Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
File:                     11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa (raw, json)
Hash identifier:          vqannSEC/pmjFBuT4Z4e85WobuwkmDwp3FwDFb7xyVA=
Subject key identifier:   3C:78:A7:06:A8:82:EF:1A:82:0D:0C:DA:9B:3B:FE:73:DA:95:68:A0
Certificate issuer:       /CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Certificate serial:       010D0C9F4328584F5768013573501B198942A600
Authority key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     394760
IP address blocks:        23.140.8.0/24 maxlen: 24
                          2602:fb30::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:01:35:73:50:1b:19:89:42:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=7833554a-b108-4552-802d-820e79a6162a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:ee:06:c7:cf:25:a5:6c:80:d4:28:1a:37:
                    e0:81:aa:8b:09:01:36:8a:c1:f1:9e:4b:66:38:35:
                    4f:79:dd:05:65:7d:24:bc:c7:d6:9d:5e:60:cc:ad:
                    a9:b3:d1:f8:de:4d:8a:fb:90:38:26:07:bf:4c:92:
                    90:e8:9c:21:88:b7:b5:e2:d6:14:5a:fe:f6:0b:4e:
                    db:7f:4b:e9:1b:43:1e:22:02:2e:91:cb:d6:d1:42:
                    1c:20:4e:19:d0:1c:e5:c9:56:91:21:b7:f9:52:36:
                    de:91:9b:85:69:2e:b2:65:86:e6:99:9b:ee:1e:79:
                    0c:99:0c:52:01:67:3f:cb:ab:d3:fe:c0:9c:f6:fc:
                    39:77:2b:e8:ce:7b:85:15:66:f2:53:42:f1:08:10:
                    50:10:d6:b8:ad:02:eb:82:b2:e4:a1:38:90:75:de:
                    c4:d3:88:4d:b0:ee:f2:11:01:46:ae:7b:47:c5:13:
                    3a:1f:0e:50:bd:59:ab:1c:05:cd:bf:22:23:d1:2d:
                    86:0b:72:c6:cc:5d:1f:0a:80:7d:e7:e6:78:8c:6f:
                    ac:08:70:15:e0:2d:98:72:98:a0:9f:33:4c:26:83:
                    ed:39:e6:9f:b7:7d:2a:7b:90:a6:84:19:c0:f5:5e:
                    8a:14:8e:aa:fc:f3:fc:f8:27:d0:a2:bc:fd:f9:ea:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:A7:06:A8:82:EF:1A:82:0D:0C:DA:9B:3B:FE:73:DA:95:68:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl

            X509v3 Authority Key Identifier:
                keyid:FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.8.0/24
                IPv6:
                  2602:fb30::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:06:ea:74:2d:68:b2:8e:e6:ae:ea:76:64:6b:34:2c:ac:1a:
         74:88:1c:ed:eb:21:3e:8e:e4:01:36:53:6d:93:d0:82:f2:30:
         9c:77:a9:f9:e0:5c:28:67:4e:f7:25:61:44:8a:26:c9:6f:58:
         83:ec:39:05:1a:39:83:9e:c8:4d:0a:ce:f8:bf:f3:e8:7c:ed:
         6e:dd:81:9e:d3:cf:56:61:05:0a:97:f1:57:63:23:61:cf:42:
         0a:69:b1:23:d1:89:b5:1e:00:ae:f2:7e:ce:da:a3:ae:65:fc:
         ad:74:3b:25:20:26:6f:f9:fb:44:a7:5d:c3:21:f3:49:69:72:
         f2:a2:56:b6:4d:80:93:f9:d4:cd:ac:5a:7e:77:bc:20:a9:c8:
         f3:ed:23:c4:1f:a8:2c:01:d9:2b:56:fa:b4:db:59:bb:17:92:
         04:16:cc:9a:d3:59:ed:ac:3b:d2:19:cb:05:45:ef:4a:a5:80:
         54:c0:34:d9:0e:93:1e:de:ff:79:a0:d5:cb:7e:f8:d5:fd:23:
         67:ab:4a:bc:77:d0:19:32:93:29:b8:b9:b3:d2:c0:3b:b4:0f:
         08:ef:6e:a1:4a:1c:ea:52:e2:3d:06:fe:70:56:c0:be:16:dd:
         00:89:74:9c:b2:4e:71:5f:27:32:37:a9:09:83:eb:2a:42:f3:
         a7:b8:53:fe
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9XaAE1c1AbGYlCpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFjN2MzYjQtY2JmYi00NjBiLThjYmEtYThiMDY1MDRj
ODkyMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NzgzMzU1NGEtYjEwOC00NTUyLTgwMmQtODIwZTc5YTYxNjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr7uBsfPJaVsgNQoGjfggaqLCQE2isHxnktm
ODVPed0FZX0kvMfWnV5gzK2ps9H43k2K+5A4Jge/TJKQ6JwhiLe14tYUWv72C07b
f0vpG0MeIgIukcvW0UIcIE4Z0BzlyVaRIbf5UjbekZuFaS6yZYbmmZvuHnkMmQxS
AWc/y6vT/sCc9vw5dyvoznuFFWbyU0LxCBBQENa4rQLrgrLkoTiQdd7E04hNsO7y
EQFGrntHxRM6Hw5QvVmrHAXNvyIj0S2GC3LGzF0fCoB95+Z4jG+sCHAV4C2Ycpig
nzNMJoPtOeaft30qe5CmhBnA9V6KFI6q/PP8+CfQorz9+er04QIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFDx4pwaogu8agg0M2ps7/nPalWigMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81YWM3
YzNiNC1jYmZiLTQ2MGItOGNiYS1hOGIwNjUwNGM4OTIvMTFkMWFmNjAtOTFlNy0z
ZDVhLTg1MzItOWRmZmNkZWY5ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWFjN2MzYjQtY2JmYi00NjBiLThj
YmEtYThiMDY1MDRjODkyLzVhYzdjM2I0LWNiZmItNDYwYi04Y2JhLWE4YjA2NTA0
Yzg5Mi5jcmwwHwYDVR0jBBgwFoAU+5HZC71nsRTK2OAzjZcioG1PIb8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81YWM3YzNiNC1jYmZiLTQ2MGItOGNiYS1hOGIw
NjUwNGM4OTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4wIMA4E
AgACMAgDBgAmAvswADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsBup0LWiyjuau6nZkazQsrBp0iBzt6yE+
juQBNlNtk9CC8jCcd6n54FwoZ073JWFEiibJb1iD7DkFGjmDnshNCs74v/PofO1u
3YGe089WYQUKl/FXYyNhz0IKabEj0Ym1HgCu8n7O2qOuZfytdDslICZv+ftEp13D
IfNJaXLyola2TYCT+dTNrFp+d7wgqcjz7SPEH6gsAdkrVvq021m7F5IEFsya01nt
rDvSGcsFRe9KpYBUwDTZDpMe3v95oNXLfvjV/SNnq0q8d9AZMpMpuLmz0sA7tA8I
726hShzqUuI9Bv5wVsC+Ft0AiXScsk5xXycyN6kJg+sqQvOnuFP+
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:53:24 2026 by rpki-client