Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa
File:                     04873bbe-f9c7-3d10-aba1-7b80bca15222.roa (raw, json)
Hash identifier:          kEUcF0Nvdp6TnTJNlxM5Rl2RObYeEGnz2JjP5Z7T2fA=
Subject key identifier:   46:95:87:49:63:62:DB:97:13:7C:27:86:7D:AF:0A:E6:A0:4A:79:6C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C75B9469ED6CA6BBCE5CC0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     205544
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5b:94:69:ed:6c:a6:bb:ce:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=15fedf24-715a-4493-b920-56107a2cfa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3e:ae:d4:76:da:a1:d3:2a:d4:08:f6:c6:ff:
                    b0:45:0f:fb:40:29:64:09:3a:c0:6d:61:29:38:0b:
                    a1:1d:14:54:93:d6:3f:4b:d6:c4:74:01:1a:82:c2:
                    d9:60:8c:c7:7e:32:3e:66:28:59:7a:36:aa:62:44:
                    5e:b7:ea:3c:64:00:5c:67:8d:2d:a0:04:12:e5:31:
                    49:64:16:a9:f6:7b:30:e0:f0:68:c3:65:90:5b:ff:
                    b4:59:97:32:5a:ce:bc:ff:72:1f:e9:79:cb:35:09:
                    30:de:5a:e9:01:3c:b8:70:a1:04:bc:c8:49:be:83:
                    48:09:5f:a2:6d:11:34:1f:f0:a1:d3:8a:44:05:a0:
                    16:43:c0:c1:7b:e7:e2:be:5c:df:1e:b4:cc:34:1f:
                    d5:ed:d7:74:b2:65:aa:48:91:88:34:ef:da:40:5b:
                    86:6a:1c:45:40:9e:dc:50:12:f5:87:ac:87:62:93:
                    8f:47:bd:97:a3:9d:7c:e4:f5:f8:d6:5f:f1:11:4b:
                    d1:6e:b3:2b:bb:4d:d4:8f:c3:50:8e:9a:86:2f:f0:
                    8a:ef:08:ae:45:5c:13:31:cd:fd:dd:f4:44:b8:71:
                    be:28:58:a4:a5:8c:db:f2:a1:61:86:b9:5f:56:54:
                    fa:30:6f:c8:f2:ea:ff:50:dd:8a:bc:1b:75:0b:2e:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:95:87:49:63:62:DB:97:13:7C:27:86:7D:AF:0A:E6:A0:4A:79:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:0a:de:19:b3:2b:d2:28:36:21:f8:c3:ca:67:33:d6:e3:
         9a:a0:36:37:8c:1b:08:c3:b7:ee:9b:f1:03:bd:49:93:f4:87:
         89:6f:c3:1d:b5:24:26:2d:00:7f:ec:2a:e6:57:24:bc:53:0f:
         4a:99:0d:f1:70:a5:a8:c3:ac:91:10:48:bb:38:a6:38:ed:0a:
         9d:33:4d:12:bd:d5:37:36:c0:07:bf:82:2d:7a:4c:14:45:98:
         d3:b7:e5:51:d0:65:a5:7d:68:be:ea:b4:bd:a9:3c:8f:36:85:
         ce:6b:5f:65:09:0f:75:d9:fd:5c:6a:e2:53:5c:ca:f8:83:f3:
         d8:dc:de:4b:37:b3:ef:45:1e:86:d9:36:c2:37:c5:be:b3:b7:
         2a:29:e9:90:48:9e:42:f4:6d:6b:11:ce:ef:f9:81:6d:d7:91:
         9a:2b:7c:a3:cc:29:a9:99:c9:6b:95:0b:e9:f8:94:51:80:dc:
         c6:1b:4b:4f:a0:e5:4d:bb:d1:56:0b:d4:fb:86:f0:34:84:43:
         fa:e2:21:6c:55:b9:34:87:7c:36:46:79:71:ef:5e:be:2f:07:
         03:a0:b9:ba:e4:59:6b:7f:2b:3a:96:3d:dd:87:2b:2f:ae:d3:
         73:05:24:95:d8:f7:88:a2:e7:01:b1:5c:25:69:a8:4b:d3:51:
         73:6d:a0:3b
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7Zx1uUae1sprvOXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
MTVmZWRmMjQtNzE1YS00NDkzLWI5MjAtNTYxMDdhMmNmYTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij6u1HbaodMq1Aj2xv+wRQ/7QClkCTrAbWEp
OAuhHRRUk9Y/S9bEdAEagsLZYIzHfjI+ZihZejaqYkRet+o8ZABcZ40toAQS5TFJ
ZBap9nsw4PBow2WQW/+0WZcyWs68/3If6XnLNQkw3lrpATy4cKEEvMhJvoNICV+i
bRE0H/Ch04pEBaAWQ8DBe+fivlzfHrTMNB/V7dd0smWqSJGINO/aQFuGahxFQJ7c
UBL1h6yHYpOPR72Xo5185PX41l/xEUvRbrMru03Uj8NQjpqGL/CK7wiuRVwTMc39
3fREuHG+KFikpYzb8qFhhrlfVlT6MG/I8ur/UN2KvBt1Cy5Z/wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFEaVh0ljYtuXE3wnhn2vCuagSnlsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDQ4NzNiYmUtZjljNy0z
ZDEwLWFiYTEtN2I4MGJjYTE1MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E
AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV/UK3hmzK9IoNiH4w8pnM9bjmqA2N4wb
CMO37pvxA71Jk/SHiW/DHbUkJi0Af+wq5lckvFMPSpkN8XClqMOskRBIuzimOO0K
nTNNEr3VNzbAB7+CLXpMFEWY07flUdBlpX1ovuq0vak8jzaFzmtfZQkPddn9XGri
U1zK+IPz2NzeSzez70Uehtk2wjfFvrO3KinpkEieQvRtaxHO7/mBbdeRmit8o8wp
qZnJa5UL6fiUUYDcxhtLT6DlTbvRVgvU+4bwNIRD+uIhbFW5NId8NkZ5ce9evi8H
A6C5uuRZa38rOpY93YcrL67TcwUkldj3iKLnAbFcJWmoS9NRc22gOw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 18:23:48 2026 by rpki-client