Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/911b81d6-064e-3073-b257-5ae82f6799f2.roa
File:                     911b81d6-064e-3073-b257-5ae82f6799f2.roa (raw, json)
Hash identifier:          uDkbBLueDVjZ2ccux56JWIy4P8QSUEau7/D2WCcUn6Q=
Subject key identifier:   6B:1D:1D:52:48:7E:AF:6C:92:4E:D6:5A:B8:C8:AC:01:78:84:F9:AF
Certificate issuer:       /CN=c74e641d-a8b6-48e3-9084-066627b0310f
Certificate serial:       010D0C9F4328584D67DFB4926DF5766AE468B860
Authority key identifier: 57:D7:86:B5:49:7A:C5:76:6A:AF:DA:BF:A6:E4:49:AC:BE:2E:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/911b81d6-064e-3073-b257-5ae82f6799f2.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     979
IP address blocks:        23.144.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:b4:92:6d:f5:76:6a:e4:68:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74e641d-a8b6-48e3-9084-066627b0310f
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=532616fc-8cc2-46a9-85ff-473e2df1cd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:8f:f0:2e:3d:51:71:f0:96:db:1a:26:c2:
                    67:ae:60:9a:dd:79:32:dd:c8:61:b2:f4:f3:6b:13:
                    e6:a3:79:2e:39:ed:c4:db:10:52:3f:e5:db:e2:55:
                    96:d6:d3:a1:31:8f:db:7c:19:a0:86:8f:f8:68:52:
                    26:2e:7e:10:02:00:7a:fa:4a:08:6c:4e:f8:68:f1:
                    bf:a5:8f:6b:c9:82:bb:35:56:25:6a:5f:00:97:65:
                    57:df:15:c9:52:2a:cf:4f:7a:d6:69:ed:70:d5:ce:
                    a7:2a:a8:f9:fa:1d:44:e6:22:29:80:b6:eb:90:05:
                    fc:56:a1:a5:2e:ae:8b:af:fd:6a:04:85:cf:fd:64:
                    77:3d:02:2d:a7:1b:9d:6c:04:8c:bf:9c:9d:22:a8:
                    c2:66:eb:3e:fd:ef:99:18:47:bc:b8:bf:e3:11:41:
                    48:ef:a6:f8:d6:8f:e4:99:d9:bb:9f:81:4e:04:ce:
                    6d:5a:61:49:33:d7:f7:8b:70:0a:b5:34:6e:f4:c0:
                    41:ac:e7:79:17:ad:78:2d:b9:45:c4:f4:be:b4:e1:
                    e5:e6:7a:ee:2e:17:40:d8:ae:18:da:81:3f:ac:2c:
                    4b:03:da:c0:94:b8:62:e0:02:b4:39:b2:69:40:43:
                    de:f7:ff:04:9a:b9:17:8e:97:eb:33:53:10:5f:6c:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:1D:52:48:7E:AF:6C:92:4E:D6:5A:B8:C8:AC:01:78:84:F9:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/911b81d6-064e-3073-b257-5ae82f6799f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.crl

            X509v3 Authority Key Identifier:
                keyid:57:D7:86:B5:49:7A:C5:76:6A:AF:DA:BF:A6:E4:49:AC:BE:2E:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:83:a7:cf:d3:6c:a0:30:46:bc:43:1f:d0:e9:15:62:2b:4e:
