Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
File:                     8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa (raw, json)
Hash identifier:          KrnupCmTtSqJSEqKFOhrTO5WevIeyRJx3vzFCKoTdgs=
Subject key identifier:   3C:6D:CD:AC:2F:7C:68:A4:0C:A6:9B:07:6D:F4:73:DF:E9:27:2B:68
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584ED001EFE399CABD1C4D763980
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     18780
IP address blocks:        23.182.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ef:e3:99:ca:bd:1c:4d:76:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=40e2c0ab-aae1-40e8-a994-adae93defabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:b7:32:65:3d:3c:8a:2d:97:ea:ce:ba:ed:
                    fd:6a:f0:35:9f:8b:48:fa:f0:83:e2:3a:d9:05:05:
                    ab:64:b9:63:fc:f6:97:56:a3:3b:ba:a6:b5:80:0d:
                    05:59:e8:e6:78:29:9f:13:4b:85:e8:d5:17:75:da:
                    f4:75:38:ff:24:2a:62:1f:d3:16:59:bb:c8:20:d1:
                    4e:5c:09:cb:d0:01:8c:4e:8f:73:7d:be:4f:6c:df:
                    50:ed:56:fc:56:9a:2c:07:01:42:d3:80:21:d8:44:
                    5e:36:06:d5:17:b2:4a:c0:a5:cf:c8:fe:23:b6:ea:
                    5a:37:c7:7f:b2:8f:d4:f4:a1:46:67:72:62:26:c4:
                    4e:81:74:7d:03:19:08:be:b8:c7:04:10:a2:bf:13:
                    73:44:42:dd:e8:30:f5:69:d3:a6:1e:41:49:15:87:
                    96:07:05:c0:a6:8b:d7:20:f3:ff:6e:ac:fa:45:25:
                    7e:f2:64:f0:7a:74:80:fe:85:d3:d2:53:04:84:69:
                    4a:4f:75:3a:af:ad:6d:e9:b3:d3:92:4a:48:5d:a7:
                    ec:47:93:54:e2:bf:f3:bc:de:92:65:5a:d0:90:91:
                    9c:64:de:df:8d:1b:a1:de:df:9b:4a:a2:6c:bb:e1:
                    2c:2b:8d:48:39:06:03:e4:e1:fb:1f:ca:d6:a5:36:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6D:CD:AC:2F:7C:68:A4:0C:A6:9B:07:6D:F4:73:DF:E9:27:2B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:97:6f:2a:4a:20:a5:16:b3:ff:65:0d:62:ae:7a:ee:59:d8:
         73:35:3d:79:ff:ba:b7:f7:c0:71:38:2b:5a:1c:d6:7f:6b:21:
         ce:35:db:ab:10:00:11:0e:f4:f2:6c:79:7e:27:15:11:1d:25:
         0b:ef:15:7c:48:45:52:ec:80:57:73:d5:3d:0c:69:86:9a:ab:
         08:1a:3f:44:ce:22:b8:43:7c:a8:2f:c4:fb:92:87:69:eb:ae:
         c0:09:7b:3f:3f:b7:f2:2c:e3:f3:c6:0c:9d:a6:a7:fe:9a:96:
         70:fb:4e:92:ec:d5:b0:6c:1a:a7:48:af:41:bf:fe:1d:25:9b:
         8d:27:e7:cb:08:e0:11:4c:68:f9:32:c2:5f:ad:26:eb:19:22:
         2e:d0:fd:b8:6a:67:3b:12:9b:7e:e8:26:5c:d8:7c:53:53:10:
         93:93:9c:94:8a:4c:9a:89:04:03:8a:bd:72:86:4a:d7:dd:55:
         78:5f:01:7b:1e:f0:0f:95:16:23:f8:46:9b:c4:77:e8:dc:3a:
         9f:ef:69:e9:8a:42:42:2b:0a:3e:75:42:a6:69:e8:f6:4d:bd:
         69:ff:a7:a3:3e:8c:20:7d:8b:1c:15:ee:50:32:8a:f4:33:d0:
         7e:e9:33:fa:32:e9:15:8d:ac:06:85:6f:d1:f6:e3:6f:b0:7c:
         d4:0c:1c:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAe/jmcq9HE12OYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw
YzhiMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NDBlMmMwYWItYWFlMS00MGU4LWE5OTQtYWRhZTkzZGVmYWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuge3MmU9PIotl+rOuu39avA1n4tI+vCD4jrZ
BQWrZLlj/PaXVqM7uqa1gA0FWejmeCmfE0uF6NUXddr0dTj/JCpiH9MWWbvIINFO
XAnL0AGMTo9zfb5PbN9Q7Vb8VposBwFC04Ah2EReNgbVF7JKwKXPyP4jtupaN8d/
so/U9KFGZ3JiJsROgXR9AxkIvrjHBBCivxNzRELd6DD1adOmHkFJFYeWBwXApovX
IPP/bqz6RSV+8mTwenSA/oXT0lMEhGlKT3U6r61t6bPTkkpIXafsR5NU4r/zvN6S
ZVrQkJGcZN7fjRuh3t+bSqJsu+EsK41IOQYD5OH7H8rWpTbtFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxtzawvfGikDKabB230c9/pJytoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz
ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvOGVmMTc3ZDQtZjQxMS0z
ZjlmLTg3NmItNzhkMWY2ZTUwMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk
NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi
MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0
NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmXbypKIKUWs/9lDWKueu5Z2HM1PXn/urf3wHE4K1oc1n9rIc4126sQ
ABEO9PJseX4nFREdJQvvFXxIRVLsgFdz1T0MaYaaqwgaP0TOIrhDfKgvxPuSh2nr
rsAJez8/t/Is4/PGDJ2mp/6alnD7TpLs1bBsGqdIr0G//h0lm40n58sI4BFMaPky
wl+tJusZIi7Q/bhqZzsSm37oJlzYfFNTEJOTnJSKTJqJBAOKvXKGStfdVXhfAXse
8A+VFiP4RpvEd+jcOp/vaemKQkIrCj51QqZp6PZNvWn/p6M+jCB9ixwV7lAyivQz
0H7pM/oy6RWNrAaFb9H242+wfNQMHA8=
-----END CERTIFICATE-----
Generated at Fri Aug 21 06:05:33 2026 by rpki-client