Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/726ad7bd-7230-3497-9a78-9ba5569f9883.roa
File:                     726ad7bd-7230-3497-9a78-9ba5569f9883.roa (raw, json)
Hash identifier:          qIfBn3qayrXDOZYt23KGb7Pi2Mv/nk7KHRLo6l5fW78=
Subject key identifier:   5C:FE:C1:2D:71:42:5A:FA:3B:C7:93:D9:FA:08:B9:7C:CA:6F:9D:B0
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5CFD54636468AAD402CAD8C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/726ad7bd-7230-3497-9a78-9ba5569f9883.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     7203
IP address blocks:        23.82.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:54:63:64:68:aa:d4:02:ca:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=d36cff79-dc78-4d20-a9e4-04f75d2c6bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6f:0f:a7:23:b4:63:3a:03:8a:67:aa:39:5e:
                    9b:cf:de:38:29:fb:72:9d:d6:43:06:50:5d:f4:7b:
                    4b:be:57:d1:c9:dc:1e:42:e8:01:b3:90:cf:1e:67:
                    34:53:2b:b1:e8:3f:0c:52:2f:40:6a:31:34:e7:c2:
                    18:ab:7d:a2:ea:e4:f3:d2:bc:08:66:0a:5e:b5:95:
                    c3:a8:6f:24:3c:f2:44:07:72:7a:ca:54:cd:fa:f0:
                    41:cf:ff:1b:13:d1:4c:cb:83:91:18:7e:ca:b8:8d:
                    69:69:d1:55:65:8d:63:39:74:1d:65:a9:aa:64:63:
                    78:4d:3e:05:9b:f8:fa:79:b6:d3:f4:28:2e:91:cb:
                    27:34:9c:32:ae:ed:cb:6a:98:e9:95:68:e8:bd:6f:
                    88:65:a5:f3:a9:26:0f:f1:14:31:17:22:43:2a:85:
                    c3:7c:1d:d9:05:22:fc:34:d2:7b:74:da:dc:94:dc:
                    5f:f0:e8:e6:ed:79:b0:c3:ce:00:c0:e8:3a:4a:56:
                    22:37:0e:d8:96:df:fe:c1:98:0d:0d:f4:a2:c0:9d:
                    75:cf:21:44:12:76:54:88:bd:21:06:f3:1e:c0:30:
                    7d:53:95:09:b7:cc:b6:02:d7:0d:3f:18:f2:ab:05:
                    60:d1:26:76:9f:4f:ee:0f:e7:d4:81:35:a5:65:a9:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:C1:2D:71:42:5A:FA:3B:C7:93:D9:FA:08:B9:7C:CA:6F:9D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/726ad7bd-7230-3497-9a78-9ba5569f9883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.82.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d7:9d:31:96:54:79:24:69:81:c4:21:0f:d5:ce:fd:f5:34:
         27:6c:d5:90:ca:bd:82:08:6d:93:92:5c:31:84:59:79:4d:ec:
         42:a1:04:de:7f:a1:a5:a4:29:71:a5:f2:e9:ee:ce:1a:47:c4:
         92:f0:4b:39:c8:cc:5c:87:7b:21:7b:e9:97:2a:47:59:40:ee:
         f8:b5:16:11:11:ce:66:90:9a:c1:d0:0b:a9:86:07:76:55:b8:
         c4:fa:98:21:26:57:a0:14:5a:cf:a3:f7:4c:6a:43:6a:40:01:
         26:5a:22:4c:da:7f:52:1b:47:e1:a7:54:d8:6d:d6:2c:e3:49:
         56:bc:c7:59:bd:77:e1:14:40:9f:60:e4:54:85:48:02:0d:f0:
         c5:e8:03:86:17:bc:b0:bf:50:0f:15:b7:bc:f6:0b:b1:98:80:
         42:da:51:8a:02:44:42:93:29:09:a7:61:b5:ec:5a:fb:b2:f7:
         f5:da:e1:f6:3f:ac:2a:db:30:33:80:04:8a:7d:a8:1f:ba:b2:
         ac:24:33:82:1a:47:c7:fe:bd:85:06:7a:db:68:c5:bf:a3:99:
         97:d7:c8:36:b5:bb:cd:eb:c1:c0:cc:69:f0:90:e6:d4:7c:b6:
         a4:6b:4e:e1:ef:83:64:98:46:9f:d4:ca:b3:96:85:d4:bf:0e:
         3b:eb:65:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VRjZGiq1ALK2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZDM2Y2ZmNzktZGM3OC00ZDIwLWE5ZTQtMDRmNzVkMmM2YmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG8PpyO0YzoDimeqOV6bz944KftyndZDBlBd
9HtLvlfRydweQugBs5DPHmc0Uyux6D8MUi9AajE058IYq32i6uTz0rwIZgpetZXD
qG8kPPJEB3J6ylTN+vBBz/8bE9FMy4ORGH7KuI1padFVZY1jOXQdZamqZGN4TT4F
m/j6ebbT9CgukcsnNJwyru3LapjplWjovW+IZaXzqSYP8RQxFyJDKoXDfB3ZBSL8
NNJ7dNrclNxf8Ojm7Xmww84AwOg6SlYiNw7Ylt/+wZgNDfSiwJ11zyFEEnZUiL0h
BvMewDB9U5UJt8y2AtcNPxjyqwVg0SZ2n0/uD+fUgTWlZamciQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFz+wS1xQlr6O8eT2foIuXzKb52wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNzI2YWQ3YmQtNzIzMC0z
NDk3LTlhNzgtOWJhNTU2OWY5ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1IYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvXnTGWVHkkaYHEIQ/Vzv31NCds1ZDKvYIIbZOSXDGEWXlN7EKhBN5/
oaWkKXGl8unuzhpHxJLwSznIzFyHeyF76ZcqR1lA7vi1FhERzmaQmsHQC6mGB3ZV
uMT6mCEmV6AUWs+j90xqQ2pAASZaIkzaf1IbR+GnVNht1izjSVa8x1m9d+EUQJ9g
5FSFSAIN8MXoA4YXvLC/UA8Vt7z2C7GYgELaUYoCREKTKQmnYbXsWvuy9/Xa4fY/
rCrbMDOABIp9qB+6sqwkM4IaR8f+vYUGettoxb+jmZfXyDa1u83rwcDMafCQ5tR8
tqRrTuHvg2SYRp/UyrOWhdS/DjvrZUU=
-----END CERTIFICATE-----
Generated at Fri Oct 16 16:42:59 2026 by rpki-client