Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350/e5d822a5-1ae7-36bf-9e37-0d3d70124570.roa
File:                     e5d822a5-1ae7-36bf-9e37-0d3d70124570.roa (raw, json)
Hash identifier:          wOoae94UuQNmDHsNaRJ+wl0Y4fDm3CkxgWmP+V7GRGY=
Subject key identifier:   73:09:77:00:F7:8F:AB:7A:75:2E:C6:A1:97:79:71:0C:A0:BC:A6:1C
Certificate issuer:       /CN=f6366e48-021c-4353-9162-372055441350
Certificate serial:       010D0C9F4328584E2F045A62ECFEEAD141524E80
Authority key identifier: 96:2C:0A:15:BC:D3:3E:96:DB:59:3B:FA:67:79:7C:42:D2:C6:DB:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350/e5d822a5-1ae7-36bf-9e37-0d3d70124570.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     402075
IP address blocks:        23.147.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350/f6366e48-021c-4353-9162-372055441350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350/f6366e48-021c-4353-9162-372055441350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:5a:62:ec:fe:ea:d1:41:52:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6366e48-021c-4353-9162-372055441350
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=a47b4fbe-8395-4114-8504-d8f3e8c6aca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2d:a8:76:74:7b:23:17:c1:a7:64:0f:3b:a2:
                    94:f9:05:da:70:78:f7:8d:2a:41:44:16:eb:45:60:
                    ec:c0:b0:25:58:4e:90:7c:6c:33:92:b2:60:9f:52:
                    f4:6e:54:75:96:8e:d1:9f:93:1c:9a:4b:24:c1:e9:
                    28:0e:fd:02:ca:21:df:e5:85:41:a9:ff:fe:e3:33:
                    77:ae:b2:ad:de:b9:4b:49:a8:66:c1:53:17:86:51:
                    5f:4e:19:ae:44:59:1b:bc:72:b4:6f:b3:8f:bb:88:
                    be:7c:28:19:3b:ad:c1:c2:2a:78:93:ac:de:ff:a7:
                    f0:4f:f7:0e:da:04:1c:fd:87:7b:75:29:bd:90:34:
                    ad:9c:72:b2:31:18:12:36:d7:5a:79:18:99:a4:5f:
                    16:8c:6c:ab:2e:b7:6d:59:a2:a9:b3:44:38:67:69:
                    02:0a:04:f4:38:e4:9c:59:d1:cb:a4:9f:f9:fa:a2:
                    95:75:b0:91:85:76:44:f3:62:87:b6:db:ac:c4:8e:
                    f7:76:a9:d1:4d:40:95:18:02:19:94:0e:01:fb:3e:
                    fc:f4:de:53:7a:25:55:2c:04:58:04:f4:ac:8f:8e:
                    2d:53:c8:5d:85:03:9d:f4:97:a1:ba:eb:75:28:cd:
                    fe:89:9b:4c:81:9f:55:6e:89:2c:76:fa:89:0f:e5:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:09:77:00:F7:8F:AB:7A:75:2E:C6:A1:97:79:71:0C:A0:BC:A6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350/e5d822a5-1ae7-36bf-9e37-0d3d70124570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350/f6366e48-021c-4353-9162-372055441350.crl

            X509v3 Authority Key Identifier:
