Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa
File:                     f33e2938-3175-32bb-addd-654bad44256d.roa (raw, json)
Hash identifier:          5O+/YqTVAZ6d9ojstL9U7ab9qMv0iLOi5pzrpYJkHcw=
Subject key identifier:   64:A1:6B:3A:14:0C:FA:0D:DE:2F:DB:DD:07:5A:6F:94:55:B7:AE:CB
Certificate issuer:       /CN=8118d48c-a256-4b28-967d-1f836718e31e
Certificate serial:       010D0C9F4328584F7E7DA2F6A988841A7B94FE00
Authority key identifier: D0:2C:5E:2F:E6:74:48:0B:D6:E7:E5:53:DF:0E:4E:70:5E:8E:30:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     400910
IP address blocks:        23.138.212.0/24 maxlen: 24
                          2604:fa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:a2:f6:a9:88:84:1a:7b:94:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8118d48c-a256-4b28-967d-1f836718e31e
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=4e29df23-68f5-4c7c-ab43-ec6e0df03972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:a4:46:be:8e:7c:68:7b:5c:2f:f1:12:cd:
                    d9:0e:d3:12:50:8b:f7:4a:f2:bc:93:23:43:94:4c:
                    93:19:24:d5:35:3c:e3:a9:cf:33:28:79:59:77:e2:
                    cd:f1:e3:87:fb:2f:e9:99:36:98:6f:09:b0:e8:61:
                    26:01:c2:75:39:d1:05:7c:88:4e:e2:24:99:7b:26:
                    08:fb:95:14:ed:42:ec:c7:ea:de:f3:42:95:4b:6f:
                    50:78:00:ed:14:4d:81:ba:39:07:1b:b3:e2:ee:5e:
                    3b:56:51:00:79:d4:f0:cb:38:27:c0:64:7d:0c:64:
                    84:4a:2f:be:d9:aa:ea:7c:18:4b:bc:29:7e:34:76:
                    15:41:1c:70:cb:e0:0c:54:83:8e:9e:26:34:68:b0:
                    14:9a:34:57:99:a5:05:e7:50:7f:94:d5:3f:cc:00:
                    13:80:c2:21:23:a2:38:a4:63:6d:cc:12:01:c5:88:
                    32:91:62:b0:ee:98:86:bb:97:02:a7:59:00:9c:8e:
                    83:6f:f5:94:c0:d7:ce:52:a8:17:c3:c0:d5:64:f4:
                    c1:e8:70:fc:24:5c:cb:19:91:2f:4a:16:2d:84:6e:
                    92:8c:a2:37:7b:8c:ed:0b:75:5c:0e:7c:2f:a4:3d:
                    a8:05:eb:b0:ce:b7:ee:00:d2:51:ac:7e:42:30:5f:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A1:6B:3A:14:0C:FA:0D:DE:2F:DB:DD:07:5A:6F:94:55:B7:AE:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.crl

            X509v3 Authority Key Identifier:
                keyid:D0:2C:5E:2F:E6:74:48:0B:D6:E7:E5:53:DF:0E:4E:70:5E:8E:30:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.212.0/24
                IPv6:
                  2604:fa0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:23:9e:5b:d5:73:a3:20:c3:1c:a8:4e:2a:25:23:db:19:32:
