Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa
File:                     ce00dd86-e265-3568-ab4e-161ec0685a22.roa (raw, json)
Hash identifier:          8rRXcXVDRIxNZet9u3Gyve6ahPX5Y++jwfONq+5iG7E=
Subject key identifier:   52:75:56:30:0F:16:2D:7F:25:DC:77:71:7A:C7:A8:10:C7:1F:C8:5D
Certificate issuer:       /CN=6d7a15c9-bd4b-4b40-8bd0-21493b541c0d
Certificate serial:       010D0C9F4328584D746FC464B01DEC57F265FA60
Authority key identifier: FC:99:D6:C4:97:A8:48:B2:94:1E:9B:83:88:19:F8:EE:02:96:42:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     152179
IP address blocks:        23.148.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:c4:64:b0:1d:ec:57:f2:65:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7a15c9-bd4b-4b40-8bd0-21493b541c0d
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=6f0f56c5-2afe-494f-a741-fbbc360798a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:4e:ad:cc:75:da:aa:31:15:97:6c:5b:f0:
                    79:a8:0a:63:23:98:93:9c:5e:c2:54:eb:74:c8:f2:
                    30:23:91:fb:02:b6:c7:10:8a:8d:0c:8b:00:9a:e9:
                    87:b5:05:ef:98:44:0e:5b:15:b8:ac:a2:9c:c8:94:
                    e4:3e:67:03:e5:0a:ed:58:59:ef:f4:60:95:e1:93:
                    cb:d1:23:80:19:47:db:6d:5a:c3:4c:14:c2:ed:ab:
                    9e:4b:64:1b:97:9f:53:0d:90:81:08:01:42:82:3e:
                    f3:94:ce:c1:84:3e:de:e4:4d:1b:17:cc:d2:a0:26:
                    83:94:31:17:fc:21:1d:4f:64:d3:ad:0e:40:f1:78:
                    ef:32:88:5c:04:b2:92:1e:56:bb:00:43:68:b4:60:
                    ab:b3:91:62:3c:54:ce:2a:fd:17:f3:08:7e:b1:79:
                    d6:9d:6f:6c:a3:43:10:01:b8:be:9b:2e:da:af:1b:
                    14:3d:ca:84:f0:82:a5:62:fb:54:54:33:a3:32:29:
                    8c:a9:9c:82:d5:5f:67:3e:58:18:97:9f:9e:9f:0f:
                    59:00:41:d5:58:85:4b:44:4c:bd:2c:1c:a4:6c:34:
                    a2:8c:21:44:15:68:2c:18:f5:3c:97:ca:60:74:ab:
                    12:60:c2:d1:8f:3f:67:ca:d7:4d:39:1d:1f:37:da:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:75:56:30:0F:16:2D:7F:25:DC:77:71:7A:C7:A8:10:C7:1F:C8:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:99:D6:C4:97:A8:48:B2:94:1E:9B:83:88:19:F8:EE:02:96:42:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:37:bb:88:14:88:01:99:6e:ee:0f:3a:3c:d3:67:0e:96:c5:
         f8:0e:a5:5b:87:fb:6a:05:81:4f:2c:0a:fd:ea:be:b8:60:83:
         89:38:19:bd:c9:88:59:21:04:8d:df:e6:ba:02:eb:e5:dc:8c:
         19:5f:88:1c:d8:98:d9:d5:87:44:48:33:4e:d8:8e:45:62:39:
         88:3c:a6:d8:16:12:ab:47:bf:f5:0c:53:4d:33:ed:4c:0a:4b:
         92:28:b5:f3:98:ab:df:3b:f8:b9:ab:0f:09:e6:19:f5:26:0f:
         1c:98:52:66:6d:ea:b9:b9:63:18:d7:a4:d1:b3:51:e9:1c:f2:
         fe:8c:c7:ac:05:27:46:b8:5d:9c:7a:da:d0:f6:c3:66:ab:bc:
         72:40:9d:d9:fb:7a:7b:3e:fd:f5:de:07:e1:1a:18:2d:ea:5c:
         f9:f6:f4:1b:3d:8f:ce:4a:44:93:7e:85:3e:2e:44:c2:10:d2:
         66:71:ba:ff:04:f3:77:4a:9c:f2:73:4c:51:2d:82:6a:b2:08:
         50:aa:19:78:9f:fa:d9:0b:b4:00:61:90:fc:b2:92:7c:0e:d3:
         cb:0f:85:90:ec:da:a7:1f:df:28:ce:7e:cb:82:26:71:94:54:
         10:e3:86:c1:60:26:c3:8f:29:b8:93:ac:9d:56:d7:29:b7:90:
         58:9e:7c:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8RksB3sV/Jl+mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ3YTE1YzktYmQ0Yi00YjQwLThiZDAtMjE0OTNiNTQx
YzBkMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
NmYwZjU2YzUtMmFmZS00OTRmLWE3NDEtZmJiYzM2MDc5OGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+JOrcx12qoxFZdsW/B5qApjI5iTnF7CVOt0
yPIwI5H7ArbHEIqNDIsAmumHtQXvmEQOWxW4rKKcyJTkPmcD5QrtWFnv9GCV4ZPL
0SOAGUfbbVrDTBTC7aueS2Qbl59TDZCBCAFCgj7zlM7BhD7e5E0bF8zSoCaDlDEX
/CEdT2TTrQ5A8XjvMohcBLKSHla7AENotGCrs5FiPFTOKv0X8wh+sXnWnW9so0MQ
Abi+my7arxsUPcqE8IKlYvtUVDOjMimMqZyC1V9nPlgYl5+enw9ZAEHVWIVLREy9
LBykbDSijCFEFWgsGPU8l8pgdKsSYMLRjz9nytdNOR0fN9qXmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJ1VjAPFi1/Jdx3cXrHqBDHH8hdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdh
MTVjOS1iZDRiLTRiNDAtOGJkMC0yMTQ5M2I1NDFjMGQvY2UwMGRkODYtZTI2NS0z
NTY4LWFiNGUtMTYxZWMwNjg1YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQ3YTE1YzktYmQ0Yi00YjQwLThi
ZDAtMjE0OTNiNTQxYzBkLzZkN2ExNWM5LWJkNGItNGI0MC04YmQwLTIxNDkzYjU0
MWMwZC5jcmwwHwYDVR0jBBgwFoAU/JnWxJeoSLKUHpuDiBn47gKWQoUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdhMTVjOS1iZDRiLTRiNDAtOGJkMC0yMTQ5
M2I1NDFjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5RMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKA3u4gUiAGZbu4POjzTZw6WxfgOpVuH+2oFgU8sCv3qvrhgg4k4Gb3J
iFkhBI3f5roC6+XcjBlfiBzYmNnVh0RIM07YjkViOYg8ptgWEqtHv/UMU00z7UwK
S5IotfOYq987+LmrDwnmGfUmDxyYUmZt6rm5YxjXpNGzUekc8v6Mx6wFJ0a4XZx6
2tD2w2arvHJAndn7ens+/fXeB+EaGC3qXPn29Bs9j85KRJN+hT4uRMIQ0mZxuv8E
83dKnPJzTFEtgmqyCFCqGXif+tkLtABhkPyyknwO08sPhZDs2qcf3yjOfsuCJnGU
VBDjhsFgJsOPKbiTrJ1W1ym3kFiefIc=
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:08:25 2026 by rpki-client