Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/ead6bfb2-9d7d-308e-a935-88411336ffc6.roa
File:                     ead6bfb2-9d7d-308e-a935-88411336ffc6.roa (raw, json)
Hash identifier:          NiB+76qkIjnbcK+AYjZqRaX4C85PTFCPveyEnybDuYI=
Subject key identifier:   0B:37:5F:A2:A6:DE:7F:84:B0:27:39:75:7E:11:6E:A7:AB:24:49:2E
Certificate issuer:       /CN=398d0b70-b801-4a07-bcdd-88f7f05efa5b
Certificate serial:       010D0C9F4328584F8DD8944A9576EDCADE5260A0
Authority key identifier: DB:B0:36:C6:19:B5:7A:6E:C2:09:BB:F3:23:1A:D9:B9:8A:AC:FE:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/ead6bfb2-9d7d-308e-a935-88411336ffc6.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     215748
IP address blocks:        23.139.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:94:4a:95:76:ed:ca:de:52:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398d0b70-b801-4a07-bcdd-88f7f05efa5b
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=886973e2-1fd9-4328-a415-482e8392768e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b0:e5:f1:cc:db:66:6f:97:b5:db:2a:12:f6:
                    af:ad:62:63:de:19:b9:31:a8:32:47:6a:04:ca:6d:
                    50:50:14:14:56:c0:f0:2d:b3:79:f5:ba:e3:b2:ba:
                    85:31:95:e0:7e:9f:be:3c:3a:21:ab:b1:0a:92:f3:
                    e3:ba:f2:da:03:d4:8a:a0:a1:14:ef:db:22:f7:21:
                    9b:a3:cc:65:e6:f9:34:86:d1:09:d9:ce:e4:ec:bd:
                    0f:e2:0c:35:58:f1:a5:a2:c2:e7:eb:3f:43:a8:7d:
                    dc:20:38:3d:a2:cf:6e:dd:d5:71:ef:13:f2:fa:33:
                    4d:b3:96:b2:26:23:84:fb:98:1f:32:52:2e:a4:d2:
                    db:40:ac:23:e7:47:27:a7:be:82:af:85:ea:9e:1c:
                    3d:11:4c:7b:07:9e:f4:50:75:d2:e9:aa:6b:c8:dd:
                    b2:92:60:ac:13:d2:c5:f8:46:9e:a5:5f:16:f9:8b:
                    05:ff:d1:42:50:6c:12:ee:37:fd:44:ea:25:46:51:
                    5c:09:9d:af:07:0a:fa:86:bd:29:94:d3:3b:14:00:
                    e4:4c:24:df:9a:ba:22:35:7c:a1:7f:1f:f9:28:14:
                    fc:22:70:14:38:54:b2:35:c0:cd:e5:fd:b2:aa:05:
                    09:a4:7d:87:4c:5d:ad:96:79:4e:6f:36:77:8c:68:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:37:5F:A2:A6:DE:7F:84:B0:27:39:75:7E:11:6E:A7:AB:24:49:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/ead6bfb2-9d7d-308e-a935-88411336ffc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:B0:36:C6:19:B5:7A:6E:C2:09:BB:F3:23:1A:D9:B9:8A:AC:FE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:29:ee:4f:31:82:23:36:23:90:0f:a5:0c:41:54:02:c6:
         5d:a7:37:f4:31:92:8c:43:9a:37:6c:23:1a:2f:5a:7a:24:a0:
         33:44:10:3d:9b:07:90:b7:bf:cd:83:63:c1:3e:c8:d3:f5:4e:
         9d:b1:dd:24:27:df:b3:49:2d:07:2e:f8:ea:1c:84:49:ac:e8:
         23:c4:3b:e8:50:83:fd:22:44:09:c0:a5:f1:de:5b:76:a6:a3:
         e4:cd:dd:e7:44:c1:2d:ee:27:5e:55:02:62:a3:ba:f0:7a:6c:
         4f:d5:a8:2e:ef:36:fb:a0:d8:0a:46:57:dd:39:7c:a7:90:11:
         d2:46:31:9f:42:c8:4d:5d:88:56:40:36:8b:9b:bc:8d:b1:04:
         e4:be:dc:47:f7:e3:46:dd:f4:66:95:93:87:d0:d0:f8:fe:3b:
         08:7c:54:dd:a6:62:8b:fc:d6:7d:10:39:69:5a:c6:fb:dd:32:
         e5:6e:36:21:e7:b7:27:a7:a8:3a:3d:d7:d9:97:19:bd:00:6b:
         9d:fa:dc:93:32:ad:7e:fc:a3:e6:95:6e:a0:79:4f:90:d2:36:
         7e:1b:7c:0c:1f:79:e9:55:3e:f9:8f:78:51:0d:30:26:8d:bf:
         55:92:a7:f1:e9:73:d5:30:4e:e4:23:e9:da:ce:30:d0:32:54:
         2a:8b:48:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2JRKlXbtyt5SYKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk4ZDBiNzAtYjgwMS00YTA3LWJjZGQtODhmN2YwNWVm
YTViMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk
ODg2OTczZTItMWZkOS00MzI4LWE0MTUtNDgyZTgzOTI3NjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbDl8czbZm+XtdsqEvavrWJj3hm5MagyR2oE
ym1QUBQUVsDwLbN59brjsrqFMZXgfp++PDohq7EKkvPjuvLaA9SKoKEU79si9yGb
o8xl5vk0htEJ2c7k7L0P4gw1WPGlosLn6z9DqH3cIDg9os9u3dVx7xPy+jNNs5ay
JiOE+5gfMlIupNLbQKwj50cnp76Cr4Xqnhw9EUx7B570UHXS6apryN2ykmCsE9LF
+EaepV8W+YsF/9FCUGwS7jf9ROolRlFcCZ2vBwr6hr0plNM7FADkTCTfmroiNXyh
fx/5KBT8InAUOFSyNcDN5f2yqgUJpH2HTF2tlnlObzZ3jGhUeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAs3X6Km3n+EsCc5dX4RbqerJEkuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOThk
MGI3MC1iODAxLTRhMDctYmNkZC04OGY3ZjA1ZWZhNWIvZWFkNmJmYjItOWQ3ZC0z
MDhlLWE5MzUtODg0MTEzMzZmZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk4ZDBiNzAtYjgwMS00YTA3LWJj
ZGQtODhmN2YwNWVmYTViLzM5OGQwYjcwLWI4MDEtNGEwNy1iY2RkLTg4ZjdmMDVl
ZmE1Yi5jcmwwHwYDVR0jBBgwFoAU27A2xhm1em7CCbvzIxrZuYqs/qEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOThkMGI3MC1iODAxLTRhMDctYmNkZC04OGY3
ZjA1ZWZhNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4tUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDYKe5PMYIjNiOQD6UMQVQCxl2nN/QxkoxDmjdsIxovWnokoDNEED2b
B5C3v82DY8E+yNP1Tp2x3SQn37NJLQcu+OochEms6CPEO+hQg/0iRAnApfHeW3am
o+TN3edEwS3uJ15VAmKjuvB6bE/VqC7vNvug2ApGV905fKeQEdJGMZ9CyE1diFZA
NoubvI2xBOS+3Ef340bd9GaVk4fQ0Pj+Owh8VN2mYov81n0QOWlaxvvdMuVuNiHn
tyenqDo919mXGb0Aa5363JMyrX78o+aVbqB5T5DSNn4bfAwfeelVPvmPeFENMCaN
v1WSp/Hpc9UwTuQj6drOMNAyVCqLSK0=
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:29:00 2026 by rpki-client