         ee:67:e4:3a:b3:73:11:c5:ba:4a:07:e7:13:8a:9f:06:fe:dc:
         8e:04:34:d0:52:48:36:e0:b5:8a:01:7e:ef:d1:73:be:01:a2:
         ed:e1:b3:87:e1:5e:18:15:aa:25:3d:bf:29:98:17:f0:bc:90:
         82:0a:63:c0:e4:50:73:3d:89:a3:8b:3f:d7:e4:e7:04:c8:66:
         44:bf:b6:b5:f2:66:91:46:e9:49:7f:26:88:50:30:31:a6:f2:
         3f:4f:22:c6:7e:3f:64:2c:f8:9e:e2:6b:88:dc:07:d3:56:c1:
         1c:7e:ae:74:86:bc:42:5a:37:05:e9:80:59:97:c4:c9:68:41:
         16:54:3e:89:85:ce:0e:2d:5c:e4:09:37:97:f4:6e:b3:cb:ac:
         c8:c5:a1:81:68:5a:40:4f:2a:e2:a5:31:6f:ac:10:49:23:9b:
         06:ab:ef:f5:bc:51:77:eb:e0:41:35:1c:07:22:68:07:8f:a8:
         2b:0e:e1:43:ba:a6:99:9e:b7:2a:38:b5:bf:8b:b8:24:5c:04:
         9c:eb:8e:e1:3c:32:6c:1f:cb:63:5c:54:47:20:93:f9:99:18:
         92:9d:93:3a:0d:b0:c5:8e:a7:6d:56:da:c1:42:89:90:c5:fe:
         a5:20:cb:3b
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9+faL2qYiEGnuU/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExOGQ0OGMtYTI1Ni00YjI4LTk2N2QtMWY4MzY3MThl
MzFlMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
NGUyOWRmMjMtNjhmNS00YzdjLWFiNDMtZWM2ZTBkZjAzOTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnWkRr6OfGh7XC/xEs3ZDtMSUIv3SvK8kyND
lEyTGSTVNTzjqc8zKHlZd+LN8eOH+y/pmTaYbwmw6GEmAcJ1OdEFfIhO4iSZeyYI
+5UU7ULsx+re80KVS29QeADtFE2BujkHG7Pi7l47VlEAedTwyzgnwGR9DGSESi++
2arqfBhLvCl+NHYVQRxwy+AMVIOOniY0aLAUmjRXmaUF51B/lNU/zAATgMIhI6I4
pGNtzBIBxYgykWKw7piGu5cCp1kAnI6Db/WUwNfOUqgXw8DVZPTB6HD8JFzLGZEv
ShYthG6SjKI3e4ztC3VcDnwvpD2oBeuwzrfuANJRrH5CMF/hQwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFGShazoUDPoN3i/b3Qdab5RVt67LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84MTE4
ZDQ4Yy1hMjU2LTRiMjgtOTY3ZC0xZjgzNjcxOGUzMWUvZjMzZTI5MzgtMzE3NS0z
MmJiLWFkZGQtNjU0YmFkNDQyNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODExOGQ0OGMtYTI1Ni00YjI4LTk2
N2QtMWY4MzY3MThlMzFlLzgxMThkNDhjLWEyNTYtNGIyOC05NjdkLTFmODM2NzE4
ZTMxZS5jcmwwHwYDVR0jBBgwFoAU0CxeL+Z0SAvW5+VT3w5OcF6OMPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84MTE4ZDQ4Yy1hMjU2LTRiMjgtOTY3ZC0xZjgz
NjcxOGUzMWUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4rUMA0E
AgACMAcDBQAmBA+gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBADMjnlvVc6MgwxyoTiolI9sZMu5n5DqzcxHF
ukoH5xOKnwb+3I4ENNBSSDbgtYoBfu/Rc74Bou3hs4fhXhgVqiU9vymYF/C8kIIK
Y8DkUHM9iaOLP9fk5wTIZkS/trXyZpFG6Ul/JohQMDGm8j9PIsZ+P2Qs+J7ia4jc
B9NWwRx+rnSGvEJaNwXpgFmXxMloQRZUPomFzg4tXOQJN5f0brPLrMjFoYFoWkBP
KuKlMW+sEEkjmwar7/W8UXfr4EE1HAciaAePqCsO4UO6ppmetyo4tb+LuCRcBJzr
juE8Mmwfy2NcVEcgk/mZGJKdkzoNsMWOp21W2sFCiZDF/qUgyzs=
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:26:23 2026 by rpki-client