Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
File:                     cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa (raw, json)
Hash identifier:          656NCoGUiOztTo9nYERyR1wIID3cXHnnq6O25YG2KY0=
Subject key identifier:   6C:67:47:C3:0E:27:35:06:CA:99:F5:5A:F5:68:FA:47:F2:77:C4:57
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F4328584E4559EC6B3A64DE9BC4F3FF30
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     44324
IP address blocks:        23.149.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ec:6b:3a:64:de:9b:c4:f3:ff:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=df6623a7-92e2-440a-9645-a83dfad0a24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:73:32:bd:b8:70:3c:27:26:4e:75:55:10:
                    ac:e3:ea:0c:a2:a0:ca:d2:dc:d5:da:06:23:de:04:
                    e4:dd:a2:1e:86:70:d9:9a:47:6f:73:35:09:1a:d5:
                    00:ed:c1:5c:53:1d:fe:75:ab:24:d9:7c:14:4b:98:
                    c5:f7:e3:9c:4a:db:d4:6a:ff:12:15:85:f9:5e:c5:
                    ae:57:a9:6f:18:85:93:8d:25:0c:98:ca:52:4e:f0:
                    72:d1:7f:b5:db:29:25:3f:77:b5:5e:a0:e7:aa:e9:
                    a7:e4:48:1e:f2:35:da:5c:5c:43:b7:c6:53:aa:5c:
                    ed:cc:73:96:a2:ce:b6:a9:d9:da:31:f7:b9:63:00:
                    65:36:d4:08:af:56:18:b0:53:fb:2c:dc:07:54:b7:
                    32:b2:d7:f2:32:c7:0c:3a:05:1e:e9:4e:ae:f7:5e:
                    4a:68:fe:7b:b0:3e:c6:ae:7b:1a:fe:10:2d:65:83:
                    a8:26:88:a8:ef:48:41:3f:01:e2:ea:9f:75:78:08:
                    19:c4:19:df:70:ae:2c:cc:bb:30:df:26:3d:c9:8d:
                    26:02:9c:d9:a7:28:0b:af:71:fc:5e:1f:50:cd:b8:
                    44:a3:62:5c:af:16:ec:61:15:1a:40:8a:50:41:d0:
                    be:c3:70:be:6b:28:8e:5f:f6:77:29:b7:e6:24:c8:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:67:47:C3:0E:27:35:06:CA:99:F5:5A:F5:68:FA:47:F2:77:C4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:43:a8:a0:49:dc:14:40:54:03:72:a6:00:24:6f:89:49:
         f5:4b:2b:7e:8e:c4:04:25:af:14:24:90:b2:e4:01:a3:79:e5:
         62:7b:8f:61:05:9b:73:76:88:32:4a:39:84:79:be:9b:e2:a3:
         f3:c2:59:f4:0e:d1:b8:95:e9:12:1a:cc:2a:bc:0e:d6:ef:14:
         98:2c:95:27:46:71:41:0f:23:b6:15:52:41:24:1b:06:b1:10:
         2e:f5:3b:a1:72:4f:3e:0e:70:5e:c8:5a:0b:ac:e6:cb:d3:cc:
         f3:d0:9c:ef:b6:32:8c:c5:24:17:f1:06:9f:e2:a4:16:e4:0d:
         b2:9c:5d:cc:b8:7d:66:da:79:c5:7e:a4:17:61:94:24:60:46:
         99:a9:97:02:fe:4e:47:17:49:9b:2a:65:91:43:8d:26:11:74:
         82:0b:96:77:77:7a:71:67:69:55:74:86:f2:d9:47:43:05:8f:
         9b:65:57:96:df:44:66:05:b0:04:a1:80:eb:97:e3:eb:c3:5d:
         88:49:89:ef:53:67:29:da:f4:a7:4f:af:6e:e7:8a:f5:6e:f9:
         5e:65:0c:ab:ea:52:9f:3b:c4:01:7a:f9:87:0b:23:be:c0:5c:
         77:3f:86:f8:8f:5a:bb:0b:37:a5:ec:7e:28:66:94:04:35:d5:
         6c:23:81:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWexrOmTem8Tz/zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc5ZmUxYTctMWQwNC00ZjcxLWI0MTEtNjEzYjk2NjEy
NGZiMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZGY2NjIzYTctOTJlMi00NDBhLTk2NDUtYTgzZGZhZDBhMjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr25zMr24cDwnJk51VRCs4+oMoqDK0tzV2gYj
3gTk3aIehnDZmkdvczUJGtUA7cFcUx3+dask2XwUS5jF9+OcStvUav8SFYX5XsWu
V6lvGIWTjSUMmMpSTvBy0X+12yklP3e1XqDnqumn5Ege8jXaXFxDt8ZTqlztzHOW
os62qdnaMfe5YwBlNtQIr1YYsFP7LNwHVLcystfyMscMOgUe6U6u915KaP57sD7G
rnsa/hAtZYOoJoio70hBPwHi6p91eAgZxBnfcK4szLsw3yY9yY0mApzZpygLr3H8
Xh9QzbhEo2JcrxbsYRUaQIpQQdC+w3C+ayiOX/Z3KbfmJMhHQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxnR8MOJzUGypn1WvVo+kfyd8RXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzlm
ZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNiOTY2MTI0ZmIvY2IxYmE2YzktODM4Mi0z
MmI3LWJiNTctZjlkZTczNGM5MjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5ZmUxYTctMWQwNC00ZjcxLWI0
MTEtNjEzYjk2NjEyNGZiLzU3OWZlMWE3LTFkMDQtNGY3MS1iNDExLTYxM2I5NjYx
MjRmYi5jcmwwHwYDVR0jBBgwFoAUR9ED1+qSyGdIgRrPQ0vkaIytvMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81NzlmZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNi
OTY2MTI0ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5V4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvYQ6igSdwUQFQDcqYAJG+JSfVLK36OxAQlrxQkkLLkAaN55WJ7j2EF
m3N2iDJKOYR5vpvio/PCWfQO0biV6RIazCq8DtbvFJgslSdGcUEPI7YVUkEkGwax
EC71O6FyTz4OcF7IWgus5svTzPPQnO+2MozFJBfxBp/ipBbkDbKcXcy4fWbaecV+
pBdhlCRgRpmplwL+TkcXSZsqZZFDjSYRdIILlnd3enFnaVV0hvLZR0MFj5tlV5bf
RGYFsAShgOuX4+vDXYhJie9TZyna9KdPr27nivVu+V5lDKvqUp87xAF6+YcLI77A
XHc/hviPWrsLN6XsfihmlAQ11WwjgbM=
-----END CERTIFICATE-----
Generated at Wed Jun 24 03:57:31 2026 by rpki-client