Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa
File:                     5c8612b7-ca90-3cff-8325-583b4fae37e4.roa (raw, json)
Hash identifier:          LduG+VFFkp0e4tOjvF9fDrvBuNHQ1bTY0Hfg922mN1I=
Subject key identifier:   B0:48:2B:06:F6:26:41:19:CC:7E:97:AC:98:93:C5:36:5A:99:FC:A0
Certificate issuer:       /CN=a08a8360-966b-4e4f-9006-479f72f36651
Certificate serial:       010D0C9F4328584EAE819AE7F0AC97A6D84B0700
Authority key identifier: 3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     400642
IP address blocks:        23.151.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:9a:e7:f0:ac:97:a6:d8:4b:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08a8360-966b-4e4f-9006-479f72f36651
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=0087955e-bc8e-4e19-8872-a19d4b56260a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:ed:5d:6f:05:34:71:67:19:cd:ed:dc:d1:
                    96:ed:e8:e0:c6:21:0e:a8:7a:96:82:54:bf:e3:7b:
                    42:41:b5:32:38:11:6e:bb:f1:ce:9b:30:8b:5d:45:
                    cc:33:b1:4e:3b:81:d6:25:e5:8f:aa:4e:ef:60:25:
                    46:11:f0:76:91:c5:c5:ef:8a:36:ba:9d:7c:16:bb:
                    06:85:a4:e7:d9:4e:7b:d3:c8:ba:f7:57:fd:f4:21:
                    5f:98:35:96:47:3d:f8:f0:9c:dc:97:92:5f:5c:17:
                    bb:60:9f:29:89:d6:51:e4:ca:1e:8c:0d:f7:a7:ef:
                    c5:6f:a9:0c:4f:f3:d0:1e:46:e7:71:17:59:b9:42:
                    c0:48:41:2b:e8:27:55:58:b2:dc:fd:0d:67:1f:1e:
                    8b:1c:4e:d8:c8:78:1d:f7:6e:31:21:20:0f:aa:68:
                    76:50:94:ca:a2:b2:b9:5a:f0:ae:43:0d:50:ef:e8:
                    15:65:e9:14:fb:b0:0b:fa:29:f8:d1:ef:20:f2:43:
                    4a:2f:03:8c:47:b8:71:a4:08:d1:6f:6d:99:9b:48:
                    8b:89:91:3c:a3:ef:a4:9c:41:b0:3b:71:48:ff:b2:
                    df:9b:3c:b0:5d:15:e6:9f:38:04:96:2b:e7:12:70:
                    b2:fb:c5:c5:3f:2a:bf:1f:8d:ae:66:7a:42:56:9b:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:2B:06:F6:26:41:19:CC:7E:97:AC:98:93:C5:36:5A:99:FC:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl

            X509v3 Authority Key Identifier:
                keyid:3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:07:68:48:62:7f:15:d3:ae:13:55:8b:4b:63:63:33:4a:8e:
         e2:6e:c7:4f:4c:33:93:0a:a2:66:3a:5c:23:2a:a1:3b:76:c4:
         0c:6f:30:4e:af:45:ac:87:aa:9b:9c:bd:94:50:97:01:ba:25:
         d4:98:8b:53:b4:e3:7f:80:2b:7f:44:40:68:4a:61:76:4a:05:
         9a:64:a9:aa:c9:5d:76:1f:70:08:1f:80:80:d5:bb:0c:de:ad:
         fd:29:bf:4c:a5:6e:4c:45:8b:34:83:99:18:3a:81:32:1d:a1:
         6d:b4:21:ae:8c:09:18:34:40:ee:22:7f:d9:74:d6:8f:1c:bf:
         36:3e:82:2a:61:94:8f:8d:c2:2b:11:ea:1b:98:66:64:5d:7f:
         89:5b:7e:09:43:4d:c7:f5:f2:c9:67:31:4f:73:da:55:1f:60:
         37:63:3a:3e:83:43:ab:2f:1c:94:75:55:57:76:5d:9a:93:ea:
         25:6b:c8:88:82:ad:17:25:ba:46:0b:4a:78:c8:b3:51:a7:ee:
         4b:1a:d2:e1:ad:ee:15:53:8a:7d:7c:69:fd:fa:52:30:1d:a3:
         17:9c:38:12:b2:00:16:9e:2b:a5:2e:6f:cf:3a:2f:b7:e0:c2:
         49:dd:1d:86:d4:9b:6e:6e:e3:8f:86:49:b9:bc:71:c5:fe:38:
         fc:32:76:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZrn8KyXpthLBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA4YTgzNjAtOTY2Yi00ZTRmLTkwMDYtNDc5ZjcyZjM2
NjUxMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
MDA4Nzk1NWUtYmM4ZS00ZTE5LTg4NzItYTE5ZDRiNTYyNjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2XtXW8FNHFnGc3t3NGW7ejgxiEOqHqWglS/
43tCQbUyOBFuu/HOmzCLXUXMM7FOO4HWJeWPqk7vYCVGEfB2kcXF74o2up18FrsG
haTn2U5708i691f99CFfmDWWRz348Jzcl5JfXBe7YJ8pidZR5MoejA33p+/Fb6kM
T/PQHkbncRdZuULASEEr6CdVWLLc/Q1nHx6LHE7YyHgd924xISAPqmh2UJTKorK5
WvCuQw1Q7+gVZekU+7AL+in40e8g8kNKLwOMR7hxpAjRb22Zm0iLiZE8o++knEGw
O3FI/7LfmzywXRXmnzgElivnEnCy+8XFPyq/H42uZnpCVpsz6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBIKwb2JkEZzH6XrJiTxTZamfygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMDhh
ODM2MC05NjZiLTRlNGYtOTAwNi00NzlmNzJmMzY2NTEvNWM4NjEyYjctY2E5MC0z
Y2ZmLTgzMjUtNTgzYjRmYWUzN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTA4YTgzNjAtOTY2Yi00ZTRmLTkw
MDYtNDc5ZjcyZjM2NjUxL2EwOGE4MzYwLTk2NmItNGU0Zi05MDA2LTQ3OWY3MmYz
NjY1MS5jcmwwHwYDVR0jBBgwFoAUO25TRX1m8bQoFArGNDa4u5cZ0oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMDhhODM2MC05NjZiLTRlNGYtOTAwNi00Nzlm
NzJmMzY2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgHaEhifxXTrhNVi0tjYzNKjuJux09MM5MKomY6XCMqoTt2xAxvME6v
RayHqpucvZRQlwG6JdSYi1O043+AK39EQGhKYXZKBZpkqarJXXYfcAgfgIDVuwze
rf0pv0ylbkxFizSDmRg6gTIdoW20Ia6MCRg0QO4if9l01o8cvzY+giphlI+NwisR
6huYZmRdf4lbfglDTcf18slnMU9z2lUfYDdjOj6DQ6svHJR1VVd2XZqT6iVryIiC
rRclukYLSnjIs1Gn7ksa0uGt7hVTin18af36UjAdoxecOBKyABaeK6Uub886L7fg
wkndHYbUm25u44+GSbm8ccX+OPwydkM=
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:58 2026 by rpki-client