Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/98e5051c-dd28-361c-b7d3-6fe0a9bf6517.roa
File:                     98e5051c-dd28-361c-b7d3-6fe0a9bf6517.roa (raw, json)
Hash identifier:          U5QUUh5H3o117z/WAEig0WR1sbpi46hXu+4RDiknsDc=
Subject key identifier:   D6:7E:1E:34:58:6B:65:99:FB:99:C0:48:3D:4C:BA:51:74:95:B5:C5
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBBEB0BFDD83B70B977FF8000
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/98e5051c-dd28-361c-b7d3-6fe0a9bf6517.roa
Signing time:             Wed 05 Aug 2026 08:18:16 +0000
ROA not before:           Wed 05 Aug 2026 08:18:16 +0000
ROA not after:            Tue 03 Nov 2026 09:18:16 +0000
asID:                     19148
IP address blocks:        23.81.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:eb:0b:fd:d8:3b:70:b9:77:ff:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 08:18:16 2026 GMT
            Not After : Nov  3 09:18:16 2026 GMT
        Subject: CN=ba683b81-b061-4ce9-be91-ed3104bbc161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6f:df:0a:6c:9a:c2:3b:5a:9d:2f:c8:ed:18:
                    89:19:31:43:7c:44:16:67:dc:6d:08:a7:35:c8:dd:
                    1a:3a:1f:b0:a1:7f:11:8f:29:f8:1d:f5:b1:66:92:
                    db:ce:f7:0e:b6:3b:5d:c4:9e:fa:54:2e:a2:4a:1a:
                    22:53:cb:c8:8c:38:65:1a:32:5d:66:a8:a4:82:f0:
                    9e:e0:c5:f9:62:94:32:c0:00:2f:01:64:64:99:34:
                    f5:d6:01:24:b6:7c:50:6b:5e:73:a6:2f:86:f4:81:
                    75:d5:8e:c1:d4:27:27:be:39:69:43:40:1a:e1:90:
                    a0:ec:d4:d5:de:7a:59:d9:b1:e5:70:f0:13:e5:be:
                    60:4d:c3:84:78:13:87:87:56:3f:75:1d:62:1e:c9:
                    74:81:4c:90:f7:1d:cf:90:99:84:69:1c:b6:0c:e7:
                    9c:70:0c:bb:6f:6c:f3:fb:ff:3b:70:86:37:b7:1b:
                    50:23:67:bd:e9:ec:b3:72:de:54:f9:cf:b2:a8:f6:
                    46:34:04:05:2d:17:a3:b7:fb:da:23:d9:4d:b9:1f:
                    77:db:97:9e:da:49:6a:6e:9b:71:40:ca:01:b6:d4:
                    9b:4c:31:2d:70:79:c2:22:81:12:cf:d3:75:83:de:
                    2e:a5:55:2e:47:cf:bd:cd:8c:92:3c:b0:92:60:3c:
                    cf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:1E:34:58:6B:65:99:FB:99:C0:48:3D:4C:BA:51:74:95:B5:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/98e5051c-dd28-361c-b7d3-6fe0a9bf6517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.81.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:49:6d:d9:73:47:f1:0b:f7:99:80:c5:f7:4c:87:27:07:ae:
         92:01:5a:f3:1a:c3:95:0c:0a:0d:61:6d:67:ee:a1:b0:fa:49:
         10:9e:0d:01:f9:01:a7:a6:2c:1d:7d:c3:d8:1f:b8:04:b1:f6:
         d4:c0:ac:c0:29:cc:49:01:a1:1d:ce:97:95:41:f1:ba:f4:c6:
         3d:3e:7a:28:ce:e4:73:9c:7b:3c:93:5a:43:95:18:b7:90:33:
         ab:b8:e2:83:0b:70:a7:a9:d5:22:64:ab:0f:17:9e:90:d2:5e:
         2e:e8:f3:7b:48:f6:29:f8:ff:32:84:0d:80:4b:3a:70:c7:ba:
         da:8d:95:36:0f:93:8e:5f:5c:9a:78:57:9f:ab:9e:d8:02:d4:
         b7:45:b2:ab:be:01:8b:d8:c7:23:eb:c1:2e:0e:cf:fc:41:40:
         85:7e:31:5a:bf:a2:78:6d:e7:68:82:7b:6b:1e:19:d9:bc:94:
         1a:f1:46:23:e5:a4:66:ad:04:06:56:6c:a5:a8:64:99:0e:27:
         0a:57:60:f4:1c:8a:62:45:5e:67:4e:13:22:fb:b4:0d:36:e5:
         fe:fd:15:55:e9:3e:1e:07:c9:f4:c0:f6:d4:37:e0:65:d6:71:
         1a:d5:36:cf:da:df:04:60:bb:99:ae:17:00:dd:d9:d9:a4:fe:
         2a:5a:e6:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE676wv92DtwuXf/gAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNTA4MTgxNloXDTI2MTEwMzA5MTgxNlowLzEtMCsGA1UEAxMk
YmE2ODNiODEtYjA2MS00Y2U5LWJlOTEtZWQzMTA0YmJjMTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG/fCmyawjtanS/I7RiJGTFDfEQWZ9xtCKc1
yN0aOh+woX8Rjyn4HfWxZpLbzvcOtjtdxJ76VC6iShoiU8vIjDhlGjJdZqikgvCe
4MX5YpQywAAvAWRkmTT11gEktnxQa15zpi+G9IF11Y7B1CcnvjlpQ0Aa4ZCg7NTV
3npZ2bHlcPAT5b5gTcOEeBOHh1Y/dR1iHsl0gUyQ9x3PkJmEaRy2DOeccAy7b2zz
+/87cIY3txtQI2e96eyzct5U+c+yqPZGNAQFLRejt/vaI9lNuR9325ee2klqbptx
QMoBttSbTDEtcHnCIoESz9N1g94upVUuR8+9zYySPLCSYDzPRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZ+HjRYa2WZ+5nASD1MulF0lbXFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOThlNTA1MWMtZGQyOC0z
NjFjLWI3ZDMtNmZlMGE5YmY2NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1GQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJJbdlzR/EL95mAxfdMhycHrpIBWvMaw5UMCg1hbWfuobD6SRCeDQH5
AaemLB19w9gfuASx9tTArMApzEkBoR3Ol5VB8br0xj0+eijO5HOcezyTWkOVGLeQ
M6u44oMLcKep1SJkqw8XnpDSXi7o83tI9in4/zKEDYBLOnDHutqNlTYPk45fXJp4
V5+rntgC1LdFsqu+AYvYxyPrwS4Oz/xBQIV+MVq/onht52iCe2seGdm8lBrxRiPl
pGatBAZWbKWoZJkOJwpXYPQcimJFXmdOEyL7tA025f79FVXpPh4HyfTA9tQ34GXW
cRrVNs/a3wRgu5muFwDd2dmk/ipa5r0=
-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:17 2026 by rpki-client