Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7951ccae-b199-3691-8338-2c0303a4d96d.roa
File:                     7951ccae-b199-3691-8338-2c0303a4d96d.roa (raw, json)
Hash identifier:          XmPcVPxO7b+fVrHaQX1wikDYKCEVMepi4WyrbaBgjvo=
Subject key identifier:   E5:CA:4C:A6:46:C0:40:44:CF:0C:5B:69:19:01:37:91:28:A6:8F:F4
Certificate issuer:       /CN=7aebe767-bae5-4599-9f64-207d0268f48c
Certificate serial:       010D0C9F4328584DFBD5EC27C8889D139DF48C80
Authority key identifier: B6:65:27:7C:E0:48:B4:D3:52:CC:88:47:97:6D:0A:57:BB:78:65:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7951ccae-b199-3691-8338-2c0303a4d96d.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     8796
IP address blocks:        23.166.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ec:27:c8:88:9d:13:9d:f4:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aebe767-bae5-4599-9f64-207d0268f48c
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=19a80d5e-b763-469a-9cd1-5ab4388f2ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:d1:33:4d:b7:54:4a:f2:01:f4:d9:49:c9:
                    af:52:26:02:ef:b6:c8:d4:14:9c:de:f9:96:71:e0:
                    91:94:df:74:4a:c6:51:a2:2e:fd:16:4d:e2:d0:90:
                    20:42:98:49:ce:b9:ac:99:bf:18:e0:05:6e:f7:f3:
                    db:93:7d:aa:c3:f4:f9:71:7f:70:ce:3d:d3:e3:c0:
                    e3:f7:d0:b6:9e:6a:d5:eb:60:a1:e8:fa:78:2d:a5:
                    6b:cb:01:ea:af:d2:90:9f:35:3c:31:da:10:10:98:
                    16:75:d7:33:9e:88:b2:05:b9:71:43:f9:f8:87:8d:
                    74:84:8c:1e:96:25:63:72:33:0e:75:68:15:b6:ed:
                    37:25:f0:15:11:c6:1a:22:7a:cc:29:a8:43:5c:3d:
                    bb:3b:a9:45:53:37:c1:29:ad:c3:13:bd:e1:09:2b:
                    76:da:67:04:0d:22:7a:dd:51:44:47:eb:6b:8a:63:
                    c1:60:39:3e:85:ce:42:6b:32:d1:ee:01:f2:2c:da:
                    f1:72:67:fd:8b:6f:3a:e9:6d:69:d4:b4:87:81:f3:
                    77:ac:b0:f9:21:41:1c:22:ee:03:26:da:94:45:3c:
                    1f:fd:34:28:c1:96:bb:d9:c4:ea:32:cc:f2:20:d6:
                    44:7a:a9:c1:cd:58:62:4d:0e:77:ca:ab:3b:44:a9:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CA:4C:A6:46:C0:40:44:CF:0C:5B:69:19:01:37:91:28:A6:8F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7951ccae-b199-3691-8338-2c0303a4d96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.crl

            X509v3 Authority Key Identifier:
                keyid:B6:65:27:7C:E0:48:B4:D3:52:CC:88:47:97:6D:0A:57:BB:78:65:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f0:52:ef:67:f2:e2:1d:1c:2b:d7:27:1f:ab:75:ca:54:76:
         63:e5:7c:b1:22:06:7c:69:cb:fc:4e:c1:3d:fe:e1:84:6c:73:
         ca:b5:d0:87:5d:f1:fd:54:34:e3:2d:77:6a:c3:53:88:f5:d7:
         fd:1d:87:6e:4e:45:2e:a5:f9:64:dd:53:a3:9e:f4:6e:7b:01:
         b9:1e:dc:93:c0:f5:cd:1e:21:bd:ee:28:00:b6:37:73:9a:35:
         3a:f0:9f:62:32:56:95:4e:4c:60:d0:6a:0f:19:15:4c:fe:aa:
         31:03:9e:99:4e:f8:84:f7:d2:9b:56:74:16:15:7f:5b:33:c7:
         36:44:a4:9f:92:58:10:58:e6:81:00:15:b0:95:9a:d1:b7:28:
         42:e4:9a:34:22:42:c9:80:84:41:91:6e:25:5b:f9:d0:b3:f2:
         94:c1:03:44:c7:23:9c:d3:b5:5c:6a:cf:14:60:12:25:69:be:
         59:ab:93:7e:b6:c1:07:b6:c2:d6:b2:68:bb:c6:60:a3:20:24:
         8c:c7:de:ca:c5:dd:4e:cd:45:77:47:87:6d:6e:d5:54:40:9e:
         81:2b:76:46:2f:0f:e5:b8:68:00:0d:e7:6e:28:0c:f0:5d:b9:
         1d:e0:c6:e1:55:78:fc:d4:bd:5a:00:f5:e2:4d:e1:c5:10:29:
         cf:72:b9:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371ewnyIidE530jIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FlYmU3NjctYmFlNS00NTk5LTlmNjQtMjA3ZDAyNjhm
NDhjMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
MTlhODBkNWUtYjc2My00NjlhLTljZDEtNWFiNDM4OGYyY2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt3RM023VEryAfTZScmvUiYC77bI1BSc3vmW
ceCRlN90SsZRoi79Fk3i0JAgQphJzrmsmb8Y4AVu9/Pbk32qw/T5cX9wzj3T48Dj
99C2nmrV62Ch6Pp4LaVrywHqr9KQnzU8MdoQEJgWddcznoiyBblxQ/n4h410hIwe
liVjcjMOdWgVtu03JfAVEcYaInrMKahDXD27O6lFUzfBKa3DE73hCSt22mcEDSJ6
3VFER+trimPBYDk+hc5CazLR7gHyLNrxcmf9i2866W1p1LSHgfN3rLD5IUEcIu4D
JtqURTwf/TQowZa72cTqMszyINZEeqnBzVhiTQ53yqs7RKkhDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXKTKZGwEBEzwxbaRkBN5Eopo/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YWVi
ZTc2Ny1iYWU1LTQ1OTktOWY2NC0yMDdkMDI2OGY0OGMvNzk1MWNjYWUtYjE5OS0z
NjkxLTgzMzgtMmMwMzAzYTRkOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2FlYmU3NjctYmFlNS00NTk5LTlm
NjQtMjA3ZDAyNjhmNDhjLzdhZWJlNzY3LWJhZTUtNDU5OS05ZjY0LTIwN2QwMjY4
ZjQ4Yy5jcmwwHwYDVR0jBBgwFoAUtmUnfOBItNNSzIhHl20KV7t4ZXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YWViZTc2Ny1iYWU1LTQ1OTktOWY2NC0yMDdk
MDI2OGY0OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6aoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbwUu9n8uIdHCvXJx+rdcpUdmPlfLEiBnxpy/xOwT3+4YRsc8q10Idd
8f1UNOMtd2rDU4j11/0dh25ORS6l+WTdU6Oe9G57Abke3JPA9c0eIb3uKAC2N3Oa
NTrwn2IyVpVOTGDQag8ZFUz+qjEDnplO+IT30ptWdBYVf1szxzZEpJ+SWBBY5oEA
FbCVmtG3KELkmjQiQsmAhEGRbiVb+dCz8pTBA0THI5zTtVxqzxRgEiVpvlmrk362
wQe2wtayaLvGYKMgJIzH3srF3U7NRXdHh21u1VRAnoErdkYvD+W4aAAN524oDPBd
uR3gxuFVePzUvVoA9eJN4cUQKc9yuf8=
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:33:03 2026 by rpki-client