Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/bab89f15-2fa6-34ec-bee7-40c71dbd99b7.roa
File:                     bab89f15-2fa6-34ec-bee7-40c71dbd99b7.roa (raw, json)
Hash identifier:          lDl0RN3iTvchTpj318b959Ph6ILcmbD8McNVnK6e+Jc=
Subject key identifier:   F9:CD:5A:F4:8F:1D:07:07:FB:5C:75:66:28:60:94:75:1D:43:AB:BD
Certificate issuer:       /CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84
Certificate serial:       010D0C9F4328584EED5215291703AE151FC9C940
Authority key identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/bab89f15-2fa6-34ec-bee7-40c71dbd99b7.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     46687
IP address blocks:        23.226.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:15:29:17:03:ae:15:1f:c9:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=7f04d2f2-b2c1-44d0-9368-4837956c58eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:11:95:92:0f:0b:6f:2e:ef:78:64:ad:66:
                    45:6f:c9:9c:e7:56:38:94:94:56:0d:6d:4c:42:d3:
                    8e:ef:12:d5:96:fd:95:d7:ab:f3:a3:a2:3f:42:b6:
                    f5:86:45:cb:b0:33:c5:cf:9a:e7:e7:8b:74:9c:11:
                    0b:ef:72:40:34:04:8d:ae:d9:7a:94:68:99:2b:bb:
                    b1:f0:42:f1:48:f0:9f:b3:5c:37:45:d0:d8:3b:e4:
                    53:0e:28:ea:da:8f:85:f9:ca:4c:4e:41:2d:5c:d4:
                    bf:af:8c:bb:c4:22:c2:c7:c7:b7:a9:e0:13:35:03:
                    a2:0c:9c:66:08:a1:6f:6b:11:42:df:b5:45:aa:ce:
                    11:52:aa:c4:2d:44:4c:f4:8a:94:33:64:81:2f:bb:
                    73:29:d2:fb:80:7c:0a:75:0d:0b:ce:e2:1f:98:6c:
                    6b:29:71:de:4a:ee:8a:5b:1e:5c:6a:9d:1a:a0:cd:
                    2e:78:f3:db:87:a5:f6:2f:35:d3:5a:69:4b:e5:a5:
                    d3:db:8a:6b:c3:33:44:0c:00:4c:51:bb:3c:f3:2c:
                    ea:a1:70:d7:58:f7:2f:76:84:98:6a:b7:42:52:2b:
                    90:7f:33:0d:b3:35:7a:2f:46:27:62:8d:ea:72:f8:
                    06:ee:a6:77:75:d7:37:4f:ce:04:d6:b7:28:ba:fc:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CD:5A:F4:8F:1D:07:07:FB:5C:75:66:28:60:94:75:1D:43:AB:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/bab89f15-2fa6-34ec-bee7-40c71dbd99b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl

            X509v3 Authority Key Identifier:
                keyid:9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:ba:28:c0:6f:ac:4e:e8:92:63:c2:54:05:7d:f1:f8:d5:
         6d:c3:db:50:d2:65:85:74:36:cc:3e:59:41:ae:40:ab:99:81:
         fc:ed:b4:9b:69:31:9e:66:88:39:27:81:df:31:27:8c:1c:88:
         32:4f:a5:e7:9b:95:a6:d0:8a:f9:23:b7:ee:28:3f:db:59:38:
         4e:26:20:84:51:8b:30:63:d3:e9:8d:b6:7c:14:a5:bc:1d:32:
         6c:32:6d:51:3b:11:e0:43:02:e7:40:a2:c7:cc:f5:61:18:f8:
         6f:de:5e:13:ce:56:ff:76:65:58:71:18:89:4a:60:d5:d5:d8:
         12:10:8e:3f:bc:6f:c9:06:fb:f5:dc:e6:75:b6:d7:86:4c:89:
         2e:6f:d8:dd:df:42:62:f5:c8:0d:bd:7c:62:11:f4:27:b9:a6:
         1c:b0:0a:d7:ba:2a:39:21:a0:72:6e:f8:f3:22:58:d6:21:ff:
         93:fe:67:92:43:cc:dd:a0:6d:a8:6e:53:9b:85:3a:4a:91:63:
         41:07:b7:59:83:48:04:b7:6b:88:c7:93:24:3b:62:5c:e7:27:
         5f:e4:5d:43:a2:bd:c2:68:54:a8:4e:a5:ae:37:8a:48:d3:1f:
         b1:10:c0:cd:65:43:8b:d9:f6:b5:56:71:1d:46:39:88:b3:bb:
         b9:3b:9b:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhUpFwOuFR/JyUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0YmFlMjItMjgyYy00YzQyLWEwNGYtZGM2YjQyNTBm
YTg0MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
N2YwNGQyZjItYjJjMS00NGQwLTkzNjgtNDgzNzk1NmM1OGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHIRlZIPC28u73hkrWZFb8mc51Y4lJRWDW1M
QtOO7xLVlv2V16vzo6I/Qrb1hkXLsDPFz5rn54t0nBEL73JANASNrtl6lGiZK7ux
8ELxSPCfs1w3RdDYO+RTDijq2o+F+cpMTkEtXNS/r4y7xCLCx8e3qeATNQOiDJxm
CKFvaxFC37VFqs4RUqrELURM9IqUM2SBL7tzKdL7gHwKdQ0LzuIfmGxrKXHeSu6K
Wx5cap0aoM0uePPbh6X2LzXTWmlL5aXT24prwzNEDABMUbs88yzqoXDXWPcvdoSY
ardCUiuQfzMNszV6L0YnYo3qcvgG7qZ3ddc3T84E1rcouvz9NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnNWvSPHQcH+1x1ZihglHUdQ6u9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRi
YWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1MGZhODQvYmFiODlmMTUtMmZhNi0z
NGVjLWJlZTctNDBjNzFkYmQ5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2U0YmFlMjItMjgyYy00YzQyLWEw
NGYtZGM2YjQyNTBmYTg0L2NlNGJhZTIyLTI4MmMtNGM0Mi1hMDRmLWRjNmI0MjUw
ZmE4NC5jcmwwHwYDVR0jBBgwFoAUmvow79tWKWX054SZrrHV1aeJXNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZi
NDI1MGZhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+JgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwGuijAb6xO6JJjwlQFffH41W3D21DSZYV0Nsw+WUGuQKuZgfzttJtp
MZ5miDkngd8xJ4wciDJPpeeblabQivkjt+4oP9tZOE4mIIRRizBj0+mNtnwUpbwd
MmwybVE7EeBDAudAosfM9WEY+G/eXhPOVv92ZVhxGIlKYNXV2BIQjj+8b8kG+/Xc
5nW214ZMiS5v2N3fQmL1yA29fGIR9Ce5phywCte6KjkhoHJu+PMiWNYh/5P+Z5JD
zN2gbahuU5uFOkqRY0EHt1mDSAS3a4jHkyQ7YlznJ1/kXUOivcJoVKhOpa43ikjT
H7EQwM1lQ4vZ9rVWcR1GOYizu7k7m9s=
-----END CERTIFICATE-----
Generated at Sat Aug 29 10:18:11 2026 by rpki-client