Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3/5dc66adc-8556-37a2-93b0-070389e0ff09.roa
File:                     5dc66adc-8556-37a2-93b0-070389e0ff09.roa (raw, json)
Hash identifier:          t/k2H61VLfqQDMTTrLVbnLVfE+pJOYlKbPvAJGw7q4c=
Subject key identifier:   4C:5D:AB:79:1B:62:B7:2E:F5:B7:CF:54:72:23:E9:63:E5:42:48:02
Certificate issuer:       /CN=71b3810f-2a29-4913-88a5-7b03d9765bd3
Certificate serial:       010D0C9F4328584EA7886BF56EB7ED0AC830B7A0
Authority key identifier: 17:40:DB:F1:B6:0D:BD:1A:F9:33:A9:33:FE:A6:45:20:D2:9D:AD:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3/5dc66adc-8556-37a2-93b0-070389e0ff09.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46808
IP address blocks:        23.175.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3/71b3810f-2a29-4913-88a5-7b03d9765bd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3/71b3810f-2a29-4913-88a5-7b03d9765bd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:6b:f5:6e:b7:ed:0a:c8:30:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71b3810f-2a29-4913-88a5-7b03d9765bd3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=de209112-0190-4b87-8a2a-7bd50a0a8948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:7a:c3:66:5b:33:87:a9:b7:ee:7c:82:3a:
                    a1:9d:d4:9e:fe:e4:bd:47:b7:d5:5e:23:86:57:af:
                    06:0b:3d:53:a7:b0:bf:74:cd:c0:00:d6:d6:fb:8f:
                    02:e0:44:38:df:37:0b:b1:bb:ee:10:44:78:b5:ca:
                    e1:4d:9f:64:a9:19:4b:75:57:31:c4:65:0b:38:c7:
                    dc:11:24:93:4e:10:60:70:81:de:f5:68:a7:9b:53:
                    bc:7f:7d:6f:5d:4e:22:8b:5e:5a:54:27:50:17:49:
                    80:5f:55:24:7d:a3:10:f1:76:0c:d3:f3:5a:99:bb:
                    75:95:10:7c:6b:ad:5e:35:2b:13:79:ab:d8:6e:94:
                    b4:56:f4:20:1d:49:f0:e2:fb:91:d9:76:77:b6:da:
                    0b:a0:3e:48:30:0f:cc:ed:a3:28:bd:a2:e5:a9:c2:
                    c4:40:ec:1d:a4:e0:32:df:ea:10:2b:4c:77:00:0b:
                    ce:99:c0:71:0d:7b:f3:b1:f3:5a:1a:78:3b:d7:35:
                    ca:3e:ac:ac:5d:d8:4e:19:8c:d1:52:56:c9:6a:a6:
                    21:42:20:6c:f2:77:d3:b3:af:d2:d8:34:36:cf:43:
                    64:55:be:b8:6b:d0:91:7d:01:13:e7:0d:21:4a:57:
                    43:5a:e1:e4:80:65:bd:3f:33:44:8f:21:fd:e0:74:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5D:AB:79:1B:62:B7:2E:F5:B7:CF:54:72:23:E9:63:E5:42:48:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3/5dc66adc-8556-37a2-93b0-070389e0ff09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3/71b3810f-2a29-4913-88a5-7b03d9765bd3.crl

            X509v3 Authority Key Identifier:
