Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/731fc45d-5836-3b2e-8759-3b5b8d5dea2e.roa
File:                     731fc45d-5836-3b2e-8759-3b5b8d5dea2e.roa (raw, json)
Hash identifier:          fEM74NIRmZZDHbDvZNLc2Ej9rEuYGelHPVL/0AWZrAw=
Subject key identifier:   82:E2:0D:B0:EB:8D:B5:44:D8:2E:DE:44:50:67:8E:29:C3:DE:F9:EB
Certificate issuer:       /CN=5ba004db-1efd-4272-b777-2fdf9dd9dcf1
Certificate serial:       010D0C9F4328584EDF5C898D124793CC75F3E880
Authority key identifier: A2:E9:61:61:C1:16:55:C6:AF:A4:43:4B:6C:52:11:61:33:E3:C2:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/731fc45d-5836-3b2e-8759-3b5b8d5dea2e.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     152918
IP address blocks:        23.148.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:89:8d:12:47:93:cc:75:f3:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba004db-1efd-4272-b777-2fdf9dd9dcf1
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=68b6b326-25cf-476a-9c39-fa0daf39c55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:95:f8:20:6c:7e:9f:7b:6d:e6:32:29:6c:4e:
                    ab:72:89:0a:62:70:8e:ee:58:63:f7:b1:2d:21:b7:
                    7b:25:7a:27:81:b6:09:70:93:55:a9:fb:c4:66:a5:
                    e1:b7:ec:d4:e4:87:6d:81:68:65:79:f9:98:a4:96:
                    6a:bb:fc:e9:be:27:ab:2f:33:da:4b:99:1e:85:2c:
                    79:a4:70:7b:ef:54:b3:10:52:cf:f8:15:53:d6:40:
                    bd:d7:a5:0c:9a:e4:83:d1:d4:b3:f5:85:82:81:4c:
                    a5:8a:ba:95:4b:cd:a0:70:9f:eb:65:c0:cf:ba:bc:
                    3c:d5:d4:91:cc:36:00:c5:c3:22:fc:96:1c:be:85:
                    c1:1f:63:43:e2:7b:93:42:15:50:e6:de:2f:dd:ae:
                    08:f3:53:1a:78:b1:d4:c0:0c:76:72:f3:b8:1e:d5:
                    a3:60:3f:95:f7:a9:b4:4e:f3:47:8d:48:b3:4b:36:
                    d3:89:0c:a0:31:a0:e6:2c:74:31:f3:1e:a4:04:ef:
                    14:49:01:34:4a:dd:2e:c6:55:12:8a:e1:f9:54:0e:
                    6b:c1:4d:e2:fa:f5:2f:38:b4:31:04:06:40:48:42:
                    b3:c9:33:dc:b2:04:db:54:39:5a:e0:c8:1a:82:2e:
                    6c:2f:ba:2d:d0:5c:10:f4:5f:78:b8:ea:4e:92:1e:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E2:0D:B0:EB:8D:B5:44:D8:2E:DE:44:50:67:8E:29:C3:DE:F9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/731fc45d-5836-3b2e-8759-3b5b8d5dea2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E9:61:61:C1:16:55:C6:AF:A4:43:4B:6C:52:11:61:33:E3:C2:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:05:b6:a5:86:56:55:12:8d:9f:c0:d4:81:01:cd:37:b7:e6:
         27:75:21:3a:f4:17:79:d6:c9:fa:40:70:79:d8:39:c9:ca:20:
         82:28:e2:87:f0:5a:78:6c:63:72:df:c5:0a:7c:33:80:30:cd:
         5a:24:9d:61:2d:7a:c9:f1:8f:ea:3f:a1:9c:62:3d:e8:73:39:
         d7:dd:09:97:ef:27:23:1a:1a:fa:73:ce:22:70:bb:33:b9:a3:
         0b:8d:b0:01:f0:b3:e4:90:90:f7:cc:3d:a3:cd:ea:ef:82:24:
         8c:e8:eb:1f:ce:4e:73:bc:03:07:7a:4c:13:64:fb:a4:e0:1a:
         1a:05:f8:88:6f:02:ec:15:de:8f:68:16:53:18:8e:20:82:29:
         27:31:16:85:0c:03:a3:8e:d6:98:6f:dc:1e:cd:42:0a:6f:c3:
         d0:72:a2:94:e5:93:6e:83:cd:60:35:81:23:eb:a3:99:27:b4:
         4c:4c:03:f9:70:3c:f4:a5:6c:b7:53:3a:a2:78:cd:af:f2:36:
         2a:7e:5e:b5:cc:76:c9:d2:65:85:cf:5f:e2:d0:f7:21:46:34:
         7f:ac:b9:d5:a4:f6:b2:bf:11:bf:a2:d5:94:5f:67:66:46:4a:
         b4:14:90:a9:86:05:01:f5:30:6c:99:34:78:76:24:b6:92:8d:
         fc:9e:93:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7fXImNEkeTzHXz6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWJhMDA0ZGItMWVmZC00MjcyLWI3NzctMmZkZjlkZDlk
Y2YxMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk
NjhiNmIzMjYtMjVjZi00NzZhLTljMzktZmEwZGFmMzljNTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5X4IGx+n3tt5jIpbE6rcokKYnCO7lhj97Et
Ibd7JXongbYJcJNVqfvEZqXht+zU5IdtgWhlefmYpJZqu/zpvierLzPaS5kehSx5
pHB771SzEFLP+BVT1kC916UMmuSD0dSz9YWCgUylirqVS82gcJ/rZcDPurw81dSR
zDYAxcMi/JYcvoXBH2ND4nuTQhVQ5t4v3a4I81MaeLHUwAx2cvO4HtWjYD+V96m0
TvNHjUizSzbTiQygMaDmLHQx8x6kBO8USQE0St0uxlUSiuH5VA5rwU3i+vUvOLQx
BAZASEKzyTPcsgTbVDla4Mgagi5sL7ot0FwQ9F94uOpOkh4mbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILiDbDrjbVE2C7eRFBnjinD3vnrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YmEw
MDRkYi0xZWZkLTQyNzItYjc3Ny0yZmRmOWRkOWRjZjEvNzMxZmM0NWQtNTgzNi0z
YjJlLTg3NTktM2I1YjhkNWRlYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWJhMDA0ZGItMWVmZC00MjcyLWI3
NzctMmZkZjlkZDlkY2YxLzViYTAwNGRiLTFlZmQtNDI3Mi1iNzc3LTJmZGY5ZGQ5
ZGNmMS5jcmwwHwYDVR0jBBgwFoAUoulhYcEWVcavpENLbFIRYTPjwrQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi81YmEwMDRkYi0xZWZkLTQyNzItYjc3Ny0yZmRm
OWRkOWRjZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5QcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkFtqWGVlUSjZ/A1IEBzTe35id1ITr0F3nWyfpAcHnYOcnKIIIo4ofw
WnhsY3LfxQp8M4AwzVoknWEtesnxj+o/oZxiPehzOdfdCZfvJyMaGvpzziJwuzO5
owuNsAHws+SQkPfMPaPN6u+CJIzo6x/OTnO8Awd6TBNk+6TgGhoF+IhvAuwV3o9o
FlMYjiCCKScxFoUMA6OO1phv3B7NQgpvw9ByopTlk26DzWA1gSPro5kntExMA/lw
PPSlbLdTOqJ4za/yNip+XrXMdsnSZYXPX+LQ9yFGNH+sudWk9rK/Eb+i1ZRfZ2ZG
SrQUkKmGBQH1MGyZNHh2JLaSjfyek7k=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:29:43 2026 by rpki-client