Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/8b23f6da-1bbf-3a9e-b430-0ffb40252e40.roa
File:                     8b23f6da-1bbf-3a9e-b430-0ffb40252e40.roa (raw, json)
Hash identifier:          mEyq2JufjHwzQP6urZr2NDvItbUMmftIZPKAPhLwBcA=
Subject key identifier:   03:3A:40:3F:6D:08:64:7B:B4:3F:C7:38:4C:A9:00:AD:10:97:D8:8E
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584F119CF671ECBB344A06607000
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/8b23f6da-1bbf-3a9e-b430-0ffb40252e40.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     8038
IP address blocks:        67.221.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:71:ec:bb:34:4a:06:60:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=6b051efa-ac11-4e25-985e-ba57b0544297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d4:8d:07:04:a8:69:5f:b4:61:52:41:b4:bb:
                    b3:3e:9e:e4:29:ba:64:2b:78:e4:3f:a6:ed:7b:dc:
                    ff:81:d4:fe:96:95:59:22:2a:40:0c:94:8e:f4:32:
                    90:31:c3:03:3f:f8:17:ed:85:c3:c0:63:0f:e9:41:
                    c3:fd:cb:77:5f:a1:2e:a7:db:9f:7d:cf:32:97:48:
                    25:aa:65:9f:a7:8a:64:79:d2:52:93:cc:96:08:71:
                    90:46:d2:d7:c0:aa:9c:92:13:fb:92:90:b0:76:74:
                    d8:39:d3:89:80:f4:fc:72:c2:2b:cc:76:07:13:dd:
                    45:e3:1f:68:0a:11:8f:cc:2e:75:ce:7e:d0:4d:7c:
                    e2:ab:0b:b6:35:08:be:67:6b:ec:28:55:ee:b5:df:
                    bc:e3:e7:e3:32:cd:ec:15:39:95:da:c2:7d:0e:1e:
                    75:d0:e6:30:c4:2a:be:82:0b:a0:4a:e9:20:a2:b7:
                    a1:a6:2a:90:68:3f:3b:aa:3d:d1:7a:d2:5f:52:11:
                    b8:12:66:b8:29:d4:21:f5:d3:33:4d:96:ef:98:19:
                    c6:30:59:11:77:d1:17:78:4f:36:ea:c5:80:dd:61:
                    ac:42:f1:d3:00:38:5c:ab:b7:90:3d:88:46:4b:2c:
                    e2:4e:f3:fb:cc:f6:3a:33:4e:67:14:28:3b:c3:a7:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3A:40:3F:6D:08:64:7B:B4:3F:C7:38:4C:A9:00:AD:10:97:D8:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/8b23f6da-1bbf-3a9e-b430-0ffb40252e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:c9:4d:23:32:39:92:e3:ba:ed:17:c7:93:6d:b8:3e:43:
         69:dd:45:89:24:83:f7:53:56:54:d6:9b:b0:5b:a9:b9:c4:ad:
         cb:5b:79:ff:c7:9c:01:4c:95:10:07:02:d0:41:e0:e0:7c:bf:
         63:5d:fd:08:2e:9c:91:3b:09:ae:89:39:dc:19:04:2e:c5:2d:
         41:60:65:aa:2e:8a:ce:5c:a9:07:9c:7b:70:a3:74:ae:fa:4e:
         04:ac:55:6d:04:89:d0:dd:29:e4:59:81:1f:05:5e:26:37:3e:
         a2:2d:b4:f1:88:fd:97:2e:46:30:56:2e:21:9e:93:ab:ed:6a:
         03:8a:af:0c:68:f5:4e:68:cd:73:eb:62:82:fa:04:3a:72:23:
         44:66:aa:b1:03:6b:56:31:fd:d1:2a:ee:a3:31:86:9d:fc:26:
         f4:e4:bd:22:93:3c:3e:4a:70:af:ad:05:f2:9f:87:1e:7e:ef:
         5e:63:ad:87:8a:46:52:38:96:c8:9f:ce:b5:07:16:17:db:e2:
         28:d9:67:8b:4d:9f:86:aa:4f:4f:2f:be:35:73:9d:7e:d9:6b:
         76:49:bc:57:55:e5:18:e8:26:9e:6e:d4:87:d7:9d:fc:4f:35:
         bb:c9:4b:d5:72:5b:d9:7f:04:75:65:54:a1:74:81:10:64:b0:
         7b:7c:c2:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPZx7Ls0SgZgcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQzMTNjYTctODFlNy00MmUyLWJmMzgtYzk2YmI4Mzll
Y2Y0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmIwNTFlZmEtYWMxMS00ZTI1LTk4NWUtYmE1N2IwNTQ0Mjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNSNBwSoaV+0YVJBtLuzPp7kKbpkK3jkP6bt
e9z/gdT+lpVZIipADJSO9DKQMcMDP/gX7YXDwGMP6UHD/ct3X6Eup9uffc8yl0gl
qmWfp4pkedJSk8yWCHGQRtLXwKqckhP7kpCwdnTYOdOJgPT8csIrzHYHE91F4x9o
ChGPzC51zn7QTXziqwu2NQi+Z2vsKFXutd+84+fjMs3sFTmV2sJ9Dh510OYwxCq+
ggugSukgorehpiqQaD87qj3RetJfUhG4Ema4KdQh9dMzTZbvmBnGMFkRd9EXeE82
6sWA3WGsQvHTADhcq7eQPYhGSyziTvP7zPY6M05nFCg7w6eNIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAM6QD9tCGR7tD/HOEypAK0Ql9iOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMx
M2NhNy04MWU3LTQyZTItYmYzOC1jOTZiYjgzOWVjZjQvOGIyM2Y2ZGEtMWJiZi0z
YTllLWI0MzAtMGZmYjQwMjUyZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWQzMTNjYTctODFlNy00MmUyLWJm
MzgtYzk2YmI4MzllY2Y0L2VkMzEzY2E3LTgxZTctNDJlMi1iZjM4LWM5NmJiODM5
ZWNmNC5jcmwwHwYDVR0jBBgwFoAUXZd2euVa2pUu/hSsnovu5Oj9kt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMxM2NhNy04MWU3LTQyZTItYmYzOC1jOTZi
YjgzOWVjZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ932MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxUyU0jMjmS47rtF8eTbbg+Q2ndRYkkg/dTVlTWm7BbqbnErctbef/H
nAFMlRAHAtBB4OB8v2Nd/QgunJE7Ca6JOdwZBC7FLUFgZaouis5cqQece3CjdK76
TgSsVW0EidDdKeRZgR8FXiY3PqIttPGI/ZcuRjBWLiGek6vtagOKrwxo9U5ozXPr
YoL6BDpyI0RmqrEDa1Yx/dEq7qMxhp38JvTkvSKTPD5KcK+tBfKfhx5+715jrYeK
RlI4lsifzrUHFhfb4ijZZ4tNn4aqT08vvjVznX7Za3ZJvFdV5RjoJp5u1IfXnfxP
NbvJS9VyW9l/BHVlVKF0gRBksHt8wjo=
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:50 2026 by rpki-client