         cf:02:28:43:08:d4:39:90:27:8a:4a:97:19:18:ed:55:2f:2b:
         d5:d3:04:74:b1:71:f1:75:f0:cd:49:ca:81:63:e8:2e:70:ad:
         35:1b:70:18:c6:0c:ac:b4:9f:05:ce:28:39:92:8a:f5:a5:72:
         4b:66:dc:52:4d:44:f0:bc:04:50:c6:93:df:f8:dd:a7:34:54:
         76:b1:70:06:d2:a7:f7:31:31:ce:b8:d8:e5:fe:f3:4c:8d:99:
         01:df:e0:cb:c5:ab:ef:8a:53:fd:dd:35:92:98:c9:3d:a6:64:
         08:fe:4f:54:ac:60:a4:a4:93:82:4a:18:f3:9d:1e:e2:50:a0:
         00:41:b3:d1:0f:30:52:9e:47:47:1f:0c:f6:bc:8c:5c:e2:f6:
         39:55:15:fe:db:21:0d:19:11:fb:23:ef:56:24:4d:32:fb:67:
         d6:4d:8c:72:20:5d:9a:76:02:9b:0b:03:48:23:90:51:8b:c2:
         67:7c:8f:ec:e1:32:0d:73:d6:aa:3b:fc:3f:f8:b0:57:a0:98:
         6b:7c:fb:2a:94:0c:69:5a:17:76:ed:be:f9:72:df:cc:55:c5:
         07:c9:86:98:7e:7d:15:1b:b3:2f:e2:39:64:7f:23:e3:0d:b0:
         85:2d:85:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37SSbfV2auRouGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc0ZTY0MWQtYThiNi00OGUzLTkwODQtMDY2NjI3YjAz
MTBmMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
NTMyNjE2ZmMtOGNjMi00NmE5LTg1ZmYtNDczZTJkZjFjZDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbeP8C49UXHwltsaJsJnrmCa3Xky3chhsvTz
axPmo3kuOe3E2xBSP+Xb4lWW1tOhMY/bfBmgho/4aFImLn4QAgB6+koIbE74aPG/
pY9ryYK7NVYlal8Al2VX3xXJUirPT3rWae1w1c6nKqj5+h1E5iIpgLbrkAX8VqGl
Lq6Lr/1qBIXP/WR3PQItpxudbASMv5ydIqjCZus+/e+ZGEe8uL/jEUFI76b41o/k
mdm7n4FOBM5tWmFJM9f3i3AKtTRu9MBBrOd5F614LblFxPS+tOHl5nruLhdA2K4Y
2oE/rCxLA9rAlLhi4AK0ObJpQEPe9/8EmrkXjpfrM1MQX2z6XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsdHVJIfq9skk7WWrjIrAF4hPmvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzRl
NjQxZC1hOGI2LTQ4ZTMtOTA4NC0wNjY2MjdiMDMxMGYvOTExYjgxZDYtMDY0ZS0z
MDczLWIyNTctNWFlODJmNjc5OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzc0ZTY0MWQtYThiNi00OGUzLTkw
ODQtMDY2NjI3YjAzMTBmL2M3NGU2NDFkLWE4YjYtNDhlMy05MDg0LTA2NjYyN2Iw
MzEwZi5jcmwwHwYDVR0jBBgwFoAUV9eGtUl6xXZqr9q/puRJrL4u62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzRlNjQxZC1hOGI2LTQ4ZTMtOTA4NC0wNjY2
MjdiMDMxMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5B8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKDp8/TbKAwRrxDH9DpFWIrTs8CKEMI1DmQJ4pKlxkY7VUvK9XTBHSx
cfF18M1JyoFj6C5wrTUbcBjGDKy0nwXOKDmSivWlcktm3FJNRPC8BFDGk9/43ac0
VHaxcAbSp/cxMc642OX+80yNmQHf4MvFq++KU/3dNZKYyT2mZAj+T1SsYKSkk4JK
GPOdHuJQoABBs9EPMFKeR0cfDPa8jFzi9jlVFf7bIQ0ZEfsj71YkTTL7Z9ZNjHIg
XZp2ApsLA0gjkFGLwmd8j+zhMg1z1qo7/D/4sFegmGt8+yqUDGlaF3btvvly38xV
xQfJhph+fRUbsy/iOWR/I+MNsIUthV0=
-----END CERTIFICATE-----
Generated at Mon Apr 13 09:16:05 2026 by rpki-client