Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/18f1ebd1-3c4e-31ef-8085-038d0ee1a2b2.roa
File:                     18f1ebd1-3c4e-31ef-8085-038d0ee1a2b2.roa (raw, json)
Hash identifier:          iMmNCbFYYuz/+CBAyx//txOVkY7Xmw2VGb4sm2OpAKQ=
Subject key identifier:   0F:C3:49:4F:51:EE:89:23:77:08:B9:50:D2:D5:F6:66:03:B6:DF:7B
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5E62DAB724F6B3E9E7F64360
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/18f1ebd1-3c4e-31ef-8085-038d0ee1a2b2.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19148
IP address blocks:        23.81.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:da:b7:24:f6:b3:e9:e7:f6:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=495fc47e-df8e-41e5-9fba-8b299717c430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:13:1e:dc:5a:47:f4:1c:ca:bc:12:0f:b0:
                    10:fd:78:df:70:9d:a1:7d:cd:05:53:e4:dd:cb:9e:
                    da:ac:19:70:9a:f1:25:bf:71:1a:8b:db:c3:3b:f7:
                    96:d1:71:29:96:ab:2a:db:73:d3:c8:98:01:d4:74:
                    1b:94:1c:ae:16:cd:48:95:06:59:bd:43:8d:7e:47:
                    ad:bf:25:92:4a:47:17:3b:c2:d3:d6:56:af:3c:d8:
                    96:0f:60:ca:ed:4c:42:0b:a8:95:92:0b:54:54:e9:
                    58:68:80:1c:00:f4:1d:72:5d:95:8b:62:76:15:d1:
                    87:97:88:0d:16:e3:a3:ec:90:58:2a:47:16:93:e1:
                    45:60:53:0c:38:e2:08:a0:e9:fd:88:60:24:4b:87:
                    2d:37:49:7f:90:31:28:16:70:2a:0b:a2:da:62:dc:
                    ed:41:c1:58:75:b8:77:91:99:f6:eb:e2:b6:a3:89:
                    d7:5f:a5:d5:43:62:4f:2e:69:1b:fc:af:55:6e:26:
                    c2:6c:a5:82:c3:c7:2c:06:4e:a4:22:41:ea:c6:86:
                    9d:7e:82:ac:6e:f9:72:78:52:e5:17:94:7d:a3:1d:
                    11:9c:47:d4:d1:7e:0f:71:54:fc:d8:64:f5:9d:89:
                    ed:f8:09:13:da:df:a9:a5:6b:20:fb:25:96:12:a2:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C3:49:4F:51:EE:89:23:77:08:B9:50:D2:D5:F6:66:03:B6:DF:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/18f1ebd1-3c4e-31ef-8085-038d0ee1a2b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.81.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9a:e2:f4:13:c2:6f:e5:dd:a1:c4:8b:3e:b0:bf:07:e1:23:
         14:23:0b:ee:71:9f:b8:18:01:38:29:9f:1f:e7:12:79:5b:3c:
         10:0c:4f:54:e3:57:53:2e:62:c6:a8:a7:66:73:d9:a9:97:a5:
         0f:d2:27:9e:4c:5f:1e:93:36:e0:4c:cb:eb:b8:3e:6f:a4:c7:
         86:ef:e5:40:21:50:49:f7:a9:3e:69:52:6c:a9:1b:6e:b8:40:
         37:0d:18:a9:d3:10:44:c2:3f:26:1f:a4:c4:95:49:ec:7b:d4:
         29:8d:5c:65:f7:b9:de:30:1f:b5:0a:e0:28:94:c6:f1:11:cd:
         1e:6d:51:6c:62:78:1d:98:53:e2:6a:48:9b:a9:8e:ba:50:8d:
         88:2c:f0:a8:7b:7b:f6:5e:e4:10:8c:55:17:1b:29:87:08:32:
         58:72:aa:89:c0:5a:6d:7b:48:73:5b:07:b9:b3:4c:5d:e7:2b:
         c6:4b:84:a8:3a:0d:9d:44:14:80:70:ee:46:5b:be:d6:19:2e:
         bf:8b:92:33:a6:a5:00:4d:d1:b6:bf:3c:22:26:de:2c:ae:54:
         9b:15:16:32:14:b0:b9:fc:aa:8e:b3:02:46:8a:ce:1e:41:cc:
         23:15:cd:53:b3:12:da:13:e0:1f:5a:2e:26:69:99:73:0a:de:
         64:d1:62:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtq3JPaz6ef2Q2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
NDk1ZmM0N2UtZGY4ZS00MWU1LTlmYmEtOGIyOTk3MTdjNDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrwTHtxaR/QcyrwSD7AQ/XjfcJ2hfc0FU+Td
y57arBlwmvElv3Eai9vDO/eW0XEplqsq23PTyJgB1HQblByuFs1IlQZZvUONfket
vyWSSkcXO8LT1lavPNiWD2DK7UxCC6iVkgtUVOlYaIAcAPQdcl2Vi2J2FdGHl4gN
FuOj7JBYKkcWk+FFYFMMOOIIoOn9iGAkS4ctN0l/kDEoFnAqC6LaYtztQcFYdbh3
kZn26+K2o4nXX6XVQ2JPLmkb/K9VbibCbKWCw8csBk6kIkHqxoadfoKsbvlyeFLl
F5R9ox0RnEfU0X4PcVT82GT1nYnt+AkT2t+ppWsg+yWWEqIq4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/DSU9R7okjdwi5UNLV9mYDtt97MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMThmMWViZDEtM2M0ZS0z
MWVmLTgwODUtMDM4ZDBlZTFhMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1GsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2a4vQTwm/l3aHEiz6wvwfhIxQjC+5xn7gYATgpnx/nEnlbPBAMT1Tj
V1MuYsaop2Zz2amXpQ/SJ55MXx6TNuBMy+u4Pm+kx4bv5UAhUEn3qT5pUmypG264
QDcNGKnTEETCPyYfpMSVSex71CmNXGX3ud4wH7UK4CiUxvERzR5tUWxieB2YU+Jq
SJupjrpQjYgs8Kh7e/Ze5BCMVRcbKYcIMlhyqonAWm17SHNbB7mzTF3nK8ZLhKg6
DZ1EFIBw7kZbvtYZLr+LkjOmpQBN0ba/PCIm3iyuVJsVFjIUsLn8qo6zAkaKzh5B
zCMVzVOzEtoT4B9aLiZpmXMK3mTRYoo=
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:28 2026 by rpki-client