                keyid:17:40:DB:F1:B6:0D:BD:1A:F9:33:A9:33:FE:A6:45:20:D2:9D:AD:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71b3810f-2a29-4913-88a5-7b03d9765bd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:2b:33:fd:cd:a5:0b:98:95:aa:83:f4:0c:5c:98:c8:e4:
         03:40:35:e9:c2:f0:b0:8e:6a:08:a2:c7:11:2d:98:10:37:dd:
         25:42:fa:5d:ec:f4:73:d4:02:4c:44:e5:4a:a0:a1:17:f0:2b:
         ab:d2:61:96:b4:c1:e6:71:86:1f:a5:fa:10:cc:8a:53:55:6b:
         8b:e9:8a:08:72:1b:5b:01:af:dc:0d:07:a2:a8:f6:16:52:ae:
         7c:28:2f:77:a9:42:2e:46:8c:a7:db:8d:13:68:34:a6:74:06:
         e5:de:97:ca:c0:5d:69:ea:cb:01:7d:2b:22:ce:66:70:e8:44:
         bb:e7:d1:d8:ef:ce:06:a8:52:ad:5c:b5:7c:b6:1b:c8:3c:e1:
         98:9a:9d:77:0f:7b:bb:75:8d:ae:0f:06:2c:21:24:f8:ad:0c:
         bf:5b:dd:ce:b0:64:a1:9d:4a:42:ab:41:18:69:8f:e1:fb:ab:
         32:5c:a2:32:be:70:26:ab:76:85:c8:2e:d0:b1:60:fa:b5:59:
         da:e0:8d:b4:7f:2e:bc:20:fd:84:c5:4f:6b:62:9c:75:9b:e7:
         da:d8:9a:51:99:58:17:99:5e:61:fc:54:72:b9:5d:92:30:53:
         69:96:aa:a2:45:5a:25:95:95:80:9a:83:dd:5e:78:38:34:e1:
         1a:9e:57:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGv1brftCsgwt6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFiMzgxMGYtMmEyOS00OTEzLTg4YTUtN2IwM2Q5NzY1
YmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGUyMDkxMTItMDE5MC00Yjg3LThhMmEtN2JkNTBhMGE4OTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6V6w2ZbM4ept+58gjqhndSe/uS9R7fVXiOG
V68GCz1Tp7C/dM3AANbW+48C4EQ43zcLsbvuEER4tcrhTZ9kqRlLdVcxxGULOMfc
ESSTThBgcIHe9Winm1O8f31vXU4ii15aVCdQF0mAX1UkfaMQ8XYM0/Nambt1lRB8
a61eNSsTeavYbpS0VvQgHUnw4vuR2XZ3ttoLoD5IMA/M7aMovaLlqcLEQOwdpOAy
3+oQK0x3AAvOmcBxDXvzsfNaGng71zXKPqysXdhOGYzRUlbJaqYhQiBs8nfTs6/S
2DQ2z0NkVb64a9CRfQET5w0hSldDWuHkgGW9PzNEjyH94HR2GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExdq3kbYrcu9bfPVHIj6WPlQkgCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWIz
ODEwZi0yYTI5LTQ5MTMtODhhNS03YjAzZDk3NjViZDMvNWRjNjZhZGMtODU1Ni0z
N2EyLTkzYjAtMDcwMzg5ZTBmZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFiMzgxMGYtMmEyOS00OTEzLTg4
YTUtN2IwM2Q5NzY1YmQzLzcxYjM4MTBmLTJhMjktNDkxMy04OGE1LTdiMDNkOTc2
NWJkMy5jcmwwHwYDVR0jBBgwFoAUF0Db8bYNvRr5M6kz/qZFINKdre4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWIzODEwZi0yYTI5LTQ5MTMtODhhNS03YjAz
ZDk3NjViZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1OKzP9zaULmJWqg/QMXJjI5ANANenC8LCOagiixxEtmBA33SVC+l3s
9HPUAkxE5UqgoRfwK6vSYZa0weZxhh+l+hDMilNVa4vpighyG1sBr9wNB6Ko9hZS
rnwoL3epQi5GjKfbjRNoNKZ0BuXel8rAXWnqywF9KyLOZnDoRLvn0djvzgaoUq1c
tXy2G8g84ZianXcPe7t1ja4PBiwhJPitDL9b3c6wZKGdSkKrQRhpj+H7qzJcojK+
cCardoXILtCxYPq1WdrgjbR/Lrwg/YTFT2tinHWb59rYmlGZWBeZXmH8VHK5XZIw
U2mWqqJFWiWVlYCag91eeDg04RqeVxs=
-----END CERTIFICATE-----
Generated at Wed Aug 26 11:37:58 2026 by rpki-client