Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa
File:                     3f1804e2-95de-35be-88e3-5feefeb68750.roa (raw, json)
Hash identifier:          HBSArdt/dT9+9ZivsTotEi/dgb680u1CkwIdvDQVLLY=
Subject key identifier:   29:76:02:CB:C7:D6:6F:9C:72:F7:2A:D5:4A:2A:C6:65:4C:E6:04:76
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584EED521404DFFB9EF8FCDE8500
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     138195
IP address blocks:        23.235.164.0/24 maxlen: 32
                          23.248.246.0/24 maxlen: 32
                          103.199.103.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:14:04:df:fb:9e:f8:fc:de:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=efa1eddc-7c37-4ec0-a748-624b4a05e08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:96:d1:a7:64:46:3b:cf:09:d6:fa:d6:1c:
                    24:15:44:30:57:10:a1:52:12:79:93:00:66:13:9d:
                    e9:6a:ee:4b:ca:87:09:7a:dc:e8:ef:31:be:57:ac:
                    2b:01:74:07:fb:d8:67:bb:55:6c:ce:73:40:7d:12:
                    db:93:3d:58:e0:e5:44:69:26:cb:e3:2d:88:6a:1d:
                    4e:4a:cd:76:ea:1b:09:7f:bd:a0:1e:6f:21:84:4a:
                    5e:41:b5:eb:16:b6:2d:70:99:90:37:d9:72:43:a3:
                    04:8f:b5:7b:ec:bb:2b:72:31:34:81:93:c0:c9:c0:
                    30:6c:c8:58:76:81:43:7e:1a:6c:c0:7a:92:bc:05:
                    44:76:42:d1:e9:33:82:06:5d:43:02:9c:ac:d5:dd:
                    6f:4d:7e:15:30:a8:77:4a:0a:ec:52:de:30:f3:f4:
                    cb:43:93:d6:72:2f:ea:c0:c9:e5:ae:e5:e6:46:93:
                    0a:df:54:46:73:7c:78:25:d8:a9:4c:dc:b5:61:b5:
                    0f:37:4f:29:90:bd:9a:1f:c7:56:cd:c3:38:20:c9:
                    75:f4:fd:93:c3:c9:57:20:48:f1:bf:28:11:1a:ba:
                    ed:89:5e:5c:3d:e0:58:38:06:15:6c:99:b0:da:ef:
                    2c:71:0c:05:76:8b:1c:79:e4:37:c8:84:bd:54:a7:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:76:02:CB:C7:D6:6F:9C:72:F7:2A:D5:4A:2A:C6:65:4C:E6:04:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.164.0/24
                  23.248.246.0/24
                  103.199.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a8:f4:f7:9c:83:f3:8d:1e:32:9e:83:e6:b2:af:58:0d:9e:
         a4:cc:f6:97:fa:b3:19:39:83:56:76:02:c8:89:24:12:bd:9a:
         6d:ea:9a:7e:2d:0c:74:65:24:0c:e1:c6:21:55:6b:5f:be:7e:
         01:17:24:57:5a:f9:0c:69:1a:6c:3b:00:cf:26:8c:00:c2:e6:
         44:1d:21:c8:ad:ed:bc:b9:e5:d4:fe:46:7a:ba:b4:b2:41:0e:
         62:b5:e0:a9:59:23:e0:7a:b4:d8:26:8b:91:bd:e2:e4:53:78:
         d7:e1:e6:c5:52:b3:12:1e:c7:59:95:12:d6:58:e7:de:d2:a4:
         27:89:5d:6f:bb:4d:f0:3c:b9:5a:4b:d9:05:bf:f0:41:1d:f6:
         37:68:38:2c:f7:f4:e1:c3:bb:09:7b:b5:84:66:91:a3:00:a8:
         0d:a8:ec:c2:9c:50:e7:0b:74:63:bf:2d:ad:d4:05:0f:de:5a:
         5a:6c:59:41:e9:07:13:a4:95:b4:23:c2:ad:1a:0d:b0:88:fe:
         7e:2e:c3:4a:2b:bc:51:28:e5:66:8e:d8:96:b0:1a:a7:49:33:
         8d:10:4f:10:37:b5:81:a7:0e:e5:d4:24:8b:20:93:5a:22:de:
         8d:7c:3f:87:38:3e:72:c8:ca:e0:ec:ac:9c:90:05:99:78:4f:
         27:68:91:69
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7tUhQE3/ue+PzehQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy
OGJkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZWZhMWVkZGMtN2MzNy00ZWMwLWE3NDgtNjI0YjRhMDVlMDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldWW0adkRjvPCdb61hwkFUQwVxChUhJ5kwBm
E53pau5LyocJetzo7zG+V6wrAXQH+9hnu1VsznNAfRLbkz1Y4OVEaSbL4y2Iah1O
Ss126hsJf72gHm8hhEpeQbXrFrYtcJmQN9lyQ6MEj7V77LsrcjE0gZPAycAwbMhY
doFDfhpswHqSvAVEdkLR6TOCBl1DApys1d1vTX4VMKh3SgrsUt4w8/TLQ5PWci/q
wMnlruXmRpMK31RGc3x4JdipTNy1YbUPN08pkL2aH8dWzcM4IMl19P2Tw8lXIEjx
vygRGrrtiV5cPeBYOAYVbJmw2u8scQwFdosceeQ3yIS9VKcugQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCl2AsvH1m+ccvcq1UoqxmVM5gR2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1
NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvM2YxODA0ZTItOTVkZS0z
NWJlLTg4ZTMtNWZlZWZlYjY4NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj
ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk
MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh
YTk3ZDI4YmQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF+ukAwQA
F/j2AwQAZ8dnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAKmo9Pecg/ONHjKeg+ayr1gNnqTM9pf6sxk5g1Z2
AsiJJBK9mm3qmn4tDHRlJAzhxiFVa1++fgEXJFda+QxpGmw7AM8mjADC5kQdIcit
7by55dT+Rnq6tLJBDmK14KlZI+B6tNgmi5G94uRTeNfh5sVSsxIex1mVEtZY597S
pCeJXW+7TfA8uVpL2QW/8EEd9jdoOCz39OHDuwl7tYRmkaMAqA2o7MKcUOcLdGO/
La3UBQ/eWlpsWUHpBxOklbQjwq0aDbCI/n4uw0orvFEo5WaO2JawGqdJM40QTxA3
tYGnDuXUJIsgk1oi3o18P4c4PnLIyuDsrJyQBZl4TydokWk=
-----END CERTIFICATE-----
Generated at Tue Aug 25 14:06:34 2026 by rpki-client