Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/74f6ccfa-3bc4-3ab4-a2c8-539269bad562.roa
File:                     74f6ccfa-3bc4-3ab4-a2c8-539269bad562.roa (raw, json)
Hash identifier:          WBJf6tVuyxSjz039+DAV+8k5FtywH+n4bXI0K/2nlTI=
Subject key identifier:   80:78:85:47:28:74:5E:11:7A:6E:0A:22:99:6A:0D:50:E6:7B:09:22
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF6A8EB42EE68AD195BC9780
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/74f6ccfa-3bc4-3ab4-a2c8-539269bad562.roa
Signing time:             Thu 06 Aug 2026 14:22:36 +0000
ROA not before:           Thu 06 Aug 2026 14:22:36 +0000
ROA not after:            Wed 04 Nov 2026 15:22:36 +0000
asID:                     396190
IP address blocks:        23.106.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:6a:8e:b4:2e:e6:8a:d1:95:bc:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 14:22:36 2026 GMT
            Not After : Nov  4 15:22:36 2026 GMT
        Subject: CN=f6bf39fc-f140-4459-847f-fee19ca1bdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:1e:a9:e4:d0:7d:91:ab:47:1b:b2:2d:ce:
                    9a:f5:c8:f7:3a:3e:90:39:cf:7b:a6:da:d7:96:8e:
                    56:bc:08:b4:d1:09:00:8c:e3:81:64:80:ae:67:06:
                    f6:f7:40:f6:38:b8:63:d9:93:1b:d2:77:88:9c:dc:
                    a3:36:d2:30:c0:57:6c:1c:a1:4d:82:5d:43:98:75:
                    67:12:e1:06:71:6b:44:fd:33:a5:50:f6:a0:63:a3:
                    7b:3b:b0:c3:c9:4d:ba:e1:69:98:5e:9c:30:fb:06:
                    43:8a:bd:8a:e7:d0:cb:61:02:08:b7:04:ff:dc:a8:
                    af:56:08:74:44:4e:bb:8f:4d:7f:b6:79:4d:e0:ee:
                    70:17:91:27:93:33:7c:70:a6:9b:4e:35:2f:47:32:
                    85:89:94:3d:28:52:ca:a5:d0:f8:9d:bb:fc:85:6d:
                    a7:5d:ac:14:cf:0b:11:a9:d6:34:22:a3:cc:1f:a2:
                    ff:32:e8:36:a6:0e:e7:0d:f6:db:1e:b2:a0:c8:ec:
                    82:90:d3:c0:cc:68:43:b1:cf:31:46:c5:74:af:20:
                    d2:75:fa:36:8c:e6:5b:de:e8:28:f8:e9:e8:20:12:
                    45:43:a2:7d:7a:58:1c:88:70:df:90:27:2e:16:c2:
                    27:51:8e:5a:38:22:ec:57:bc:cc:4d:c7:92:33:43:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:78:85:47:28:74:5E:11:7A:6E:0A:22:99:6A:0D:50:E6:7B:09:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/74f6ccfa-3bc4-3ab4-a2c8-539269bad562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.106.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:1a:e7:d9:22:17:9b:e0:eb:50:ed:02:b3:1b:18:23:30:d1:
         a5:a5:12:81:77:f5:d4:1f:c3:c0:da:cb:50:10:2d:71:d7:77:
         e6:4a:b8:dd:f9:cf:4f:15:48:64:26:1c:df:82:f1:c8:4c:86:
         24:45:ba:9d:ea:ed:c0:56:cd:9b:5c:6c:14:c6:ce:ca:a2:7d:
         56:ad:49:0e:ce:e5:41:58:d0:a3:66:d3:e5:68:92:54:4e:d8:
         18:e3:06:c2:6e:7d:95:59:b2:74:23:64:2c:9d:6b:ee:94:be:
         77:21:b4:5c:9e:63:43:a5:fd:d4:5a:19:a4:9c:b9:3e:65:e1:
         ce:87:77:e4:22:18:ab:f2:4d:ef:da:68:ee:1e:57:6f:6c:b0:
         f8:d6:71:f6:83:68:f4:4d:ca:02:94:f0:35:bb:3c:f3:ea:f3:
         8c:17:4a:83:3b:46:68:65:e6:c3:dc:76:2f:16:f1:eb:46:d5:
         fb:4b:34:2b:3c:07:79:74:88:e7:44:fa:9a:f0:fb:ce:c0:be:
         4d:0d:11:e8:f3:3f:0d:9f:16:da:b4:8b:95:44:92:76:c2:db:
         ab:ad:73:62:b2:e2:8d:b5:56:fb:cf:83:a8:9e:fd:97:14:0e:
         df:b6:a9:de:57:a7:68:48:95:2a:81:73:4a:c8:71:bb:b9:ae:
         db:2e:d6:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/ao60LuaK0ZW8l4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNjE0MjIzNloXDTI2MTEwNDE1MjIzNlowLzEtMCsGA1UEAxMk
ZjZiZjM5ZmMtZjE0MC00NDU5LTg0N2YtZmVlMTljYTFiZGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dUeqeTQfZGrRxuyLc6a9cj3Oj6QOc97ptrX
lo5WvAi00QkAjOOBZICuZwb290D2OLhj2ZMb0neInNyjNtIwwFdsHKFNgl1DmHVn
EuEGcWtE/TOlUPagY6N7O7DDyU264WmYXpww+wZDir2K59DLYQIItwT/3KivVgh0
RE67j01/tnlN4O5wF5EnkzN8cKabTjUvRzKFiZQ9KFLKpdD4nbv8hW2nXawUzwsR
qdY0IqPMH6L/Mug2pg7nDfbbHrKgyOyCkNPAzGhDsc8xRsV0ryDSdfo2jOZb3ugo
+OnoIBJFQ6J9elgciHDfkCcuFsInUY5aOCLsV7zMTceSM0OPNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIB4hUcodF4Rem4KIplqDVDmewkiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNzRmNmNjZmEtM2JjNC0z
YWI0LWEyYzgtNTM5MjY5YmFkNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF2oAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMYa59kiF5vg61DtArMbGCMw0aWlEoF39dQfw8Day1AQLXHXd+ZKuN35
z08VSGQmHN+C8chMhiRFup3q7cBWzZtcbBTGzsqifVatSQ7O5UFY0KNm0+VoklRO
2BjjBsJufZVZsnQjZCyda+6UvnchtFyeY0Ol/dRaGaScuT5l4c6Hd+QiGKvyTe/a
aO4eV29ssPjWcfaDaPRNygKU8DW7PPPq84wXSoM7Rmhl5sPcdi8W8etG1ftLNCs8
B3l0iOdE+prw+87Avk0NEejzPw2fFtq0i5VEknbC26utc2Ky4o21VvvPg6ie/ZcU
Dt+2qd5Xp2hIlSqBc0rIcbu5rtsu1os=
-----END CERTIFICATE-----
Generated at Thu Aug 27 18:19:01 2026 by rpki-client