Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/ae9aeab3-0315-38e7-889b-dd007d52b793.roa
File:                     ae9aeab3-0315-38e7-889b-dd007d52b793.roa (raw, json)
Hash identifier:          GrYJrsxjjNpe4xYOGxH2bM87tOlL3fcCBO7AYUdXMts=
Subject key identifier:   0A:77:5B:8A:AB:26:24:8E:26:9A:45:57:B6:4D:5A:56:F5:DC:A4:38
Certificate issuer:       /CN=32d328f4-70f7-4c81-ae12-d79329b5bc4c
Certificate serial:       010D0C9F4328584EE47EBE83365464802A480480
Authority key identifier: 44:16:EF:DD:E5:FC:7D:39:0C:B9:39:49:EF:5E:68:89:6C:B1:47:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/ae9aeab3-0315-38e7-889b-dd007d52b793.roa
Signing time:             Wed 19 Aug 2026 21:08:11 +0000
ROA not before:           Wed 19 Aug 2026 21:08:11 +0000
ROA not after:            Tue 17 Nov 2026 22:08:11 +0000
asID:                     15830
IP address blocks:        23.160.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/32d328f4-70f7-4c81-ae12-d79329b5bc4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/32d328f4-70f7-4c81-ae12-d79329b5bc4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:7e:be:83:36:54:64:80:2a:48:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d328f4-70f7-4c81-ae12-d79329b5bc4c
        Validity
            Not Before: Aug 19 21:08:11 2026 GMT
            Not After : Nov 17 22:08:11 2026 GMT
        Subject: CN=5ac02004-d4a2-4158-80aa-011ae0be3797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d8:a8:ea:7f:50:e6:da:c1:a9:a5:11:01:38:
                    8a:40:9a:f0:41:df:5b:f7:b3:ce:87:f4:1d:ed:35:
                    fe:4c:64:c0:8a:b2:51:05:7a:ef:b7:c6:00:fa:a8:
                    d6:61:18:b5:5a:fa:17:df:bf:16:3f:cb:53:49:56:
                    6b:6e:a2:0c:58:5f:e4:7e:42:8e:47:b7:1f:f4:be:
                    24:b0:0e:f0:7d:eb:3f:80:91:ef:cb:13:70:c4:32:
                    c0:6f:6f:42:3c:a0:55:c7:ce:eb:ca:51:08:db:74:
                    ec:20:ce:07:01:6e:af:55:83:82:ad:0a:89:e4:b1:
                    54:0d:c1:cf:e4:e0:cb:31:8f:14:03:cf:25:15:60:
                    c1:47:39:30:85:bb:3f:dd:fd:c4:7d:4a:86:71:ee:
                    1b:dd:40:b5:f7:67:be:63:a1:9e:9d:05:ed:13:b6:
                    fd:95:ec:d7:ef:b8:93:ee:c5:3e:45:8d:b0:c9:eb:
                    30:75:68:1d:ee:8a:95:3f:fe:ad:1f:b5:d4:d6:9c:
                    64:18:f6:c5:a3:81:7e:88:4d:01:b6:70:3b:88:3c:
                    31:6f:8c:d9:64:85:1d:2a:46:00:1c:15:cb:b8:39:
                    0f:ff:81:c3:cb:7c:b2:8e:17:3c:a9:e9:44:b4:1e:
                    d8:df:c9:66:d9:1c:e3:4f:06:79:17:e2:3a:be:69:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:77:5B:8A:AB:26:24:8E:26:9A:45:57:B6:4D:5A:56:F5:DC:A4:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/ae9aeab3-0315-38e7-889b-dd007d52b793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/32d328f4-70f7-4c81-ae12-d79329b5bc4c.crl

