Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bea466b5-88b5-361a-9758-1c4f712a037b.roa
File:                     bea466b5-88b5-361a-9758-1c4f712a037b.roa (raw, json)
Hash identifier:          JUHfHSgCjgFQzYJ2Sg5VaePHJEt8JHjnTsjjvjXRwO4=
Subject key identifier:   11:6C:7A:84:3F:64:7C:AE:17:50:37:5B:93:3B:56:0F:D6:CF:D2:3E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBBEA8C2503F222D5F5A22100
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bea466b5-88b5-361a-9758-1c4f712a037b.roa
Signing time:             Wed 05 Aug 2026 08:17:15 +0000
ROA not before:           Wed 05 Aug 2026 08:17:15 +0000
ROA not after:            Tue 03 Nov 2026 09:17:15 +0000
asID:                     19148
IP address blocks:        23.81.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:ea:8c:25:03:f2:22:d5:f5:a2:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 08:17:15 2026 GMT
            Not After : Nov  3 09:17:15 2026 GMT
        Subject: CN=c09dd712-5a95-4b1e-8491-dab26e90d975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:c4:99:61:58:d6:cc:03:ac:b3:e4:72:3a:
                    3f:ce:e9:72:b2:7c:97:70:40:89:59:f2:8e:0a:67:
                    d2:06:8d:20:40:96:d9:6b:ff:7c:4d:fc:37:63:16:
                    88:f0:f0:50:34:82:47:f9:c1:28:c2:66:03:cd:f2:
                    c7:f7:0b:0b:3c:dc:1e:d3:30:10:64:40:f2:56:e4:
                    e3:14:e7:ff:3a:a0:21:5a:0f:5f:b2:01:53:cd:fc:
                    f3:48:24:4b:17:10:64:1a:cc:6b:cc:41:23:4b:55:
                    01:c6:8c:e0:33:a3:01:e2:32:60:4e:f9:82:fd:99:
                    43:75:43:2e:6d:7d:c8:9c:bb:8c:12:66:bf:8d:24:
                    f3:fc:7b:9c:e4:74:ef:18:a0:bd:e9:10:8b:88:09:
                    32:e0:fd:f0:10:8d:bb:de:ab:25:04:95:6d:ed:7e:
                    1e:57:f8:9f:33:f5:6b:95:1c:b7:e4:df:22:1d:16:
                    93:30:45:fe:14:e6:f8:fb:cf:64:1c:83:26:66:04:
                    22:c1:83:0c:a3:82:1d:c0:43:13:99:fa:6c:1b:3b:
                    c2:17:f7:58:a9:0d:c7:cf:13:24:ae:b4:30:23:ff:
                    87:ba:ee:a0:1d:c8:03:55:84:ab:ea:c8:8d:68:4f:
                    9f:fb:6c:9a:5e:e7:af:51:c9:30:37:c4:c3:33:a8:
                    2e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6C:7A:84:3F:64:7C:AE:17:50:37:5B:93:3B:56:0F:D6:CF:D2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bea466b5-88b5-361a-9758-1c4f712a037b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.81.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:83:df:9d:ba:17:4f:91:28:26:e6:fb:73:72:c2:6c:0b:f1:
         53:7b:85:87:cc:ae:ab:5d:19:72:cd:93:22:b7:6c:c4:63:19:
         db:8c:71:ad:7f:8b:2f:19:25:33:15:25:c5:9d:be:e0:f6:f9:
         b8:22:b7:2f:11:43:af:09:44:74:37:07:9a:3e:30:d9:1d:36:
         c1:06:1b:b0:62:de:7e:40:f8:b4:9e:74:37:5f:9e:2f:05:ac:
         87:7b:40:7d:98:b0:db:4c:fb:de:4d:19:96:ec:51:5a:94:d5:
         64:79:69:fe:3f:29:a8:55:08:7f:6b:d1:4d:f9:5e:d7:7d:a8:
         a9:3d:a7:8f:33:5f:d5:4c:a1:ec:32:b9:15:53:b6:59:72:1d:
         b2:21:95:7e:73:aa:71:be:c3:ee:2e:7e:c8:48:67:a4:c8:2a:
         6b:c3:80:94:5a:f9:b8:ec:56:bd:ef:52:4c:a1:34:5e:ef:07:
         bf:ba:0a:25:b1:54:1c:ee:1f:cc:5f:6d:3e:6a:d5:77:98:6b:
         03:2b:05:3c:52:90:a2:f5:bf:d7:37:2f:3b:95:cd:2f:18:5c:
         b7:df:42:88:09:24:81:d1:f1:85:bb:2b:f6:23:de:49:fc:1e:
         36:f6:ca:bd:d0:a3:e3:71:b8:e5:e7:4d:f7:3e:42:40:d7:09:
         8e:1b:c5:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE676owlA/Ii1fWiIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNTA4MTcxNVoXDTI2MTEwMzA5MTcxNVowLzEtMCsGA1UEAxMk
YzA5ZGQ3MTItNWE5NS00YjFlLTg0OTEtZGFiMjZlOTBkOTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1rEmWFY1swDrLPkcjo/zulysnyXcECJWfKO
CmfSBo0gQJbZa/98Tfw3YxaI8PBQNIJH+cEowmYDzfLH9wsLPNwe0zAQZEDyVuTj
FOf/OqAhWg9fsgFTzfzzSCRLFxBkGsxrzEEjS1UBxozgM6MB4jJgTvmC/ZlDdUMu
bX3InLuMEma/jSTz/Huc5HTvGKC96RCLiAky4P3wEI273qslBJVt7X4eV/ifM/Vr
lRy35N8iHRaTMEX+FOb4+89kHIMmZgQiwYMMo4IdwEMTmfpsGzvCF/dYqQ3HzxMk
rrQwI/+Huu6gHcgDVYSr6siNaE+f+2yaXuevUckwN8TDM6guTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFseoQ/ZHyuF1A3W5M7Vg/Wz9I+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmVhNDY2YjUtODhiNS0z
NjFhLTk3NTgtMWM0ZjcxMmEwMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1F4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWD3526F0+RKCbm+3NywmwL8VN7hYfMrqtdGXLNkyK3bMRjGduMca1/
iy8ZJTMVJcWdvuD2+bgity8RQ68JRHQ3B5o+MNkdNsEGG7Bi3n5A+LSedDdfni8F
rId7QH2YsNtM+95NGZbsUVqU1WR5af4/KahVCH9r0U35Xtd9qKk9p48zX9VMoewy
uRVTtllyHbIhlX5zqnG+w+4ufshIZ6TIKmvDgJRa+bjsVr3vUkyhNF7vB7+6CiWx
VBzuH8xfbT5q1XeYawMrBTxSkKL1v9c3LzuVzS8YXLffQogJJIHR8YW7K/Yj3kn8
Hjb2yr3Qo+NxuOXnTfc+QkDXCY4bxcc=
-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:28 2026 by rpki-client