Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa
File:                     6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa (raw, json)
Hash identifier:          u5Gs7xh2fm9kuMiQQx5nmES5flQQvufIuvF7rFJS3oo=
Subject key identifier:   6E:B4:2C:F7:E0:66:DC:27:04:19:2D:59:02:13:BC:C1:03:3E:31:B0
Certificate issuer:       /CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
Certificate serial:       010D0C9F4328584EC20C6F05AFD6BFF53E728C80
Authority key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     1030
IP address blocks:        23.167.40.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6f:05:af:d6:bf:f5:3e:72:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=85a03dd7-8fb0-4c46-934b-804958e379d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:0a:be:2e:a5:a1:ad:44:ef:ae:fb:a2:60:
                    37:8b:cd:11:c9:11:4f:1c:3e:6e:28:53:40:37:51:
                    40:9d:0b:4f:99:b1:ad:9b:11:c2:a1:a4:6b:66:fb:
                    bc:ab:78:b3:89:82:c4:d4:1b:f4:76:4f:c1:dc:6f:
                    b5:c1:ea:ad:3a:a6:24:9f:26:c6:14:a8:cf:30:72:
                    9a:68:91:e8:44:a6:38:f7:60:72:ef:7e:d8:66:0f:
                    1d:e3:1a:53:65:18:57:e2:96:9e:47:47:d4:24:c6:
                    40:de:97:e3:5d:7b:e7:8b:c7:d1:04:4f:7e:d9:07:
                    7a:fa:6a:02:51:9c:5c:f7:64:75:4d:1e:3d:86:c4:
                    eb:d6:8e:58:6c:56:04:4d:d2:6c:0c:a3:a6:a7:2c:
                    f8:e6:72:04:71:f5:c6:8a:60:8c:80:aa:92:dd:fa:
                    7b:fa:12:69:cc:60:31:fb:f9:5f:45:d6:d4:f0:6f:
                    64:3e:6b:b2:91:17:ad:eb:54:61:33:9c:b9:41:99:
                    33:f8:5b:68:89:b4:f6:cd:74:9a:c0:56:b2:4d:9a:
                    30:bd:af:13:cd:15:04:09:19:12:2c:5c:e0:df:5f:
                    68:b0:99:1c:93:dd:0a:a6:71:ee:e8:8d:0b:25:86:
                    6e:04:09:14:7f:af:22:cc:5e:a6:38:d4:e9:c7:db:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B4:2C:F7:E0:66:DC:27:04:19:2D:59:02:13:BC:C1:03:3E:31:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl

            X509v3 Authority Key Identifier:
                keyid:93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:24:a2:0c:04:5f:27:b5:f2:94:c3:e3:6a:48:18:b0:99:f4:
         a4:c5:a6:65:68:da:a3:0f:02:33:ca:0e:ca:47:55:bf:3c:b7:
         d8:47:3b:3a:22:36:51:5a:53:5f:8c:24:8e:e4:17:2f:4c:37:
         86:01:6c:62:43:4e:a9:d3:ab:fc:15:b9:9c:ee:2b:2c:ca:86:
         14:86:79:b5:be:1f:a1:69:ce:0b:9b:eb:6e:e8:20:27:17:1c:
         a1:ae:95:ff:8f:43:4c:49:01:b6:35:b0:0d:40:e0:30:00:5a:
         46:36:ed:ad:66:be:17:3e:ab:a1:3e:48:2a:bc:d2:1e:fa:c8:
         c5:7c:06:40:f3:c9:18:f7:35:af:e2:12:37:13:24:36:eb:b2:
         f0:74:c3:ea:7a:66:92:c6:b4:94:c5:4a:fe:f5:48:b5:73:3f:
         78:d4:86:94:61:5e:6a:29:39:20:e1:4b:91:86:34:6d:e3:62:
         86:af:12:57:ab:06:e1:15:1d:8f:0d:10:20:3b:73:24:1e:85:
         26:01:7f:62:23:17:86:df:79:9f:73:a6:3f:f9:6b:35:3b:24:
         de:78:36:ce:5b:ff:4c:4d:64:9d:61:2a:a6:1b:b6:8f:e3:27:
         10:f4:78:5f:04:52:09:ea:93:ea:67:10:c5:07:a7:07:73:fe:
         cf:d3:39:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDG8Fr9a/9T5yjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDViZDM1NzgtM2MwOC00NGQxLTk5ZTItODA4N2ZjNDhm
ZmIzMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
ODVhMDNkZDctOGZiMC00YzQ2LTkzNGItODA0OTU4ZTM3OWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMoKvi6loa1E7677omA3i80RyRFPHD5uKFNA
N1FAnQtPmbGtmxHCoaRrZvu8q3iziYLE1Bv0dk/B3G+1weqtOqYknybGFKjPMHKa
aJHoRKY492By737YZg8d4xpTZRhX4paeR0fUJMZA3pfjXXvni8fRBE9+2Qd6+moC
UZxc92R1TR49hsTr1o5YbFYETdJsDKOmpyz45nIEcfXGimCMgKqS3fp7+hJpzGAx
+/lfRdbU8G9kPmuykRet61RhM5y5QZkz+FtoibT2zXSawFayTZowva8TzRUECRkS
LFzg319osJkck90KpnHu6I0LJYZuBAkUf68izF6mONTpx9svSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG60LPfgZtwnBBktWQITvMEDPjGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWJk
MzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3ZmM0OGZmYjMvNmZkNmFjOWUtNDdkYS0z
NzZmLWJjNTAtNjliYzRhYTlmOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDViZDM1NzgtM2MwOC00NGQxLTk5
ZTItODA4N2ZjNDhmZmIzL2Q1YmQzNTc4LTNjMDgtNDRkMS05OWUyLTgwODdmYzQ4
ZmZiMy5jcmwwHwYDVR0jBBgwFoAUk0YLtXT2oJxx8LF9nO1+zQXaB+owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWJkMzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3
ZmM0OGZmYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6coMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0kogwEXye18pTD42pIGLCZ9KTFpmVo2qMPAjPKDspHVb88t9hHOzoi
NlFaU1+MJI7kFy9MN4YBbGJDTqnTq/wVuZzuKyzKhhSGebW+H6Fpzgub627oICcX
HKGulf+PQ0xJAbY1sA1A4DAAWkY27a1mvhc+q6E+SCq80h76yMV8BkDzyRj3Na/i
EjcTJDbrsvB0w+p6ZpLGtJTFSv71SLVzP3jUhpRhXmopOSDhS5GGNG3jYoavEler
BuEVHY8NECA7cyQehSYBf2IjF4bfeZ9zpj/5azU7JN54Ns5b/0xNZJ1hKqYbto/j
JxD0eF8EUgnqk+pnEMUHpwdz/s/TOeM=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:49 2026 by rpki-client