:b2:a5:38:
         3c:3a:b3:bc:fc:6e:d1:1f:17:ca:67:71:b2:cc:6d:84:bd:2a:
         b3:70:c5:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3buxBJuta9QSrRMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTJkMTU3MGQtMDhlZC00Y2I0LTgzYWItNzg4ZjFkY2Zk
NGJmMB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk
Y2YzM2IzZjEtYWRkOS00ODA3LTg5Y2QtOGU3YzZmYTIwZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb+Mcuoc2wH8a3eyL95qlcoNUDOVP5hf8oOn
ZKzFtNPEVLLxIBmnv36ftMmW7B3d6tkb93fPd3h8CBG718NqvYM0nYSNWvYqcl6r
CQLqWseoA9WAxfbbQcLZhyrhgCRmhdAUycvvnleaJS49obuQAnw4ZR1njYpqTM7L
ZHqJkKow+wk8eHKpXlYquWqHDG3P/9Si/hJlolzIreR/zilOmeu8Ry/eWJ07zDd+
QweA5FWHiq72YkGGnsMCBumX7HYriDCEWnnnsPsIEBo6px4QlAQ3CFphx+YXpsjy
NfVTcJfOonQsoXw/vTuMMszpLBJDS+y66e5anbmTW2kGS1Mf6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcJ2VnHiSmk+U6vZRNXDuBFN7fmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MmQx
NTcwZC0wOGVkLTRjYjQtODNhYi03ODhmMWRjZmQ0YmYvNmZkNTdlMzUtY2QwZC0z
MGNlLWE2ODktMDg1MTc1NDdmZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTJkMTU3MGQtMDhlZC00Y2I0LTgz
YWItNzg4ZjFkY2ZkNGJmLzkyZDE1NzBkLTA4ZWQtNGNiNC04M2FiLTc4OGYxZGNm
ZDRiZi5jcmwwHwYDVR0jBBgwFoAU2kU01BlnPFNXSGwnJ1Ku7VsoVDMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MmQxNTcwZC0wOGVkLTRjYjQtODNhYi03ODhm
MWRjZmQ0YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZNq+9BpvCL6Mifugq7WjPXOh/r0Fbg6ZElhaeOGEUgHf4pCqU1cp4F
uJ5wyNX3f6uOFa4/ytY4ccSu5VkP/SajGaZ8J86Jaqb45Q5kHzT5slQoFNcnoVvp
Kwcmyzq6qSTlUQA5ufWmhHHHjz5JpUEfV5Pc3oUEH6WV8p+poa6E0gsAXOzp+d32
w+XptiWjmCd4/dfkFQOW/LRAhSrbgaL8RHchtQtWImtuxZtNnPewxd1HvbbkhMy/
pdaju86UCaq8l7ttuT5BmhGejk1wK1VP4xf+aBO+1G2ZM7D8duXiP0XTLM/mkbKl
ODw6s7z8btEfF8pncbLMbYS9KrNwxXg=
-----END CERTIFICATE-----
Generated at Sun May 24 06:44:35 2026 by rpki-client