Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa
File:                     af328904-d764-39ee-a186-96c8bedcee04.roa (raw, json)
Hash identifier:          Lw+sO6mHDE2Z9Q67ht/8u1/XYLZu77gaie9OrGGa7Oo=
Subject key identifier:   D3:95:35:7F:75:B4:52:F4:9B:4B:74:78:E5:71:35:D3:51:24:4E:94
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584F7E7DB6A94105C9E5C05A1A70
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     153371
IP address blocks:        23.165.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:b6:a9:41:05:c9:e5:c0:5a:1a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=a87c03e0-c6ba-4e99-9d60-4d6a665951b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:3c:f8:83:59:72:b8:bc:c2:ee:db:fa:7e:
                    ba:ac:e5:d8:ac:06:95:de:02:bf:03:59:b7:f2:e0:
                    e4:d9:87:d5:11:ca:ce:29:ee:2c:52:22:eb:fd:34:
                    c7:6d:ae:ad:a6:2a:aa:27:be:5b:f2:8b:f2:6b:95:
                    19:10:2d:d3:ec:da:f0:4b:d4:0d:ed:08:51:2a:55:
                    fb:66:7c:30:0a:dc:00:0f:60:a3:5e:6b:e1:b4:fd:
                    a2:32:5d:4d:3a:c0:23:6f:41:5b:06:42:25:01:d8:
                    82:52:2a:4e:d3:59:1e:18:47:ed:ad:a5:bf:b1:10:
                    80:28:34:f5:24:51:b6:1b:7f:34:22:77:a3:a9:65:
                    9a:57:4b:39:fd:56:62:e3:4a:f3:55:3d:1e:1e:3a:
                    6e:94:c4:77:ba:9e:c7:b7:de:75:49:61:16:8f:51:
                    1a:be:27:45:1e:52:05:dc:42:0a:ce:f4:b3:e7:d3:
                    a8:45:cf:35:5b:44:b0:21:2d:9b:c9:20:6c:dc:09:
                    1a:99:00:26:ca:54:41:84:bf:e4:03:c1:7f:f0:01:
                    34:18:06:4f:f6:c7:7c:2f:7f:34:e6:08:74:86:23:
                    46:d2:fa:16:49:6f:77:9f:90:ae:66:02:03:4d:a1:
                    98:3f:39:8c:ad:ad:28:7b:b8:38:ec:d6:2f:cd:83:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:35:7F:75:B4:52:F4:9B:4B:74:78:E5:71:35:D3:51:24:4E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:84:81:1d:fa:d6:8a:fc:1a:46:70:4b:40:04:1c:0b:53:04:
         86:41:7e:b9:7b:51:16:a0:3d:f8:d2:ab:0f:1e:6e:6e:1e:3d:
         de:c9:d1:ec:70:50:4a:4f:89:37:7d:6f:51:53:1e:8c:75:98:
         ae:6f:b3:18:6c:af:6c:1f:b2:6a:fd:4e:c8:f0:76:4d:d7:44:
         a1:13:da:84:b6:ed:c0:fd:1a:17:ca:c5:6c:08:76:a5:89:86:
         f6:86:78:e7:f7:ba:b2:3c:77:10:bf:8b:12:aa:6c:c4:2c:ab:
         78:d0:fd:3c:f8:83:ff:32:83:ff:90:c7:34:07:6b:81:cd:6b:
         91:99:24:ee:5b:ed:73:84:21:6f:09:61:ae:e0:76:94:f0:e6:
         9d:bc:e7:07:60:6f:e8:fb:76:0f:49:1d:a8:cf:e1:d5:39:a2:
         43:50:ac:6e:8b:07:5a:a1:91:72:56:8f:03:6c:ac:90:32:1d:
         1a:d3:b6:18:4c:f2:95:07:27:24:6d:19:70:de:68:45:e8:0c:
         6d:90:9d:ae:e5:11:7c:ed:9b:ab:81:0c:e4:af:25:6c:9c:30:
         86:23:04:cc:1a:2d:9c:5f:9b:82:23:f9:27:c8:10:0c:ad:9d:
         40:c7:59:1b:62:10:04:14:55:21:6f:8f:79:43:cd:a7:31:a0:
         56:74:88:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbapQQXJ5cBaGnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
YTg3YzAzZTAtYzZiYS00ZTk5LTlkNjAtNGQ2YTY2NTk1MWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0No8+INZcri8wu7b+n66rOXYrAaV3gK/A1m3
8uDk2YfVEcrOKe4sUiLr/TTHba6tpiqqJ75b8ovya5UZEC3T7NrwS9QN7QhRKlX7
ZnwwCtwAD2CjXmvhtP2iMl1NOsAjb0FbBkIlAdiCUipO01keGEftraW/sRCAKDT1
JFG2G380InejqWWaV0s5/VZi40rzVT0eHjpulMR3up7Ht951SWEWj1EavidFHlIF
3EIKzvSz59OoRc81W0SwIS2bySBs3AkamQAmylRBhL/kA8F/8AE0GAZP9sd8L380
5gh0hiNG0voWSW93n5CuZgIDTaGYPzmMra0oe7g47NYvzYPd0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOVNX91tFL0m0t0eOVxNdNRJE6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvYWYzMjg5MDQtZDc2NC0z
OWVlLWExODYtOTZjOGJlZGNlZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6W4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCEgR361or8GkZwS0AEHAtTBIZBfrl7URagPfjSqw8ebm4ePd7J0exw
UEpPiTd9b1FTHox1mK5vsxhsr2wfsmr9Tsjwdk3XRKET2oS27cD9GhfKxWwIdqWJ
hvaGeOf3urI8dxC/ixKqbMQsq3jQ/Tz4g/8yg/+QxzQHa4HNa5GZJO5b7XOEIW8J
Ya7gdpTw5p285wdgb+j7dg9JHajP4dU5okNQrG6LB1qhkXJWjwNsrJAyHRrTthhM
8pUHJyRtGXDeaEXoDG2Qna7lEXztm6uBDOSvJWycMIYjBMwaLZxfm4Ij+SfIEAyt
nUDHWRtiEAQUVSFvj3lDzacxoFZ0iLM=
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:09:48 2026 by rpki-client