Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
File:                     8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa (raw, json)
Hash identifier:          DpHG7JAmkKezqsYPt4NSCON8OnQF6JCclP71CKq48Tc=
Subject key identifier:   5C:37:A4:BC:A0:47:F8:E9:BC:C0:AA:07:ED:E2:16:AE:A9:7C:8E:46
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584E2D9F22A84E309A94E2F118C0
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     18780
IP address blocks:        23.182.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:22:a8:4e:30:9a:94:e2:f1:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=687368c2-71bf-4446-8740-c804395f946f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:22:34:53:a1:21:24:5b:1e:ec:67:e8:e1:
                    ee:cb:46:1d:64:e3:d9:3f:40:b0:17:10:db:a1:2e:
                    e6:f6:2a:74:9c:3f:be:30:7a:ad:d8:c2:8d:f9:a7:
                    3c:14:14:69:c5:8f:f5:8c:55:cd:2a:bf:dd:d8:fe:
                    d1:cb:2f:ea:df:cf:cb:b6:5d:e7:60:07:bc:06:9c:
                    68:8c:dc:50:db:f7:2c:7c:21:fe:48:73:26:59:48:
                    ce:ce:1e:e0:5b:c9:19:3c:4f:b9:16:07:5c:93:ce:
                    99:b1:42:48:7f:52:14:ff:a2:fc:68:f6:3e:0a:29:
                    1e:f7:1a:60:ed:10:23:fd:a5:42:02:f2:c8:a5:1e:
                    28:32:30:56:3f:25:c4:74:45:77:9d:12:94:4f:a8:
                    7c:14:a9:ee:d0:39:f5:f6:3a:ba:a8:9e:0b:3f:ee:
                    a1:71:fe:8d:b1:49:40:f0:3a:1d:dd:05:b9:4c:35:
                    33:43:4c:f0:d5:4c:c7:3a:af:1f:2e:c4:78:de:42:
                    b0:80:5f:c2:10:e4:e1:9d:66:8b:fc:44:56:2a:f0:
                    5a:87:2d:e8:cd:72:19:f9:ed:4c:f5:15:4b:b8:fd:
                    d3:f3:05:07:1d:d7:09:4d:02:f8:42:4b:05:4b:99:
                    22:f6:e2:85:4d:71:1f:8e:2d:5c:4b:ff:0a:74:d4:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:37:A4:BC:A0:47:F8:E9:BC:C0:AA:07:ED:E2:16:AE:A9:7C:8E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e4:8c:24:e0:a9:02:71:79:e8:07:24:57:a5:97:38:75:a0:
         13:4f:df:63:d7:94:09:2f:f1:5a:1e:9a:15:33:af:71:0a:6f:
         93:ae:ac:28:c3:e1:26:6f:f1:aa:c1:31:dc:85:5f:f6:8a:cd:
         e8:bc:42:c7:3c:76:22:01:74:83:24:8c:11:64:32:a7:3b:db:
         ef:08:49:00:e0:d9:2a:0d:cb:9d:5d:7a:e4:83:9c:5a:70:ea:
         5c:8f:26:be:00:01:83:53:aa:1c:62:2a:12:90:a0:96:79:24:
         e9:85:03:34:50:38:40:2e:3b:00:b7:b6:02:06:6f:d3:48:90:
         6c:eb:0c:68:ff:a8:9a:c5:16:2a:a7:e9:46:4c:a4:aa:07:02:
         f7:4b:0d:60:b7:9f:03:21:de:b5:7b:fe:1e:3a:58:6a:6e:33:
         3e:61:e7:1a:ac:2a:a3:94:d0:f2:ed:92:49:58:44:77:81:fc:
         24:92:a8:02:41:cd:ed:31:36:a5:25:63:8d:10:4b:04:cd:2b:
         38:96:d8:85:b0:7b:d9:7a:33:a6:41:fc:43:18:99:4b:1b:27:
         9c:3f:2b:4e:ab:38:63:1d:e0:4d:80:9b:76:ef:d4:90:41:d4:
         e0:fd:30:70:9b:f9:d6:8b:b3:bf:23:46:41:86:70:b0:73:04:
         f8:53:62:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyKoTjCalOLxGMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw
YzhiMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
Njg3MzY4YzItNzFiZi00NDQ2LTg3NDAtYzgwNDM5NWY5NDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDciNFOhISRbHuxn6OHuy0YdZOPZP0CwFxDb
oS7m9ip0nD++MHqt2MKN+ac8FBRpxY/1jFXNKr/d2P7Ryy/q38/Ltl3nYAe8Bpxo
jNxQ2/csfCH+SHMmWUjOzh7gW8kZPE+5Fgdck86ZsUJIf1IU/6L8aPY+Cike9xpg
7RAj/aVCAvLIpR4oMjBWPyXEdEV3nRKUT6h8FKnu0Dn19jq6qJ4LP+6hcf6NsUlA
8Dod3QW5TDUzQ0zw1UzHOq8fLsR43kKwgF/CEOThnWaL/ERWKvBahy3ozXIZ+e1M
9RVLuP3T8wUHHdcJTQL4QksFS5ki9uKFTXEfji1cS/8KdNTchwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFw3pLygR/jpvMCqB+3iFq6pfI5GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz
ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvOGVmMTc3ZDQtZjQxMS0z
ZjlmLTg3NmItNzhkMWY2ZTUwMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk
NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi
MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0
NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7kjCTgqQJxeegHJFellzh1oBNP32PXlAkv8VoemhUzr3EKb5OurCjD
4SZv8arBMdyFX/aKzei8Qsc8diIBdIMkjBFkMqc72+8ISQDg2SoNy51deuSDnFpw
6lyPJr4AAYNTqhxiKhKQoJZ5JOmFAzRQOEAuOwC3tgIGb9NIkGzrDGj/qJrFFiqn
6UZMpKoHAvdLDWC3nwMh3rV7/h46WGpuMz5h5xqsKqOU0PLtkklYRHeB/CSSqAJB
ze0xNqUlY40QSwTNKziW2IWwe9l6M6ZB/EMYmUsbJ5w/K06rOGMd4E2Am3bv1JBB
1OD9MHCb+daLs78jRkGGcLBzBPhTYsQ=
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:35:33 2026 by rpki-client