Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40e964c-8013-36a3-a98f-f658b45a3b36.roa
File:                     c40e964c-8013-36a3-a98f-f658b45a3b36.roa (raw, json)
Hash identifier:          jKB55xYRoCBjtyLIpKeJsLxJF+HGl9T3eox0v4uLmN4=
Subject key identifier:   77:24:18:BE:C8:33:E0:45:5C:D7:0E:80:DB:C8:4E:91:BB:B4:F0:30
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584FA5931FF6978EDFD7656F0B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40e964c-8013-36a3-a98f-f658b45a3b36.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     19157
IP address blocks:        23.85.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:1f:f6:97:8e:df:d7:65:6f:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=a2d3af92-0464-45ab-8515-ad5cabee767a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:71:a0:80:84:1c:3c:ef:33:ef:8b:4a:e6:
                    09:fb:4b:af:bc:c9:71:4b:1a:5d:fb:3f:1b:39:6c:
                    6d:c7:e0:a3:3e:6e:ee:1a:56:dd:a3:0c:ae:24:4c:
                    db:eb:1a:e1:ef:35:4d:b3:17:b8:af:bc:44:d8:23:
                    11:8c:a0:cd:00:6d:db:70:fa:a7:0c:b1:f9:88:29:
                    51:76:82:47:13:4c:72:63:0d:ca:cb:dc:28:b3:3c:
                    a0:ca:72:1b:09:8b:d6:96:83:2c:be:c6:70:b0:97:
                    6f:a2:1b:0f:11:6d:bb:3c:df:f8:b7:bb:99:b1:3f:
                    8b:20:cc:e3:43:f4:6a:13:ee:dc:7a:0c:10:69:b4:
                    2b:4c:91:1a:11:56:5f:bf:1f:d2:bd:8e:d2:f7:22:
                    9a:1f:e2:53:f9:4d:5c:63:e1:23:a2:2b:bc:77:f6:
                    8a:2f:de:af:ea:38:6a:7b:18:fe:e0:a6:c2:f4:82:
                    d6:c8:6d:b9:ff:8a:1c:b3:18:f2:80:58:e2:6e:2b:
                    51:d3:d9:e7:49:ed:a8:f1:eb:11:e0:84:dc:ef:b2:
                    be:3f:82:3f:09:7c:c0:89:eb:88:ab:3f:b3:74:69:
                    57:f2:e9:de:fb:19:90:bb:1a:3e:58:4d:0e:2a:11:
                    53:14:57:30:c0:3e:f4:88:83:21:bb:ba:ec:98:9d:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:24:18:BE:C8:33:E0:45:5C:D7:0E:80:DB:C8:4E:91:BB:B4:F0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40e964c-8013-36a3-a98f-f658b45a3b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.85.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6c:d3:4c:3f:e5:06:84:55:e4:57:87:4e:0f:a5:3a:03:fd:
         b8:c3:cd:61:4d:c6:8b:2a:ab:b9:79:50:6d:e2:6f:88:98:54:
         eb:6d:05:49:cc:4d:0f:42:c2:88:b7:7c:eb:40:66:47:b0:96:
         f0:8b:47:34:e6:07:0f:17:4c:9b:6c:6b:ae:61:fc:85:69:fb:
         f0:8b:c1:6f:a5:b7:9c:11:30:28:64:95:fd:5e:02:a2:a2:06:
         b9:51:b7:11:7e:86:d9:cc:5a:9e:7c:08:e6:5b:ee:2b:72:1f:
         2d:8c:fc:cc:28:01:2d:ba:2c:32:68:07:19:a8:a7:b3:de:cb:
         3b:bb:b2:fe:21:57:37:c4:c8:50:ef:d1:f4:8f:96:5d:44:8d:
         c2:e1:fb:81:aa:66:2e:95:34:44:46:09:bf:34:06:ff:58:e5:
         6b:fc:5c:e8:4c:3f:3c:44:51:76:0a:58:df:67:3f:a9:cc:0c:
         30:58:59:eb:33:6b:1c:39:f6:f9:46:17:ad:b1:0d:ca:af:dd:
         d0:73:a0:4c:ed:1b:44:ce:b6:75:d6:86:ee:5f:af:bc:73:c4:
         5d:e3:4c:b6:43:3a:49:97:4b:d2:22:e6:51:f0:12:f3:b8:a3:
         0b:74:fb:99:fa:fd:b3:70:e3:ae:d8:7f:a0:e1:e4:2d:8d:f2:
         54:56:1e:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lkx/2l47f12VvCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk
YTJkM2FmOTItMDQ2NC00NWFiLTg1MTUtYWQ1Y2FiZWU3NjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolxxoICEHDzvM++LSuYJ+0uvvMlxSxpd+z8b
OWxtx+CjPm7uGlbdowyuJEzb6xrh7zVNsxe4r7xE2CMRjKDNAG3bcPqnDLH5iClR
doJHE0xyYw3Ky9woszygynIbCYvWloMsvsZwsJdvohsPEW27PN/4t7uZsT+LIMzj
Q/RqE+7cegwQabQrTJEaEVZfvx/SvY7S9yKaH+JT+U1cY+Ejoiu8d/aKL96v6jhq
exj+4KbC9ILWyG25/4ocsxjygFjibitR09nnSe2o8esR4ITc77K+P4I/CXzAieuI
qz+zdGlX8une+xmQuxo+WE0OKhFTFFcwwD70iIMhu7rsmJ2ZBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHckGL7IM+BFXNcOgNvITpG7tPAwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzQwZTk2NGMtODAxMy0z
NmEzLWE5OGYtZjY1OGI0NWEzYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1X4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVs00w/5QaEVeRXh04PpToD/bjDzWFNxosqq7l5UG3ib4iYVOttBUnM
TQ9Cwoi3fOtAZkewlvCLRzTmBw8XTJtsa65h/IVp+/CLwW+lt5wRMChklf1eAqKi
BrlRtxF+htnMWp58COZb7ityHy2M/MwoAS26LDJoBxmop7Peyzu7sv4hVzfEyFDv
0fSPll1EjcLh+4GqZi6VNERGCb80Bv9Y5Wv8XOhMPzxEUXYKWN9nP6nMDDBYWesz
axw59vlGF62xDcqv3dBzoEztG0TOtnXWhu5fr7xzxF3jTLZDOkmXS9Ii5lHwEvO4
owt0+5n6/bNw467Yf6Dh5C2N8lRWHjc=
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:31:45 2026 by rpki-client