Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/0c6d5801-0b89-3e82-a647-5a9119149950.roa
File:                     0c6d5801-0b89-3e82-a647-5a9119149950.roa (raw, json)
Hash identifier:          ltC00FnY3WLoGfZyTLN8+CN8UfOlje6OO1Ii/zHP7Zg=
Subject key identifier:   CD:34:65:E4:DD:E3:CA:9C:72:24:EE:01:01:8E:6A:CB:72:9A:79:13
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F4328584E815F8C5B254FB6864EEE4600
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/0c6d5801-0b89-3e82-a647-5a9119149950.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     395512
IP address blocks:        23.161.0.0/24 maxlen: 24
                          23.161.1.0/24 maxlen: 24
                          23.161.2.0/24 maxlen: 24
                          74.114.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8c:5b:25:4f:b6:86:4e:ee:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=772602cb-e076-42a5-b6a2-4d5dd592f220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:57:ba:de:44:1d:3b:2c:f6:a0:cf:73:3c:
                    ef:52:71:d1:84:8f:55:5e:cd:ea:37:41:17:83:5b:
                    39:9a:67:3c:b9:8c:ef:55:f9:8b:6b:3d:02:2c:06:
                    d3:9a:8d:f6:54:0f:f6:2e:4e:4d:06:2e:c2:1f:e4:
                    86:95:6c:52:58:4e:c7:dd:c0:f1:39:df:e0:71:d0:
                    c0:c5:c9:60:b9:4e:e5:1d:f4:f7:6f:31:51:fd:30:
                    66:dc:24:ff:30:db:b3:c1:39:a6:0d:f6:96:5e:c8:
                    55:bb:a7:49:e2:73:80:24:fa:64:0d:74:94:f1:f5:
                    ca:6f:99:7c:92:a0:1c:dd:ce:74:61:08:9d:0c:18:
                    62:d0:bf:65:8d:6b:b5:86:17:a9:83:7c:92:73:49:
                    7a:38:08:a5:a3:9b:c8:0e:83:83:6e:06:82:49:01:
                    3d:c1:b5:30:cc:ea:0c:a7:2b:ae:bb:b9:a0:7b:f9:
                    f5:f0:8d:bf:05:cb:1d:04:ff:59:d2:af:70:20:46:
                    00:10:f0:b6:99:1c:da:ca:e1:1a:a2:8c:0f:4e:f6:
                    54:94:35:0d:d0:37:36:d6:2f:5f:f9:44:d0:7c:b9:
                    85:2b:9a:ab:92:7f:ef:ef:f0:8b:20:ad:4b:fb:3c:
                    71:27:a0:ee:08:1e:1c:f4:73:16:78:f1:be:a8:5a:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:34:65:E4:DD:E3:CA:9C:72:24:EE:01:01:8E:6A:CB:72:9A:79:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/0c6d5801-0b89-3e82-a647-5a9119149950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.0.0-23.161.2.255
                  74.114.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8e:e5:58:80:6c:75:e0:d8:49:e6:ba:a6:76:8c:dc:fd:af:
         20:d9:db:49:c2:ef:01:1b:ea:3e:c7:6f:11:81:49:c2:5b:5e:
         e5:06:68:83:a2:67:20:38:93:ba:35:73:4c:ed:2c:d1:3c:02:
         0f:cf:92:03:1b:f7:df:1e:bd:8f:d7:1e:24:6d:ea:db:a4:6b:
         e7:03:5c:f8:c7:36:30:15:09:92:53:96:44:85:5a:75:91:ed:
         a3:73:97:d6:5e:56:da:35:5e:35:fb:9c:33:b2:56:e3:d3:d4:
         cd:36:2e:47:d8:0d:c7:3f:e2:16:4c:cb:fd:6c:4c:a9:72:3d:
         34:94:fc:93:d7:d1:e3:22:c6:ea:65:68:09:93:52:43:7f:93:
         cf:91:4a:15:07:4f:eb:a3:2b:c3:2b:fe:10:21:9f:f7:f6:ea:
         bb:48:52:0e:5e:bb:e2:2b:dc:dc:b1:e8:f1:9a:03:7f:57:fe:
         7f:e9:1b:fd:50:8d:15:8c:95:4b:6b:45:ae:82:83:ee:90:51:
         df:f8:94:23:ec:9d:25:be:94:78:87:65:0e:e6:c0:ea:ec:59:
         ff:64:6f:e5:17:ba:dd:bf:d8:9a:ec:a4:d7:8b:f4:67:76:bc:
         ea:7d:62:cc:5a:90:b3:46:5f:56:ea:ab:58:28:9c:a1:79:97:
         ba:5d:83:6f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6BX4xbJU+2hk7uRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTQzMDMxYmItYjQ4Yi00ZWZiLWFlMjYtNDAzNTY4ODE5
OWY3MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
NzcyNjAyY2ItZTA3Ni00MmE1LWI2YTItNGQ1ZGQ1OTJmMjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy9Xut5EHTss9qDPczzvUnHRhI9VXs3qN0EX
g1s5mmc8uYzvVfmLaz0CLAbTmo32VA/2Lk5NBi7CH+SGlWxSWE7H3cDxOd/gcdDA
xclguU7lHfT3bzFR/TBm3CT/MNuzwTmmDfaWXshVu6dJ4nOAJPpkDXSU8fXKb5l8
kqAc3c50YQidDBhi0L9ljWu1hhepg3ySc0l6OAilo5vIDoODbgaCSQE9wbUwzOoM
pyuuu7mge/n18I2/BcsdBP9Z0q9wIEYAEPC2mRzayuEaoowPTvZUlDUN0Dc21i9f
+UTQfLmFK5qrkn/v7/CLIK1L+zxxJ6DuCB4c9HMWePG+qFpYDQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFM00ZeTd48qcciTuAQGOastymnkTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NDMw
MzFiYi1iNDhiLTRlZmItYWUyNi00MDM1Njg4MTk5ZjcvMGM2ZDU4MDEtMGI4OS0z
ZTgyLWE2NDctNWE5MTE5MTQ5OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTQzMDMxYmItYjQ4Yi00ZWZiLWFl
MjYtNDAzNTY4ODE5OWY3LzU0MzAzMWJiLWI0OGItNGVmYi1hZTI2LTQwMzU2ODgx
OTlmNy5jcmwwHwYDVR0jBBgwFoAULS998jX/Dvkwd4cgQfSA0j4I2OowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NDMwMzFiYi1iNDhiLTRlZmItYWUyNi00MDM1
Njg4MTk5ZjcuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwAXoQME
ABehAgMEAUpyNjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAxjuVYgGx14NhJ5rqmdozc/a8g2dtJwu8BG+o+
x28RgUnCW17lBmiDomcgOJO6NXNM7SzRPAIPz5IDG/ffHr2P1x4kberbpGvnA1z4
xzYwFQmSU5ZEhVp1ke2jc5fWXlbaNV41+5wzslbj09TNNi5H2A3HP+IWTMv9bEyp
cj00lPyT19HjIsbqZWgJk1JDf5PPkUoVB0/royvDK/4QIZ/39uq7SFIOXrviK9zc
sejxmgN/V/5/6Rv9UI0VjJVLa0WugoPukFHf+JQj7J0lvpR4h2UO5sDq7Fn/ZG/l
F7rdv9ia7KTXi/RndrzqfWLMWpCzRl9W6qtYKJyheZe6XYNv
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:32:41 2026 by rpki-client