Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa
File:                     ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa (raw, json)
Hash identifier:          B0QBS+6OVEv+m2gfIoYIUzzH97Q8TID6DQh1PEjUVa4=
Subject key identifier:   20:76:D8:D3:A8:76:27:56:0F:73:EC:65:DA:66:27:62:89:47:22:53
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F4328584D091269EE477EE4A97EBD5080
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     30114
IP address blocks:        23.146.88.0/24 maxlen: 24
                          2602:fab0:20::/44 maxlen: 48
                          2602:fab0:30::/44 maxlen: 48
                          2602:fab0:40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:69:ee:47:7e:e4:a9:7e:bd:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=66687d15-4e8e-46cb-9351-0cbb7217d9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d4:92:ce:4e:3b:ce:d3:3f:42:8a:9e:6e:c6:
                    ce:d5:fd:f0:80:2a:6a:22:d7:16:75:b9:60:59:b4:
                    36:46:44:5d:f9:54:d3:0a:2b:90:7c:59:06:d2:ea:
                    dd:2e:f8:18:47:b6:79:e0:c7:bc:00:17:7a:af:73:
                    d9:0a:15:2d:16:1e:e6:01:1f:38:79:15:5e:d3:68:
                    0e:28:2c:ba:91:ab:1f:9e:74:22:2e:6e:3a:0f:ca:
                    a3:51:1c:2e:fc:11:4d:df:71:37:79:8e:f4:e5:cf:
                    9b:2a:cd:f1:39:99:84:26:62:25:38:e7:9d:a3:32:
                    3e:af:9b:63:d7:9e:1d:29:cb:df:9a:ed:86:71:6a:
                    2c:7a:d4:3d:27:2b:89:74:24:c2:24:12:2b:f2:8d:
                    88:8c:57:2d:3f:6e:66:ef:83:27:c3:a7:3b:90:70:
                    c9:9f:f2:a2:68:3c:ac:d0:5b:05:fc:d0:d5:62:28:
                    75:87:2e:f7:3f:5a:69:56:bc:88:52:21:07:2f:7d:
                    bf:6e:cb:45:2a:ce:73:4d:bf:c7:1d:fa:32:40:0a:
                    2e:36:d1:69:62:f2:5a:4a:94:30:89:d6:9a:95:bf:
                    20:c8:f2:e2:40:c8:a0:9b:b1:fc:4a:71:06:22:07:
                    b8:7f:ce:44:87:5f:24:fd:64:41:86:12:bd:a1:9d:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:D8:D3:A8:76:27:56:0F:73:EC:65:DA:66:27:62:89:47:22:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.88.0/24
                IPv6:
                  2602:fab0:20::-2602:fab0:4f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:05:a1:8d:bf:07:0c:e2:f9:6e:f0:b0:53:b5:7e:6e:8e:
         33:bd:ab:d6:ca:c5:33:c4:74:17:38:94:36:42:77:c6:6d:c0:
         23:18:73:f1:ad:af:f3:0a:90:cd:a9:0e:bf:18:46:ac:59:59:
         78:42:02:12:fe:1a:92:dd:65:0c:4d:fd:0a:a9:f3:b5:3b:7a:
         9b:a4:d8:69:16:20:67:da:bb:d4:ad:f0:7e:b4:20:bd:c1:b2:
         fc:22:08:5c:ef:8d:04:89:a7:08:66:65:e4:31:5a:cb:91:9b:
         9e:a4:9e:cc:9d:2d:bf:b7:a2:ba:c7:52:6d:70:a5:8f:2d:88:
         f3:31:32:c7:14:a5:a7:c6:08:28:91:e4:c1:23:47:a2:29:61:
         55:06:e7:f1:d0:fd:5e:9a:50:a2:a5:1b:2f:0d:11:f0:3c:d9:
         c2:87:3f:d2:93:a4:02:54:74:66:a5:cc:24:44:f8:a5:29:ad:
         05:5f:7c:6d:81:6f:10:33:d8:58:9c:1f:77:71:eb:3b:72:d3:
         96:9a:ea:ca:bf:cb:2e:60:64:73:cd:83:b4:42:40:00:28:4a:
         95:aa:1f:fc:c9:5c:18:99:d0:cc:41:61:15:f2:87:64:aa:53:
         ee:c1:f3:88:8e:38:02:9d:38:24:16:80:4b:9f:b6:58:89:40:
         e0:c0:17:24
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE0JEmnuR37kqX69UIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh
MjdlMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
NjY2ODdkMTUtNGU4ZS00NmNiLTkzNTEtMGNiYjcyMTdkOWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tSSzk47ztM/QoqebsbO1f3wgCpqItcWdblg
WbQ2RkRd+VTTCiuQfFkG0urdLvgYR7Z54Me8ABd6r3PZChUtFh7mAR84eRVe02gO
KCy6kasfnnQiLm46D8qjURwu/BFN33E3eY705c+bKs3xOZmEJmIlOOedozI+r5tj
154dKcvfmu2GcWosetQ9JyuJdCTCJBIr8o2IjFctP25m74Mnw6c7kHDJn/KiaDys
0FsF/NDVYih1hy73P1ppVryIUiEHL32/bstFKs5zTb/HHfoyQAouNtFpYvJaSpQw
idaalb8gyPLiQMigm7H8SnEGIge4f85Eh18k/WRBhhK9oZ2e7QIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFCB22NOodidWD3PsZdpmJ2KJRyJTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi
YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvY2E2MmYxYTUtNWVjYi0z
MDQwLTg1ZjMtMWY4YjZjY2FkNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1
ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm
YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1
OWUxZmEyN2UuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAF5JYMBoE
AgACMBQwEgMHBSYC+rAAIAMHBCYC+rAAQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNLQWhjb8HDOL5bvCw
U7V+bo4zvavWysUzxHQXOJQ2QnfGbcAjGHPxra/zCpDNqQ6/GEasWVl4QgIS/hqS
3WUMTf0KqfO1O3qbpNhpFiBn2rvUrfB+tCC9wbL8Ighc740EiacIZmXkMVrLkZue
pJ7MnS2/t6K6x1JtcKWPLYjzMTLHFKWnxggokeTBI0eiKWFVBufx0P1emlCipRsv
DRHwPNnChz/Sk6QCVHRmpcwkRPilKa0FX3xtgW8QM9hYnB93ces7ctOWmurKv8su
YGRzzYO0QkAAKEqVqh/8yVwYmdDMQWEV8odkqlPuwfOIjjgCnTgkFoBLn7ZYiUDg
wBck
-----END CERTIFICATE-----
Generated at Sun Mar 22 09:29:42 2026 by rpki-client