                keyid:96:2C:0A:15:BC:D3:3E:96:DB:59:3B:FA:67:79:7C:42:D2:C6:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f6366e48-021c-4353-9162-372055441350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b8:03:3b:9c:c6:6f:88:4e:fd:1b:05:5d:44:5f:23:15:64:
         16:37:20:d1:4f:5d:c8:c9:af:1e:83:3c:07:bc:45:5f:f1:16:
         51:3d:2d:ad:bf:ba:50:37:8f:c4:6c:7e:74:ce:82:4f:e9:cc:
         11:8f:6f:15:b2:a7:b1:89:1a:a4:6d:fc:9b:eb:eb:b8:0b:91:
         21:39:35:42:62:f1:33:f0:f4:78:17:aa:b0:c5:bd:ce:a8:37:
         60:c1:fd:31:51:85:05:7e:8a:fc:45:8d:ce:22:8a:b8:66:9c:
         bc:8e:7e:ce:ca:c0:b5:5d:df:cb:a4:de:96:22:55:d2:48:0e:
         59:ad:62:2b:9c:67:56:47:bd:33:5a:93:53:42:66:0e:50:f3:
         a4:fe:90:1e:3f:e3:f8:af:1d:3b:f4:91:56:48:ec:19:f3:e8:
         32:70:8f:fb:15:bf:47:60:b8:b3:fe:ae:c3:69:17:6b:a2:ca:
         3e:04:aa:d4:0e:8b:2f:5b:6a:b5:ef:68:2a:21:a3:5b:86:85:
         c3:6a:19:dd:ca:00:7c:4e:72:6c:a1:9a:1c:b0:5a:58:9b:a3:
         d5:88:3e:3c:48:3e:9e:90:56:33:e3:9a:63:8a:d3:54:01:47:
         82:10:91:01:ad:cd:c2:d7:28:e2:04:b2:af:56:a5:84:cd:69:
         90:83:66:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBFpi7P7q0UFSToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYzNjZlNDgtMDIxYy00MzUzLTkxNjItMzcyMDU1NDQx
MzUwMB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk
YTQ3YjRmYmUtODM5NS00MTE0LTg1MDQtZDhmM2U4YzZhY2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i2odnR7IxfBp2QPO6KU+QXacHj3jSpBRBbr
RWDswLAlWE6QfGwzkrJgn1L0blR1lo7Rn5McmkskwekoDv0CyiHf5YVBqf/+4zN3
rrKt3rlLSahmwVMXhlFfThmuRFkbvHK0b7OPu4i+fCgZO63Bwip4k6ze/6fwT/cO
2gQc/Yd7dSm9kDStnHKyMRgSNtdaeRiZpF8WjGyrLrdtWaKps0Q4Z2kCCgT0OOSc
WdHLpJ/5+qKVdbCRhXZE82KHttusxI73dqnRTUCVGAIZlA4B+z789N5TeiVVLARY
BPSsj44tU8hdhQOd9Jehuut1KM3+iZtMgZ9VboksdvqJD+WmcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMJdwD3j6t6dS7GoZd5cQygvKYcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNjM2
NmU0OC0wMjFjLTQzNTMtOTE2Mi0zNzIwNTU0NDEzNTAvZTVkODIyYTUtMWFlNy0z
NmJmLTllMzctMGQzZDcwMTI0NTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjYzNjZlNDgtMDIxYy00MzUzLTkx
NjItMzcyMDU1NDQxMzUwL2Y2MzY2ZTQ4LTAyMWMtNDM1My05MTYyLTM3MjA1NTQ0
MTM1MC5jcmwwHwYDVR0jBBgwFoAUliwKFbzTPpbbWTv6Z3l8QtLG2w4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNjM2NmU0OC0wMjFjLTQzNTMtOTE2Mi0zNzIw
NTU0NDEzNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHy4Azucxm+ITv0bBV1EXyMVZBY3INFPXcjJrx6DPAe8RV/xFlE9La2/
ulA3j8RsfnTOgk/pzBGPbxWyp7GJGqRt/Jvr67gLkSE5NUJi8TPw9HgXqrDFvc6o
N2DB/TFRhQV+ivxFjc4iirhmnLyOfs7KwLVd38uk3pYiVdJIDlmtYiucZ1ZHvTNa
k1NCZg5Q86T+kB4/4/ivHTv0kVZI7Bnz6DJwj/sVv0dguLP+rsNpF2uiyj4EqtQO
iy9barXvaCoho1uGhcNqGd3KAHxOcmyhmhywWlibo9WIPjxIPp6QVjPjmmOK01QB
R4IQkQGtzcLXKOIEsq9WpYTNaZCDZr0=
-----END CERTIFICATE-----
Generated at Sun Jul 12 23:53:08 2026 by rpki-client