Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/744ae307-ebad-3fe8-9431-ba575d6002dc.roa
File:                     744ae307-ebad-3fe8-9431-ba575d6002dc.roa (raw, json)
Hash identifier:          9p5iMWc/xi5T2cP94l/XQHRGPCRNdrg+pXpSVbLjoKg=
Subject key identifier:   CF:12:EC:73:F5:A6:CB:87:73:B2:42:49:65:43:95:7E:90:FD:00:3A
Certificate issuer:       /CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
Certificate serial:       010D0C9F4328584DD35B112E58F244DE8B0F5180
Authority key identifier: 73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/744ae307-ebad-3fe8-9431-ba575d6002dc.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     29770
IP address blocks:        23.146.232.0/24 maxlen: 24
                          65.38.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:11:2e:58:f2:44:de:8b:0f:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=28d483d5-06de-4fab-9cdd-449a66eaee1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:6a:17:bd:fd:79:76:96:73:b1:0e:51:11:
                    83:c5:17:75:e5:bd:2c:1f:76:40:4d:c7:9e:43:e9:
                    63:bb:7c:23:25:01:e4:53:5a:44:d3:bd:c8:e6:eb:
                    83:4f:13:a7:e1:75:dc:73:94:b2:f5:46:ca:2d:93:
                    7e:d3:3d:b8:ae:79:19:42:bc:01:c6:10:37:eb:b4:
                    9f:14:74:4c:eb:0a:3d:64:c3:ad:27:9f:4e:b0:1d:
                    36:eb:a8:03:64:08:ea:58:c0:ef:f5:56:af:39:94:
                    24:f1:f5:04:8b:7d:aa:86:72:0f:4c:75:ce:0c:86:
                    5a:20:a7:b6:d0:a5:51:4a:aa:1c:3f:ee:b7:99:46:
                    d6:11:8f:33:9a:67:a8:74:3a:ce:9a:c6:f5:ab:2f:
                    90:92:e1:c7:c4:4f:a1:74:f8:cd:c5:4c:eb:c8:d6:
                    2f:7c:9b:b2:3a:79:a6:21:c1:b6:e1:04:20:50:88:
                    81:3b:8d:6e:b4:79:e6:3a:26:b8:c0:6f:1a:cb:44:
                    5d:f0:ea:85:1d:21:27:05:94:9e:48:74:f2:8f:13:
                    a9:db:73:4e:e0:20:ec:ce:83:f0:d2:fe:b3:10:6b:
                    2d:94:2a:5b:a9:ec:36:23:fd:25:7b:ad:b0:f3:a4:
                    1e:8f:e2:1f:80:1a:44:2e:0f:f9:72:67:fd:7d:37:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:EC:73:F5:A6:CB:87:73:B2:42:49:65:43:95:7E:90:FD:00:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/744ae307-ebad-3fe8-9431-ba575d6002dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl

            X509v3 Authority Key Identifier:
                keyid:73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.232.0/24
                  65.38.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:df:ac:b5:bc:c3:2b:b8:56:b1:fd:b5:e3:ec:16:91:95:
         19:97:ae:00:af:3b:c7:13:1e:4f:84:02:be:75:4b:71:03:0e:
         d2:a5:c5:59:14:3b:21:f8:8d:fb:28:eb:a0:c0:54:a0:e9:d8:
         41:ad:68:cf:fd:65:1b:78:0f:b6:0e:28:fd:96:18:b9:a7:ba:
         d5:02:0d:8a:dc:80:69:38:80:3a:31:7d:86:cf:d4:48:4c:45:
         78:20:71:44:04:bc:7a:da:2d:ff:2e:18:9b:6f:f0:3b:46:52:
         9c:18:cc:00:3a:48:a1:74:0c:fc:d9:cb:8c:34:52:41:27:68:
         0e:96:aa:1c:41:8d:aa:2e:33:b4:6a:48:3e:9f:b3:5d:05:a0:
         1a:3c:f3:09:3b:5a:88:0d:d2:a3:9d:24:67:36:48:fa:d4:5a:
         5a:a5:1f:41:77:ad:f1:83:e8:09:39:84:52:9c:75:40:e5:4d:
         3a:1f:35:d9:af:81:0f:be:16:34:57:4d:a9:e8:04:67:02:32:
         05:36:e7:48:c0:7b:8a:ef:81:68:bb:e9:4c:aa:df:20:46:48:
         38:7d:3d:bf:2c:db:0d:50:44:9d:3d:ab:e4:d4:d2:4c:09:9e:
         fb:fa:5b:aa:47:0f:62:81:5a:e0:ba:13:f8:0e:de:99:d3:04:
         25:08:0c:56
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3TWxEuWPJE3osPUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ4ZGM5YWEtNDEzZi00NWY4LTlhNGUtMjAzNDZiZGNj
YTY0MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk
MjhkNDgzZDUtMDZkZS00ZmFiLTljZGQtNDQ5YTY2ZWFlZTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGpqF739eXaWc7EOURGDxRd15b0sH3ZATcee
Q+lju3wjJQHkU1pE073I5uuDTxOn4XXcc5Sy9UbKLZN+0z24rnkZQrwBxhA367Sf
FHRM6wo9ZMOtJ59OsB0266gDZAjqWMDv9VavOZQk8fUEi32qhnIPTHXODIZaIKe2
0KVRSqocP+63mUbWEY8zmmeodDrOmsb1qy+QkuHHxE+hdPjNxUzryNYvfJuyOnmm
IcG24QQgUIiBO41utHnmOia4wG8ay0Rd8OqFHSEnBZSeSHTyjxOp23NO4CDszoPw
0v6zEGstlCpbqew2I/0le62w86Qej+IfgBpELg/5cmf9fTfLKwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFM8S7HP1psuHc7JCSWVDlX6Q/QA6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDhk
YzlhYS00MTNmLTQ1ZjgtOWE0ZS0yMDM0NmJkY2NhNjQvNzQ0YWUzMDctZWJhZC0z
ZmU4LTk0MzEtYmE1NzVkNjAwMmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ4ZGM5YWEtNDEzZi00NWY4LTlh
NGUtMjAzNDZiZGNjYTY0L2U0OGRjOWFhLTQxM2YtNDVmOC05YTRlLTIwMzQ2YmRj
Y2E2NC5jcmwwHwYDVR0jBBgwFoAUc/Lvn3urHfpg60W99pQ52mh8MUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDhkYzlhYS00MTNmLTQ1ZjgtOWE0ZS0yMDM0
NmJkY2NhNjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5LoAwQB
QSZ8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH1M36y1vMMruFax/bXj7BaRlRmXrgCvO8cTHk+EAr51S3ED
DtKlxVkUOyH4jfso66DAVKDp2EGtaM/9ZRt4D7YOKP2WGLmnutUCDYrcgGk4gDox
fYbP1EhMRXggcUQEvHraLf8uGJtv8DtGUpwYzAA6SKF0DPzZy4w0UkEnaA6WqhxB
jaouM7RqSD6fs10FoBo88wk7WogN0qOdJGc2SPrUWlqlH0F3rfGD6Ak5hFKcdUDl
TTofNdmvgQ++FjRXTanoBGcCMgU250jAe4rvgWi76Uyq3yBGSDh9Pb8s2w1QRJ09
q+TU0kwJnvv6W6pHD2KBWuC6E/gO3pnTBCUIDFY=
-----END CERTIFICATE-----
Generated at Fri May 22 18:29:15 2026 by rpki-client