Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/1c82f9e4-a21e-3b28-8fc1-5bd55ec8c903.roa
File:                     1c82f9e4-a21e-3b28-8fc1-5bd55ec8c903.roa (raw, json)
Hash identifier:          sCajxMooqYk9gzG7SMC9I4aTEC27SpnLhZEna5Q1Eu4=
Subject key identifier:   E1:FB:14:A0:D4:D2:BE:08:E3:20:0A:C8:05:7E:66:5E:52:F8:7A:87
Certificate issuer:       /CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306
Certificate serial:       010D0C9F4328584DEC7B1FE9A5598BB229094F80
Authority key identifier: 63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/1c82f9e4-a21e-3b28-8fc1-5bd55ec8c903.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     46850
IP address blocks:        23.137.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:1f:e9:a5:59:8b:b2:29:09:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=f0f2e093-0166-4ff6-b0cd-c8786e1873cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bf:26:2b:cc:c9:bb:58:23:7c:8b:88:ad:63:
                    09:ff:64:1c:bb:83:46:10:20:a2:d7:24:73:35:86:
                    bb:93:dc:1b:64:36:14:2c:98:cc:5f:15:97:67:97:
                    e3:95:8e:18:24:e8:74:77:8e:8b:bb:b0:9e:a7:29:
                    75:b6:79:f0:cd:ec:0b:57:63:e8:a4:14:8e:a2:d7:
                    ea:95:a2:08:ff:31:f8:96:27:2c:25:e9:df:e2:b1:
                    ec:4a:31:06:78:a3:47:9d:5b:e0:f9:76:e0:be:4a:
                    00:eb:c5:97:a8:92:5d:20:e9:09:94:fc:50:57:34:
                    7f:93:25:49:dd:be:cd:0c:d3:51:69:73:1e:8e:d9:
                    cc:de:f1:fd:3e:42:70:77:9b:83:7a:24:a1:d4:2a:
                    cc:e8:f6:61:17:e3:fb:31:53:3b:56:6d:45:1c:ac:
                    80:66:1a:82:45:77:6d:b8:81:63:9e:a2:f1:a1:34:
                    3a:45:9a:0f:6b:67:be:42:47:bd:71:11:05:43:57:
                    5c:09:40:35:50:7f:02:6f:e1:ee:57:5a:05:a3:d2:
                    48:00:ed:9c:98:c7:50:94:f5:b7:bf:9b:9a:09:0e:
                    b0:f2:d4:13:07:4e:fd:1f:f8:2f:04:83:44:45:08:
                    34:39:4b:4a:99:21:7f:79:ff:d6:83:83:2a:1f:03:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FB:14:A0:D4:D2:BE:08:E3:20:0A:C8:05:7E:66:5E:52:F8:7A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/1c82f9e4-a21e-3b28-8fc1-5bd55ec8c903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl

            X509v3 Authority Key Identifier:
                keyid:63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:94:2b:ce:a3:0e:4e:c9:a2:b4:c1:b4:0f:c6:3d:4e:65:64:
         0a:91:cc:f1:42:dc:3d:be:cb:d2:f4:1e:c7:c8:8a:7c:e0:6b:
         8f:d9:98:91:5e:38:f9:6b:f3:6f:66:1d:77:87:7b:18:7b:63:
         45:51:4b:b4:9e:47:3e:1b:e6:c7:cc:11:cb:34:af:e3:37:57:
         ab:d0:e4:51:d9:d1:e3:48:2c:a1:f1:bf:d8:fe:08:a0:db:4b:
         b1:cf:7d:5a:06:9a:3b:00:a6:be:7d:ec:67:87:29:5d:f1:0c:
         e4:70:31:a8:bf:f0:ae:58:f1:f1:af:e0:d7:d0:d4:45:4b:79:
         6a:fb:71:a7:56:bb:5b:00:16:57:0f:c8:aa:ea:39:97:75:67:
         2c:c0:fe:7d:f2:a0:63:c6:0e:62:a3:af:fd:0c:c5:68:6a:97:
         76:46:28:02:e0:7e:2e:78:cd:9f:3c:06:18:b3:dc:c4:20:91:
         76:e5:13:05:6a:37:aa:2f:b1:9c:c7:f9:f1:60:c3:15:a0:41:
         b8:93:11:b0:e5:20:a0:65:0a:45:d9:b5:17:ed:27:2e:72:bc:
         1c:ed:b2:b4:c5:40:60:cd:fc:0d:fc:7d:e7:56:a6:4d:60:ba:
         08:21:1f:12:b8:1f:8a:6c:e4:d4:bb:b3:c8:a5:d8:c7:dc:a2:
         b0:ff:43:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3sex/ppVmLsikJT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2IwYmJkN2UtY2VjZi00ZjEyLTkwMDktMDQ4YzBjZmJm
MzA2MB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk
ZjBmMmUwOTMtMDE2Ni00ZmY2LWIwY2QtYzg3ODZlMTg3M2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL8mK8zJu1gjfIuIrWMJ/2Qcu4NGECCi1yRz
NYa7k9wbZDYULJjMXxWXZ5fjlY4YJOh0d46Lu7Cepyl1tnnwzewLV2PopBSOotfq
laII/zH4licsJenf4rHsSjEGeKNHnVvg+XbgvkoA68WXqJJdIOkJlPxQVzR/kyVJ
3b7NDNNRaXMejtnM3vH9PkJwd5uDeiSh1CrM6PZhF+P7MVM7Vm1FHKyAZhqCRXdt
uIFjnqLxoTQ6RZoPa2e+Qke9cREFQ1dcCUA1UH8Cb+HuV1oFo9JIAO2cmMdQlPW3
v5uaCQ6w8tQTB079H/gvBINERQg0OUtKmSF/ef/Wg4MqHwPrdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOH7FKDU0r4I4yAKyAV+Zl5S+HqHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBi
YmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhjMGNmYmYzMDYvMWM4MmY5ZTQtYTIxZS0z
YjI4LThmYzEtNWJkNTVlYzhjOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2IwYmJkN2UtY2VjZi00ZjEyLTkw
MDktMDQ4YzBjZmJmMzA2LzNiMGJiZDdlLWNlY2YtNGYxMi05MDA5LTA0OGMwY2Zi
ZjMwNi5jcmwwHwYDVR0jBBgwFoAUY9+yo6uZoJShuuid+Uf9EijBrBwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBiYmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhj
MGNmYmYzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4mUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWUK86jDk7JorTBtA/GPU5lZAqRzPFC3D2+y9L0HsfIinzga4/ZmJFe
OPlr829mHXeHexh7Y0VRS7SeRz4b5sfMEcs0r+M3V6vQ5FHZ0eNILKHxv9j+CKDb
S7HPfVoGmjsApr597GeHKV3xDORwMai/8K5Y8fGv4NfQ1EVLeWr7cadWu1sAFlcP
yKrqOZd1ZyzA/n3yoGPGDmKjr/0MxWhql3ZGKALgfi54zZ88Bhiz3MQgkXblEwVq
N6ovsZzH+fFgwxWgQbiTEbDlIKBlCkXZtRftJy5yvBztsrTFQGDN/A38fedWpk1g
ugghHxK4H4ps5NS7s8il2MfcorD/Q2Q=
-----END CERTIFICATE-----
Generated at Sat May 30 15:45:04 2026 by rpki-client