Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/912e976d-53e4-3464-ad3b-37b6629a100e.roa
File:                     912e976d-53e4-3464-ad3b-37b6629a100e.roa (raw, json)
Hash identifier:          vQob4A8e+EucOrDtWtryuSywPf0u6oPrE80PeaZ0Jgk=
Subject key identifier:   8C:C5:DC:CC:8D:AC:C8:27:83:10:1F:14:C7:31:48:98:23:6B:DC:B2
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584EA787F41EDF77E604CD077880
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/912e976d-53e4-3464-ad3b-37b6629a100e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400619
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f4:1e:df:77:e6:04:cd:07:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=476ae510-c1e5-4256-993e-064b1aa071f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7e:2f:69:f1:ce:f8:0b:82:a0:63:b3:96:31:
                    61:35:7f:cd:ea:34:4b:55:20:05:d5:29:a9:68:30:
                    6b:cc:03:c6:66:16:3b:2f:d2:3d:0f:3d:1a:2c:c5:
                    21:79:f3:57:f3:da:07:83:32:21:a0:5e:28:35:c6:
                    30:68:36:2a:9d:09:44:e6:88:b6:7a:12:99:f6:51:
                    cf:53:1b:32:7d:23:25:7a:6e:49:fe:ba:2f:ef:bb:
                    8e:f3:8a:12:42:46:48:61:19:b2:2d:9f:6d:87:ed:
                    b2:48:00:39:06:95:d9:d2:d3:c9:fb:54:6b:3a:7e:
                    0e:09:3b:d7:9b:72:2c:5f:d0:60:3a:5f:31:15:0c:
                    7d:98:44:7f:ef:0f:62:e0:fa:4d:51:be:8b:b6:c1:
                    f6:b4:93:51:8a:1c:08:3b:ad:d7:ac:9b:01:2f:70:
                    92:3d:52:38:b6:9d:b7:ad:41:cd:9d:60:e3:39:57:
                    67:db:ec:4a:20:fc:7c:34:e9:d6:da:f5:17:e6:fe:
                    68:02:35:11:c0:82:a2:1a:69:68:2a:d0:93:98:e8:
                    ad:81:57:9f:a2:4b:f0:4e:de:e4:01:79:65:a9:f4:
                    01:0c:7d:92:7a:9c:64:f2:93:8c:fe:f1:02:9b:0f:
                    71:5d:b0:79:a1:0b:8e:81:0f:12:37:b0:bf:db:30:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C5:DC:CC:8D:AC:C8:27:83:10:1F:14:C7:31:48:98:23:6B:DC:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/912e976d-53e4-3464-ad3b-37b6629a100e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:2b:0a:11:73:4c:fc:fc:3d:8e:64:d8:df:a8:c9:85:0e:
         63:83:2e:2b:f9:42:a8:2d:ef:d9:d6:a6:a6:fd:81:42:fb:66:
         68:d5:a4:11:7d:51:a1:88:68:55:17:f9:58:78:d5:3a:23:13:
         d9:99:d4:90:21:a3:15:3f:a1:38:bf:73:69:aa:61:45:40:33:
         bb:3e:d6:7c:f9:be:57:81:11:4e:c9:85:6a:a8:f4:dd:93:86:
         9f:eb:f6:bd:46:31:64:3e:66:e0:92:59:0a:f2:55:3d:de:09:
         c9:7b:bc:51:82:bf:cc:39:0e:95:1b:0c:b8:26:5f:77:c2:e0:
         d9:97:80:90:56:b5:d4:87:3b:18:15:35:ac:3d:29:73:4b:0d:
         b6:33:ee:70:1c:6a:7c:82:85:e4:02:8f:11:21:e3:53:32:5e:
         16:60:6f:28:32:97:91:a6:34:41:a5:cf:e5:30:7f:cd:20:b5:
         99:b1:5e:42:09:e4:8e:1c:35:e4:97:ff:ed:b0:e1:b8:4b:f7:
         e8:21:af:79:ea:fc:5b:d0:c0:c0:98:fe:c5:92:06:b0:d2:c5:
         bf:fd:85:e4:15:b6:4b:3b:a2:00:ab:f5:d9:0a:c2:9e:b8:f8:
         3a:fb:f5:61:ea:9c:7c:73:28:76:f1:87:f5:c7:7f:b4:72:61:
         d1:62:61:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/Qe33fmBM0HeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj
ZGIxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDc2YWU1MTAtYzFlNS00MjU2LTk5M2UtMDY0YjFhYTA3MWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X4vafHO+AuCoGOzljFhNX/N6jRLVSAF1Smp
aDBrzAPGZhY7L9I9Dz0aLMUhefNX89oHgzIhoF4oNcYwaDYqnQlE5oi2ehKZ9lHP
UxsyfSMlem5J/rov77uO84oSQkZIYRmyLZ9th+2ySAA5BpXZ0tPJ+1RrOn4OCTvX
m3IsX9BgOl8xFQx9mER/7w9i4PpNUb6LtsH2tJNRihwIO63XrJsBL3CSPVI4tp23
rUHNnWDjOVdn2+xKIPx8NOnW2vUX5v5oAjURwIKiGmloKtCTmOitgVefokvwTt7k
AXllqfQBDH2Sepxk8pOM/vECmw9xXbB5oQuOgQ8SN7C/2zDHgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzF3MyNrMgngxAfFMcxSJgja9yyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj
NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvOTEyZTk3NmQtNTNlNC0z
NDY0LWFkM2ItMzdiNjYyOWExMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0
M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx
Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5
MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4BKwoRc0z8/D2OZNjfqMmFDmODLiv5Qqgt79nWpqb9gUL7ZmjVpBF9
UaGIaFUX+Vh41TojE9mZ1JAhoxU/oTi/c2mqYUVAM7s+1nz5vleBEU7JhWqo9N2T
hp/r9r1GMWQ+ZuCSWQryVT3eCcl7vFGCv8w5DpUbDLgmX3fC4NmXgJBWtdSHOxgV
Naw9KXNLDbYz7nAcanyCheQCjxEh41MyXhZgbygyl5GmNEGlz+Uwf80gtZmxXkIJ
5I4cNeSX/+2w4bhL9+ghr3nq/FvQwMCY/sWSBrDSxb/9heQVtks7ogCr9dkKwp64
+Dr79WHqnHxzKHbxh/XHf7RyYdFiYVA=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:54 2026 by rpki-client