            X509v3 Authority Key Identifier:
                keyid:44:16:EF:DD:E5:FC:7D:39:0C:B9:39:49:EF:5E:68:89:6C:B1:47:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:c9:82:03:32:68:f0:35:e5:38:22:e8:99:54:3d:4a:f2:
         35:e4:e7:ab:60:29:6a:1d:ef:c2:d3:cf:95:57:d1:22:85:6a:
         3d:1f:de:5a:04:3c:63:fb:2d:b7:8f:69:61:fd:d4:f7:c9:fb:
         f1:27:93:1c:63:5f:f5:f5:f5:f4:b8:aa:8a:69:78:82:7c:63:
         73:2c:cf:fb:dd:75:be:f9:3d:ee:38:d5:27:44:9a:5c:b8:ac:
         34:3a:5a:00:c2:f0:07:e0:e2:ff:8b:69:22:1f:d4:cb:8a:0a:
         7d:d2:a9:5f:99:0b:3e:ef:a9:26:f4:e6:30:7b:de:1a:fc:bb:
         d2:99:f5:78:16:0d:c2:00:ad:c6:49:a1:0a:eb:3a:66:d0:eb:
         74:1d:e9:ce:db:ba:b8:c9:1f:08:01:a4:f6:cb:bc:df:3f:2a:
         9b:98:21:84:f6:46:4d:fe:f7:2b:74:09:63:37:89:fe:b1:8b:
         e6:f2:ba:bf:4a:ba:70:4a:ff:ca:76:64:cb:a0:49:ad:9f:a0:
         e3:12:b5:d3:cc:b8:96:aa:b4:ea:d6:28:9f:9e:b9:86:00:b0:
         9d:5e:11:ba:2e:32:d2:a7:59:13:b9:ee:3c:af:9b:9a:a1:bb:
         7e:58:3f:d2:d4:9b:8b:36:9b:6d:4a:03:d2:7c:87:59:9c:7d:
         40:78:41:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kfr6DNlRkgCpIBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJkMzI4ZjQtNzBmNy00YzgxLWFlMTItZDc5MzI5YjVi
YzRjMB4XDTI2MDgxOTIxMDgxMVoXDTI2MTExNzIyMDgxMVowLzEtMCsGA1UEAxMk
NWFjMDIwMDQtZDRhMi00MTU4LTgwYWEtMDExYWUwYmUzNzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dio6n9Q5trBqaURATiKQJrwQd9b97POh/Qd
7TX+TGTAirJRBXrvt8YA+qjWYRi1WvoX378WP8tTSVZrbqIMWF/kfkKOR7cf9L4k
sA7wfes/gJHvyxNwxDLAb29CPKBVx87rylEI23TsIM4HAW6vVYOCrQqJ5LFUDcHP
5ODLMY8UA88lFWDBRzkwhbs/3f3EfUqGce4b3UC192e+Y6GenQXtE7b9lezX77iT
7sU+RY2wyeswdWgd7oqVP/6tH7XU1pxkGPbFo4F+iE0BtnA7iDwxb4zZZIUdKkYA
HBXLuDkP/4HDy3yyjhc8qelEtB7Y38lm2RzjTwZ5F+I6vmm9gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAp3W4qrJiSOJppFV7ZNWlb13KQ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMmQz
MjhmNC03MGY3LTRjODEtYWUxMi1kNzkzMjliNWJjNGMvYWU5YWVhYjMtMDMxNS0z
OGU3LTg4OWItZGQwMDdkNTJiNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzJkMzI4ZjQtNzBmNy00YzgxLWFl
MTItZDc5MzI5YjViYzRjLzMyZDMyOGY0LTcwZjctNGM4MS1hZTEyLWQ3OTMyOWI1
YmM0Yy5jcmwwHwYDVR0jBBgwFoAURBbv3eX8fTkMuTlJ715oiWyxR8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMmQzMjhmNC03MGY3LTRjODEtYWUxMi1kNzkz
MjliNWJjNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6DEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhOyYIDMmjwNeU4IuiZVD1K8jXk56tgKWod78LTz5VX0SKFaj0f3loE
PGP7LbePaWH91PfJ+/EnkxxjX/X19fS4qoppeIJ8Y3Msz/vddb75Pe441SdEmly4
rDQ6WgDC8Afg4v+LaSIf1MuKCn3SqV+ZCz7vqSb05jB73hr8u9KZ9XgWDcIArcZJ
oQrrOmbQ63Qd6c7burjJHwgBpPbLvN8/KpuYIYT2Rk3+9yt0CWM3if6xi+byur9K
unBK/8p2ZMugSa2foOMStdPMuJaqtOrWKJ+euYYAsJ1eEbouMtKnWRO57jyvm5qh
u35YP9LUm4s2m21KA9J8h1mcfUB4Qb4=
-----END CERTIFICATE-----
Generated at Mon Aug 31 10:49:39 2026 by rpki-client