Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/d3720f2f-4a12-3a26-bccd-49e0c40cd88f.roa
File:                     d3720f2f-4a12-3a26-bccd-49e0c40cd88f.roa (raw, json)
Hash identifier:          o2MtwQa5YNcfacDoFK7B6dzRqdDTa88nciEdHvShrgs=
Subject key identifier:   0E:1F:1A:3A:AB:EC:A4:D8:AF:76:B8:64:BA:E1:C8:13:A4:11:55:59
Certificate issuer:       /CN=ae9bcb97-e23a-4c94-877e-e9c76c2668bb
Certificate serial:       010D0C9F4328584F576826AA202AF60ADBC15100
Authority key identifier: 68:32:D6:DB:92:21:8A:BB:AF:B2:1D:B8:8C:59:AF:EA:6F:47:4E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/d3720f2f-4a12-3a26-bccd-49e0c40cd88f.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     152179
IP address blocks:        23.146.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:26:aa:20:2a:f6:0a:db:c1:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae9bcb97-e23a-4c94-877e-e9c76c2668bb
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=4dbb9b52-4d45-4c78-86f9-687215ed6542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:f7:ca:ea:9a:60:d2:f5:02:c7:40:d3:9e:
                    30:62:ea:27:cc:7e:9f:ce:36:7d:cc:c1:df:99:2f:
                    7a:80:ae:4d:ca:f0:84:88:46:59:61:e5:26:91:52:
                    0c:bf:80:72:25:6c:3d:35:44:02:75:6f:da:de:de:
                    2d:9d:80:92:86:6d:b2:26:fb:fe:cd:08:c8:4a:c0:
                    3b:d3:1b:f3:53:f5:c0:8b:f2:5e:f7:6d:ec:54:7e:
                    ea:d3:77:03:fa:20:55:8f:60:42:e2:fd:58:4f:62:
                    7b:09:02:a9:ee:32:21:97:28:cf:be:af:2a:78:bb:
                    00:c4:14:1c:8f:f7:53:ac:75:96:1e:c9:fe:4d:4b:
                    4e:61:f6:42:b7:fe:ec:9d:c5:d5:1c:3f:f3:21:7f:
                    b1:2b:b0:3b:ce:db:45:a4:a1:89:18:d2:bf:64:fc:
                    e3:6b:a6:17:32:d0:8a:2a:ed:31:49:dc:05:b7:dd:
                    52:0c:18:81:4d:8a:2e:4b:63:37:81:17:4a:de:5a:
                    82:31:2d:21:f1:b8:8d:31:2e:86:a7:1d:9b:49:80:
                    28:f1:85:ac:36:47:ed:6d:70:34:9d:38:29:43:59:
                    90:cf:35:91:b4:5f:a7:cf:6e:08:62:d3:21:40:7d:
                    dc:43:9d:f6:87:c7:83:2f:96:9c:b1:e6:3a:3a:3a:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1F:1A:3A:AB:EC:A4:D8:AF:76:B8:64:BA:E1:C8:13:A4:11:55:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/d3720f2f-4a12-3a26-bccd-49e0c40cd88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.crl

            X509v3 Authority Key Identifier:
                keyid:68:32:D6:DB:92:21:8A:BB:AF:B2:1D:B8:8C:59:AF:EA:6F:47:4E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae9bcb97-e23a-4c94-877e-e9c76c2668bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:d6:98:10:0a:5f:65:81:e4:55:a2:e5:1c:97:8b:f6:01:
         3b:f9:b0:c4:32:47:0e:03:21:70:d4:06:a0:68:00:a5:87:fd:
         c0:d9:79:3c:de:f0:e6:62:98:15:97:20:ae:9d:11:79:fa:a8:
         9c:65:12:fb:8a:26:1c:bf:e8:13:4a:ea:ca:9c:6f:d1:fd:fb:
         0c:5c:b7:0c:24:ab:39:d4:04:54:b6:53:af:fe:54:14:5d:db:
         0c:9f:4f:7c:35:a9:47:62:67:17:a8:a7:4b:e9:b5:36:c2:5e:
         1b:52:51:d8:31:bc:7c:05:2f:6e:7d:34:20:a2:84:d9:2b:67:
         5b:1a:81:0a:f4:9f:d7:c8:31:dd:d8:6e:c5:bb:a3:1d:54:91:
         8b:cc:9a:f5:e1:1e:05:15:f1:f0:a8:d4:06:e8:97:1c:49:9d:
         e7:dc:d9:ef:c9:a6:ac:1c:a0:7c:69:1a:25:7e:64:5a:86:d0:
         97:79:e6:e1:b0:8a:61:3d:62:36:95:b6:63:9a:26:c2:d3:42:
         0e:c9:11:ab:71:24:22:61:86:a2:62:17:10:a0:eb:2d:77:66:
         2d:e8:a4:ca:aa:2f:1d:27:b3:a3:3a:35:ac:07:2d:6a:ee:9d:
         14:56:eb:c2:b3:63:a8:40:87:03:27:94:76:d1:22:79:c7:57:
         1b:86:0c:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaCaqICr2CtvBUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU5YmNiOTctZTIzYS00Yzk0LTg3N2UtZTljNzZjMjY2
OGJiMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NGRiYjliNTItNGQ0NS00Yzc4LTg2ZjktNjg3MjE1ZWQ2NTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6/3yuqaYNL1AsdA054wYuonzH6fzjZ9zMHf
mS96gK5NyvCEiEZZYeUmkVIMv4ByJWw9NUQCdW/a3t4tnYCShm2yJvv+zQjISsA7
0xvzU/XAi/Je923sVH7q03cD+iBVj2BC4v1YT2J7CQKp7jIhlyjPvq8qeLsAxBQc
j/dTrHWWHsn+TUtOYfZCt/7sncXVHD/zIX+xK7A7zttFpKGJGNK/ZPzja6YXMtCK
Ku0xSdwFt91SDBiBTYouS2M3gRdK3lqCMS0h8biNMS6Gpx2bSYAo8YWsNkftbXA0
nTgpQ1mQzzWRtF+nz24IYtMhQH3cQ532h8eDL5acseY6OjqoHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4fGjqr7KTYr3a4ZLrhyBOkEVVZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZTli
Y2I5Ny1lMjNhLTRjOTQtODc3ZS1lOWM3NmMyNjY4YmIvZDM3MjBmMmYtNGExMi0z
YTI2LWJjY2QtNDllMGM0MGNkODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWU5YmNiOTctZTIzYS00Yzk0LTg3
N2UtZTljNzZjMjY2OGJiL2FlOWJjYjk3LWUyM2EtNGM5NC04NzdlLWU5Yzc2YzI2
NjhiYi5jcmwwHwYDVR0jBBgwFoAUaDLW25Ihiruvsh24jFmv6m9HTiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZTliY2I5Ny1lMjNhLTRjOTQtODc3ZS1lOWM3
NmMyNjY4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOn1pgQCl9lgeRVouUcl4v2ATv5sMQyRw4DIXDUBqBoAKWH/cDZeTze
8OZimBWXIK6dEXn6qJxlEvuKJhy/6BNK6sqcb9H9+wxctwwkqznUBFS2U6/+VBRd
2wyfT3w1qUdiZxeop0vptTbCXhtSUdgxvHwFL259NCCihNkrZ1sagQr0n9fIMd3Y
bsW7ox1UkYvMmvXhHgUV8fCo1AbolxxJnefc2e/JpqwcoHxpGiV+ZFqG0Jd55uGw
imE9YjaVtmOaJsLTQg7JEatxJCJhhqJiFxCg6y13Zi3opMqqLx0ns6M6NawHLWru
nRRW68KzY6hAhwMnlHbRInnHVxuGDLE=
-----END CERTIFICATE-----
Generated at Sat Oct 31 00:03:52 2026 by rpki-client