Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/1c3c5206-4853-33db-affb-6a400827364e.roa
File:                     1c3c5206-4853-33db-affb-6a400827364e.roa (raw, json)
Hash identifier:          b79AvFtuKJ5bDSBIQ7YfP5eTFrxVJGIDVVYJ47JO8II=
Subject key identifier:   22:08:43:4C:A0:32:AB:97:89:FC:85:05:01:B6:16:47:15:34:0F:C9
Certificate issuer:       /CN=624e00b7-d261-42a6-9d37-4a83f37b3d5b
Certificate serial:       010D0C9F4328584E043633960C7E8F36A1CE1AA0
Authority key identifier: DA:78:AC:82:F0:6C:66:8A:CF:2D:1A:CB:75:57:3E:7A:A1:AF:1B:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/1c3c5206-4853-33db-affb-6a400827364e.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     23437
IP address blocks:        23.153.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:33:96:0c:7e:8f:36:a1:ce:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624e00b7-d261-42a6-9d37-4a83f37b3d5b
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=9d8592ed-27e4-42fd-90c2-425d7e7a1c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:fd:df:9e:8c:64:f7:0b:57:2e:9e:92:11:
                    1e:7a:c2:60:f7:72:ae:15:52:5c:ed:41:17:40:eb:
                    f6:aa:83:e0:07:1a:0d:27:d4:b4:8e:a7:1f:89:8c:
                    6d:65:3a:94:68:36:9b:a0:b5:97:b1:cb:d7:e3:52:
                    dd:df:24:39:7e:fc:56:95:1f:21:1e:d5:d5:36:6c:
                    34:6e:33:ad:1f:2d:ec:41:80:50:79:98:6e:b1:fc:
                    93:47:55:41:bc:39:22:9b:3c:5f:b9:ef:a5:71:96:
                    9f:6d:cc:ac:c0:41:4a:54:c1:32:2e:78:5b:9f:37:
                    2c:29:79:ad:4e:0f:e5:33:06:6d:80:10:ab:d8:d5:
                    db:89:9b:73:0d:ee:e6:49:63:35:cd:d9:70:8f:e2:
                    40:59:50:1a:e1:b6:90:31:ed:c6:8a:d4:69:a7:c1:
                    1b:dc:1f:ba:91:a3:36:3e:86:aa:bb:ac:3e:78:c4:
                    f7:fd:9a:34:90:86:ea:6c:43:7c:0b:01:9c:d4:7d:
                    af:e0:85:66:f1:6d:57:d8:e2:26:85:1c:b6:22:3b:
                    a8:7c:1d:8c:8a:9e:28:ec:84:c7:6f:f5:af:a4:39:
                    ce:c2:aa:7d:ee:0a:af:38:91:50:cc:82:37:75:e8:
                    8a:59:f3:c5:99:ef:5d:63:55:be:1d:b8:72:fb:d8:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:08:43:4C:A0:32:AB:97:89:FC:85:05:01:B6:16:47:15:34:0F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/1c3c5206-4853-33db-affb-6a400827364e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.crl

            X509v3 Authority Key Identifier:
                keyid:DA:78:AC:82:F0:6C:66:8A:CF:2D:1A:CB:75:57:3E:7A:A1:AF:1B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:94:80:07:6c:c3:77:7e:0c:24:39:91:15:5c:d2:10:0a:bf:
         9e:c3:0f:4d:f2:46:fe:ac:ec:7b:ad:b2:c5:3a:36:f0:d7:b8:
         e8:4f:b7:af:d1:59:25:8f:de:8a:3d:68:8f:01:c3:b9:08:7d:
         e3:61:6b:a4:9a:94:31:0c:90:e4:67:93:71:9f:55:5f:ff:27:
         38:29:d3:20:08:39:93:9b:16:21:5b:c3:22:32:7b:a5:20:bc:
         2c:37:3f:c2:b9:24:0b:4d:c8:ee:07:73:8f:a6:db:e5:09:40:
         e3:52:81:c9:d9:38:2a:1b:86:c9:b9:a7:be:20:9d:a7:b8:06:
         c7:0a:2b:d0:64:78:bc:90:6b:e1:30:17:35:91:76:3f:bb:bf:
         2a:43:6f:3f:59:18:d9:2d:ed:6a:ef:d1:b0:e9:0e:f2:a2:83:
         46:c3:45:76:0b:0d:74:bf:b4:2e:bb:13:03:21:aa:29:bf:47:
         f4:0a:c1:52:c0:59:44:bd:77:66:a7:9e:e3:eb:8b:89:75:7c:
         62:e4:e6:84:cd:bb:29:3a:3a:f0:cf:7c:89:97:00:f2:52:09:
         fe:9f:f9:b0:8f:91:ce:e9:9b:89:bb:1f:81:6f:bf:11:42:69:
         db:c3:99:0a:5d:d4:2e:a8:d5:89:07:45:54:c3:ab:ae:4f:c9:
         33:7f:0c:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENjOWDH6PNqHOGqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjI0ZTAwYjctZDI2MS00MmE2LTlkMzctNGE4M2YzN2Iz
ZDViMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
OWQ4NTkyZWQtMjdlNC00MmZkLTkwYzItNDI1ZDdlN2ExYzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ39356MZPcLVy6ekhEeesJg93KuFVJc7UEX
QOv2qoPgBxoNJ9S0jqcfiYxtZTqUaDaboLWXscvX41Ld3yQ5fvxWlR8hHtXVNmw0
bjOtHy3sQYBQeZhusfyTR1VBvDkimzxfue+lcZafbcyswEFKVMEyLnhbnzcsKXmt
Tg/lMwZtgBCr2NXbiZtzDe7mSWM1zdlwj+JAWVAa4baQMe3GitRpp8Eb3B+6kaM2
Poaqu6w+eMT3/Zo0kIbqbEN8CwGc1H2v4IVm8W1X2OImhRy2IjuofB2Mip4o7ITH
b/WvpDnOwqp97gqvOJFQzII3deiKWfPFme9dY1W+Hbhy+9jFAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCIIQ0ygMquXifyFBQG2FkcVNA/JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MjRl
MDBiNy1kMjYxLTQyYTYtOWQzNy00YTgzZjM3YjNkNWIvMWMzYzUyMDYtNDg1My0z
M2RiLWFmZmItNmE0MDA4MjczNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjI0ZTAwYjctZDI2MS00MmE2LTlk
MzctNGE4M2YzN2IzZDViLzYyNGUwMGI3LWQyNjEtNDJhNi05ZDM3LTRhODNmMzdi
M2Q1Yi5jcmwwHwYDVR0jBBgwFoAU2nisgvBsZorPLRrLdVc+eqGvGwEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82MjRlMDBiNy1kMjYxLTQyYTYtOWQzNy00YTgz
ZjM3YjNkNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5m4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaUgAdsw3d+DCQ5kRVc0hAKv57DD03yRv6s7HutssU6NvDXuOhPt6/R
WSWP3oo9aI8Bw7kIfeNha6SalDEMkORnk3GfVV//Jzgp0yAIOZObFiFbwyIye6Ug
vCw3P8K5JAtNyO4Hc4+m2+UJQONSgcnZOCobhsm5p74gnae4BscKK9BkeLyQa+Ew
FzWRdj+7vypDbz9ZGNkt7Wrv0bDpDvKig0bDRXYLDXS/tC67EwMhqim/R/QKwVLA
WUS9d2annuPri4l1fGLk5oTNuyk6OvDPfImXAPJSCf6f+bCPkc7pm4m7H4FvvxFC
advDmQpd1C6o1YkHRVTDq65PyTN/DCY=
-----END CERTIFICATE-----
Generated at Thu Jun 4 18:20:52 2026 by rpki-client