Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/11a90d2f-7576-3fc4-8afd-e02ba8dda10b.roa
File:                     11a90d2f-7576-3fc4-8afd-e02ba8dda10b.roa (raw, json)
Hash identifier:          ZaHWST5WiYF6bwr+DX1eYjpPHKZ0UxeMN5PQ6dHP1R8=
Subject key identifier:   18:FE:6B:D7:3D:04:2E:D0:46:52:43:84:CB:70:81:CA:82:58:8D:81
Certificate issuer:       /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
Certificate serial:       010D0C9F4328584ECE9C744E76D52A2C71169400
Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/11a90d2f-7576-3fc4-8afd-e02ba8dda10b.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     62468
IP address blocks:        23.148.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:74:4e:76:d5:2a:2c:71:16:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=19298e55-2fe8-4174-bee1-70cb44b993c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:90:2c:7f:e6:e5:e1:14:d2:b0:db:ac:c3:
                    23:71:57:7d:b7:eb:18:b4:4b:08:d1:c6:59:a3:a4:
                    d8:a1:44:a3:25:31:2f:e1:a9:98:18:f1:9f:31:6e:
                    28:64:09:f1:af:25:58:5e:59:e3:18:c1:8e:e3:ba:
                    7b:52:73:43:7b:32:07:d3:04:fb:91:0d:a7:fa:12:
                    ae:73:09:8f:2b:5a:91:25:c3:8c:e8:af:85:76:8a:
                    34:cc:f5:09:92:7b:c2:52:b9:b3:79:f4:8b:8f:67:
                    a4:94:3f:9d:08:69:dc:80:3b:9b:6a:bb:c9:54:fe:
                    9a:f0:25:71:eb:e4:34:75:60:5c:0d:98:e0:d5:b8:
                    c8:76:dd:68:99:c3:ca:22:15:ce:aa:5e:dd:00:5b:
                    3f:64:d3:4c:16:e2:c0:a6:09:8e:13:17:17:80:ec:
                    b6:d4:84:be:cc:5b:22:d5:7b:c8:04:d8:89:10:dd:
                    08:39:9c:39:af:ae:23:55:0e:15:ff:d5:2c:e9:df:
                    4a:24:9e:26:fd:48:e7:b2:de:55:12:92:ec:aa:e1:
                    0f:90:11:46:19:b5:1e:31:fe:d7:9b:f4:73:b9:b0:
                    ba:cb:79:39:f3:4d:e6:d9:31:fd:ba:ae:a7:0d:a3:
                    9c:72:13:2b:d3:85:a2:2e:99:b4:33:52:26:6d:43:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FE:6B:D7:3D:04:2E:D0:46:52:43:84:CB:70:81:CA:82:58:8D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/11a90d2f-7576-3fc4-8afd-e02ba8dda10b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl

            X509v3 Authority Key Identifier:
                keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b2:1a:92:db:03:8e:26:fd:14:01:9c:63:da:48:aa:6c:4d:
         69:4f:9f:6e:1a:18:48:c3:86:0e:26:56:42:7e:56:d1:9d:a6:
         27:b6:59:4d:59:54:3e:49:72:80:48:b4:8f:e4:d3:8b:14:05:
         43:56:85:79:fa:90:6e:be:e0:14:82:be:8d:69:eb:eb:f2:0c:
         01:66:a8:51:91:16:22:02:fd:7a:9e:bf:e3:e5:22:18:ec:7a:
         89:8b:68:b3:ae:40:a2:a3:b8:7e:57:df:d5:80:b0:a5:14:5b:
         79:7e:c6:7d:db:48:51:0f:67:86:77:73:d7:a5:ef:9d:09:89:
         b2:e9:91:7e:6a:e9:5f:eb:e1:cb:32:95:6f:39:ef:ad:ea:de:
         9d:fc:90:3b:84:44:da:e5:f7:1f:91:5a:6c:44:f1:74:c2:d6:
         f5:e8:1e:09:bc:cb:f8:b1:78:bc:7d:9f:70:32:39:64:e0:63:
         0d:17:d9:f1:99:30:aa:e9:c8:af:3f:12:8b:07:1a:21:06:7c:
         e8:d9:1e:72:49:34:78:2c:7c:5e:7f:60:6d:2f:1c:c5:fd:32:
         02:c2:09:c5:79:b1:ab:4d:80:6a:90:98:e4:84:83:9e:71:b2:
         32:e8:68:0c:e1:58:7f:5a:98:61:42:58:3d:31:b8:a0:73:69:
         29:ad:81:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7OnHROdtUqLHEWlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNlOWM1MGMtZTMyNy00MjQzLThjMWUtMDY3YmQzZDRl
YmVhMB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk
MTkyOThlNTUtMmZlOC00MTc0LWJlZTEtNzBjYjQ0Yjk5M2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8uQLH/m5eEU0rDbrMMjcVd9t+sYtEsI0cZZ
o6TYoUSjJTEv4amYGPGfMW4oZAnxryVYXlnjGMGO47p7UnNDezIH0wT7kQ2n+hKu
cwmPK1qRJcOM6K+Fdoo0zPUJknvCUrmzefSLj2eklD+dCGncgDubarvJVP6a8CVx
6+Q0dWBcDZjg1bjIdt1omcPKIhXOql7dAFs/ZNNMFuLApgmOExcXgOy21IS+zFsi
1XvIBNiJEN0IOZw5r64jVQ4V/9Us6d9KJJ4m/Ujnst5VEpLsquEPkBFGGbUeMf7X
m/RzubC6y3k5803m2TH9uq6nDaOcchMr04WiLpm0M1ImbUMZpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBj+a9c9BC7QRlJDhMtwgcqCWI2BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5
YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdiZDNkNGViZWEvMTFhOTBkMmYtNzU3Ni0z
ZmM0LThhZmQtZTAyYmE4ZGRhMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNlOWM1MGMtZTMyNy00MjQzLThj
MWUtMDY3YmQzZDRlYmVhLzFjZTljNTBjLWUzMjctNDI0My04YzFlLTA2N2JkM2Q0
ZWJlYS5jcmwwHwYDVR0jBBgwFoAUBkpk6d+UydZAem4SVdEMXbE1qCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdi
ZDNkNGViZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuyGpLbA44m/RQBnGPaSKpsTWlPn24aGEjDhg4mVkJ+VtGdpie2WU1Z
VD5JcoBItI/k04sUBUNWhXn6kG6+4BSCvo1p6+vyDAFmqFGRFiIC/Xqev+PlIhjs
eomLaLOuQKKjuH5X39WAsKUUW3l+xn3bSFEPZ4Z3c9el750JibLpkX5q6V/r4csy
lW85763q3p38kDuERNrl9x+RWmxE8XTC1vXoHgm8y/ixeLx9n3AyOWTgYw0X2fGZ
MKrpyK8/EosHGiEGfOjZHnJJNHgsfF5/YG0vHMX9MgLCCcV5satNgGqQmOSEg55x
sjLoaAzhWH9amGFCWD0xuKBzaSmtgRQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:24:01 2026 by rpki-client