Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa
File:                     ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa (raw, json)
Hash identifier:          xZ7dzyG1xqz6NlSILBnuCCsbsL7B5UvBKmfSIsQYJoU=
Subject key identifier:   71:4D:47:85:D1:EC:78:12:76:54:DA:08:58:4C:2A:B8:06:33:12:BA
Certificate issuer:       /CN=fc69a390-9be0-4f05-abc1-c3b9b00edda2
Certificate serial:       010D0C9F4328584EDC9203AD3AD1055C36038200
Authority key identifier: 95:F6:E7:21:CF:42:50:B8:E2:CA:1D:09:29:1C:DE:AE:2D:32:B8:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     396877
IP address blocks:        23.183.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:03:ad:3a:d1:05:5c:36:03:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc69a390-9be0-4f05-abc1-c3b9b00edda2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=cab57541-47d9-4698-946c-d6bd67698859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:9f:e1:c2:c4:c3:44:c9:d0:5e:f7:5a:5c:
                    b4:0d:d9:1a:f2:5a:7b:7d:fa:50:fa:22:be:2c:58:
                    79:8f:96:83:b2:de:60:70:7a:79:7d:29:44:c3:5b:
                    1a:d2:de:59:61:46:0d:65:1d:80:41:50:c4:cf:df:
                    ca:3f:f4:29:7e:4d:cc:2a:40:2f:5f:ae:2d:4a:cb:
                    c1:e5:77:a3:0b:77:c6:81:b6:23:89:20:f1:8d:ba:
                    0d:24:e2:05:54:b8:77:e5:67:62:34:6a:a9:c7:09:
                    cc:a4:22:ea:c9:a0:c7:29:10:8a:73:b5:fb:8e:c3:
                    21:1d:18:ec:9a:4b:72:33:45:35:2d:b7:cd:bf:5c:
                    b7:38:c4:85:b7:0e:85:f5:ca:98:0b:b1:0c:31:dd:
                    da:03:93:d6:a0:94:52:63:5e:6d:2e:38:a1:09:7b:
                    07:6b:6a:0b:f0:9e:19:6b:3b:df:94:29:e6:ef:75:
                    2b:7e:ff:f9:1f:e4:06:5b:8a:25:12:6a:1e:e4:97:
                    8f:0a:32:99:de:a0:ea:72:ce:2d:d0:3f:20:65:90:
                    14:1c:f5:a3:da:27:f1:48:33:48:f0:a4:f7:76:9c:
                    fc:90:92:85:f8:4c:4b:e2:95:e8:09:87:6e:55:c4:
                    76:45:ba:f7:50:67:95:03:68:29:89:2d:13:71:c2:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4D:47:85:D1:EC:78:12:76:54:DA:08:58:4C:2A:B8:06:33:12:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.crl

            X509v3 Authority Key Identifier:
                keyid:95:F6:E7:21:CF:42:50:B8:E2:CA:1D:09:29:1C:DE:AE:2D:32:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:09:66:19:0c:b6:65:b1:93:42:3e:cf:33:55:62:27:40:cd:
         fd:5e:72:4e:61:1b:3c:09:55:86:53:9e:03:70:b2:cf:3f:26:
         67:36:2d:2d:f4:ca:bb:d6:3c:0f:ae:7e:b3:b8:1e:9c:d4:66:
         9f:ea:69:42:f2:8c:de:59:8a:7c:86:6f:3f:cf:a4:5b:11:f4:
         4c:b9:7b:22:03:53:df:9c:3a:79:4c:ea:28:09:54:a1:0a:27:
         45:34:c6:94:45:50:23:d6:dc:fe:e6:8d:72:1a:e2:d6:39:92:
         cf:0d:91:c0:33:8c:e7:84:ba:34:1b:aa:01:8c:92:cf:51:d8:
         8e:91:08:2e:7d:43:fb:e8:22:94:da:9e:b5:9a:5d:ce:fa:9a:
         53:53:24:2c:9b:19:ff:4a:04:47:1b:2a:fa:10:0b:09:89:36:
         0d:88:4f:9b:e2:5a:bf:8d:99:0a:da:f9:eb:e2:84:70:68:de:
         fa:85:af:e7:0d:c5:54:de:36:8b:0f:2b:be:d5:0e:8f:f3:a0:
         67:6b:35:55:b0:f7:c4:2c:0e:95:bb:11:f6:11:4e:e8:f5:50:
         15:f8:bb:f6:eb:4c:a8:25:8f:d9:a0:aa:4f:e7:0a:b4:f7:ab:
         e4:5e:f7:fd:a9:0e:42:75:4c:c5:78:09:f7:18:5b:89:1b:a4:
         55:c2:75:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckgOtOtEFXDYDggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM2OWEzOTAtOWJlMC00ZjA1LWFiYzEtYzNiOWIwMGVk
ZGEyMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
Y2FiNTc1NDEtNDdkOS00Njk4LTk0NmMtZDZiZDY3Njk4ODU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6qf4cLEw0TJ0F73Wly0Ddka8lp7ffpQ+iK+
LFh5j5aDst5gcHp5fSlEw1sa0t5ZYUYNZR2AQVDEz9/KP/Qpfk3MKkAvX64tSsvB
5XejC3fGgbYjiSDxjboNJOIFVLh35WdiNGqpxwnMpCLqyaDHKRCKc7X7jsMhHRjs
mktyM0U1LbfNv1y3OMSFtw6F9cqYC7EMMd3aA5PWoJRSY15tLjihCXsHa2oL8J4Z
azvflCnm73Urfv/5H+QGW4olEmoe5JePCjKZ3qDqcs4t0D8gZZAUHPWj2ifxSDNI
8KT3dpz8kJKF+ExL4pXoCYduVcR2Rbr3UGeVA2gpiS0TccKYtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFNR4XR7HgSdlTaCFhMKrgGMxK6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYzY5
YTM5MC05YmUwLTRmMDUtYWJjMS1jM2I5YjAwZWRkYTIvZWQzMjg3YTYtOWZiYy0z
MTY4LTlmMjAtYmIxNTA1YzNhODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmM2OWEzOTAtOWJlMC00ZjA1LWFi
YzEtYzNiOWIwMGVkZGEyL2ZjNjlhMzkwLTliZTAtNGYwNS1hYmMxLWMzYjliMDBl
ZGRhMi5jcmwwHwYDVR0jBBgwFoAUlfbnIc9CULjiyh0JKRzeri0yuHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mYzY5YTM5MC05YmUwLTRmMDUtYWJjMS1jM2I5
YjAwZWRkYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7cYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEJZhkMtmWxk0I+zzNVYidAzf1eck5hGzwJVYZTngNwss8/Jmc2LS30
yrvWPA+ufrO4HpzUZp/qaULyjN5ZinyGbz/PpFsR9Ey5eyIDU9+cOnlM6igJVKEK
J0U0xpRFUCPW3P7mjXIa4tY5ks8NkcAzjOeEujQbqgGMks9R2I6RCC59Q/voIpTa
nrWaXc76mlNTJCybGf9KBEcbKvoQCwmJNg2IT5viWr+NmQra+evihHBo3vqFr+cN
xVTeNosPK77VDo/zoGdrNVWw98QsDpW7EfYRTuj1UBX4u/brTKglj9mgqk/nCrT3
q+Re9/2pDkJ1TMV4CfcYW4kbpFXCdXw=
-----END CERTIFICATE-----
Generated at Sun Sep 13 13:25:04 2026 by rpki-client