Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa
File:                     a9e307cb-bc6d-318b-9659-6b643e6151fd.roa (raw, json)
Hash identifier:          KE2S3kfUlt1o0ViP9Cqz5u9ayrvSCjWQpexjYdK4aKw=
Subject key identifier:   EB:B6:4F:04:1E:40:9B:78:B6:E5:05:D6:52:B3:B3:41:D6:D8:AA:A2
Certificate issuer:       /CN=9477d25a-981d-4eb4-9fd8-7eea914a2840
Certificate serial:       010D0C9F4328584D4EBFB35FB91464B2E6D4A700
Authority key identifier: 15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa
Signing time:             Fri 27 Mar 2026 13:00:40 +0000
ROA not before:           Fri 27 Mar 2026 13:00:40 +0000
ROA not after:            Thu 25 Jun 2026 13:00:40 +0000
asID:                     402075
IP address blocks:        23.147.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bf:b3:5f:b9:14:64:b2:e6:d4:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9477d25a-981d-4eb4-9fd8-7eea914a2840
        Validity
            Not Before: Mar 27 13:00:40 2026 GMT
            Not After : Jun 25 13:00:40 2026 GMT
        Subject: CN=79019781-625d-4d07-bdca-1b1a79e8a2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:cc:dc:8d:10:2b:dd:11:d1:73:3c:7f:a2:
                    1e:1d:24:87:73:b4:62:52:e1:71:1d:09:3a:88:fa:
                    66:da:0e:1a:6c:fb:74:6a:e3:2f:0d:42:24:48:7d:
                    d7:8d:1b:47:bc:d3:db:c2:d0:1c:fe:d6:04:31:2e:
                    ad:fa:84:b0:bf:2f:44:a9:c8:52:9d:85:30:e3:55:
                    9b:7e:16:99:5a:89:a9:6b:fa:e9:07:48:51:e5:de:
                    83:9d:d5:f4:7c:87:3e:f8:94:d3:e3:ff:ec:ec:81:
                    49:38:8b:5e:9e:a5:31:07:12:ff:5b:56:e2:11:dc:
                    09:af:8f:82:7e:71:4d:57:30:43:79:a9:83:79:64:
                    69:79:fa:b4:21:12:40:01:10:46:22:3b:ad:b9:a1:
                    dd:aa:63:51:cc:2a:15:56:5c:72:af:45:ae:ff:c4:
                    6c:7d:43:86:48:a3:39:36:fa:07:e5:82:28:d1:7a:
                    76:87:0a:be:90:65:c1:4a:08:8a:ff:c5:5f:9b:87:
                    c7:6e:ea:f5:50:57:1e:b9:eb:25:22:8b:ab:7c:ff:
                    45:0d:d9:de:44:47:ed:b4:df:de:ee:99:42:73:52:
                    13:77:cf:c4:58:27:49:c8:bc:71:d8:c1:f8:59:bf:
                    b5:33:91:8a:58:35:d7:7b:9a:4b:6c:e6:c9:92:0c:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B6:4F:04:1E:40:9B:78:B6:E5:05:D6:52:B3:B3:41:D6:D8:AA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.crl

            X509v3 Authority Key Identifier:
                keyid:15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ca:f5:c3:71:34:28:18:23:50:31:05:6c:d4:b9:98:03:a2:
         08:d9:a7:12:b8:ea:6b:73:a0:d2:5b:b0:b5:76:0e:72:80:4c:
         0d:27:47:5c:3e:a6:78:bd:55:c4:dc:01:b5:60:88:c1:8a:ff:
         71:61:f6:c1:79:c7:06:22:c5:13:f6:9c:97:62:e1:03:b4:ca:
         40:25:64:b7:39:39:0b:48:09:5d:67:24:89:9c:49:d5:0b:db:
         c7:80:4b:1f:e9:3c:f2:26:48:1a:9a:2e:a5:e2:7a:78:08:c0:
         15:56:3e:fa:30:f8:b8:e1:0e:f3:9d:fd:a2:2c:12:7b:75:85:
         59:da:6b:3e:61:bf:bb:e6:de:fd:d0:ae:ff:7a:31:f2:19:f0:
         0e:57:df:4c:27:20:b9:db:6c:5c:1f:fb:b3:b3:56:7d:a5:94:
         b9:41:09:0c:73:b4:33:52:d6:f0:8a:10:0f:6c:bd:ef:ef:6b:
         d0:c7:05:63:cd:0b:cc:92:31:e4:af:4c:27:69:0f:60:9d:6d:
         7b:a2:b5:50:2f:ee:68:41:3f:dd:c8:63:83:7b:d3:65:9a:0a:
         f8:64:82:6e:a2:12:02:d4:c1:16:46:ce:1f:55:8a:e8:64:ae:
         a6:73:e7:ea:1b:b3:5d:70:ab:ce:e5:36:28:fd:94:8a:0c:54:
         5f:92:cb:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov7NfuRRksubUpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ3N2QyNWEtOTgxZC00ZWI0LTlmZDgtN2VlYTkxNGEy
ODQwMB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk
NzkwMTk3ODEtNjI1ZC00ZDA3LWJkY2EtMWIxYTc5ZThhMmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktbM3I0QK90R0XM8f6IeHSSHc7RiUuFxHQk6
iPpm2g4abPt0auMvDUIkSH3XjRtHvNPbwtAc/tYEMS6t+oSwvy9EqchSnYUw41Wb
fhaZWompa/rpB0hR5d6DndX0fIc++JTT4//s7IFJOItenqUxBxL/W1biEdwJr4+C
fnFNVzBDeamDeWRpefq0IRJAARBGIjutuaHdqmNRzCoVVlxyr0Wu/8RsfUOGSKM5
NvoH5YIo0Xp2hwq+kGXBSgiK/8Vfm4fHbur1UFceueslIourfP9FDdneREfttN/e
7plCc1ITd8/EWCdJyLxx2MH4Wb+1M5GKWDXXe5pLbObJkgz6zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOu2TwQeQJt4tuUF1lKzs0HW2KqiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NDc3
ZDI1YS05ODFkLTRlYjQtOWZkOC03ZWVhOTE0YTI4NDAvYTllMzA3Y2ItYmM2ZC0z
MThiLTk2NTktNmI2NDNlNjE1MWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTQ3N2QyNWEtOTgxZC00ZWI0LTlm
ZDgtN2VlYTkxNGEyODQwLzk0NzdkMjVhLTk4MWQtNGViNC05ZmQ4LTdlZWE5MTRh
Mjg0MC5jcmwwHwYDVR0jBBgwFoAUFQukmWti1AsFPBwT1LQuSaVEi7EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85NDc3ZDI1YS05ODFkLTRlYjQtOWZkOC03ZWVh
OTE0YTI4NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDK9cNxNCgYI1AxBWzUuZgDogjZpxK46mtzoNJbsLV2DnKATA0nR1w+
pni9VcTcAbVgiMGK/3Fh9sF5xwYixRP2nJdi4QO0ykAlZLc5OQtICV1nJImcSdUL
28eASx/pPPImSBqaLqXiengIwBVWPvow+LjhDvOd/aIsEnt1hVnaaz5hv7vm3v3Q
rv96MfIZ8A5X30wnILnbbFwf+7OzVn2llLlBCQxztDNS1vCKEA9sve/va9DHBWPN
C8ySMeSvTCdpD2CdbXuitVAv7mhBP93IY4N702WaCvhkgm6iEgLUwRZGzh9Viuhk
rqZz5+obs11wq87lNij9lIoMVF+Sy6k=
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:09:21 2026 by rpki-client