Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/abf0ae94-ff77-3c87-bd2a-a8fd5fe550f8.roa
File:                     abf0ae94-ff77-3c87-bd2a-a8fd5fe550f8.roa (raw, json)
Hash identifier:          QKotNBh74o8UpH4K8kbqZWEMmv1Ad72keJS/Uhy2qvs=
Subject key identifier:   85:51:FE:35:B1:21:C7:52:CF:3D:F3:2A:67:82:5A:7E:24:76:DB:93
Certificate issuer:       /CN=8b07b6ac-105e-4d1b-9fca-4a568b4001b8
Certificate serial:       010D0C9F4328584F4974B8FF5E145110A68CD980
Authority key identifier: CD:C8:6F:37:E5:90:55:B1:2E:41:DA:56:AC:65:6D:17:46:67:68:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/abf0ae94-ff77-3c87-bd2a-a8fd5fe550f8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8095
IP address blocks:        23.178.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b8:ff:5e:14:51:10:a6:8c:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b07b6ac-105e-4d1b-9fca-4a568b4001b8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=983405aa-ed45-4ceb-a723-8af7e2c3d82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:df:e8:f7:d0:9f:c3:90:2c:85:c5:70:52:
                    4c:87:c9:c0:4c:2a:8d:f2:21:5e:f9:db:8d:73:a8:
                    9a:0a:5f:47:ed:0e:2e:3c:37:46:24:22:f8:2f:a3:
                    7e:e7:cf:2e:1f:1c:86:dd:8f:60:dc:98:7f:66:9e:
                    0c:1c:f7:99:53:e4:27:e2:dd:d9:04:eb:9f:ee:3f:
                    f0:61:37:71:e7:0c:2c:ff:ee:03:d5:3e:2c:05:ef:
                    bf:90:86:f6:fd:e5:2a:fe:3f:67:e7:08:98:55:60:
                    00:e0:7a:e2:65:aa:88:53:d8:b2:e1:7b:48:f0:da:
                    ce:fc:f2:4f:58:67:93:28:43:b2:6a:f6:ad:50:73:
                    42:f4:ae:b0:34:b2:d8:86:f2:2c:ac:1c:d4:a2:da:
                    76:81:4d:26:5c:ab:a4:30:ac:0e:5a:b8:72:5b:b7:
                    5d:fe:81:f1:ab:99:8b:d8:d3:54:3c:0c:b1:3e:4c:
                    46:44:f2:0a:d2:29:34:b7:6d:24:19:47:fa:7a:7a:
                    7a:32:fb:31:91:70:ef:e6:b8:f9:71:18:b5:f6:5a:
                    2a:27:07:63:61:12:f2:eb:fc:23:f3:6f:28:34:26:
                    72:c7:32:42:25:3d:7f:e7:04:48:58:4a:86:8a:b1:
                    9e:58:9c:24:40:2b:54:98:ce:e6:4e:8b:2c:3a:ef:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:FE:35:B1:21:C7:52:CF:3D:F3:2A:67:82:5A:7E:24:76:DB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/abf0ae94-ff77-3c87-bd2a-a8fd5fe550f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.crl

            X509v3 Authority Key Identifier:
                keyid:CD:C8:6F:37:E5:90:55:B1:2E:41:DA:56:AC:65:6D:17:46:67:68:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:16:cf:47:6d:74:01:dd:1a:35:45:f3:89:c7:e3:7d:1f:fe:
         d6:96:fa:e6:11:22:97:25:22:ac:b5:cf:c8:f3:c2:65:ed:39:
         79:e6:f2:81:3f:74:59:55:32:d2:6c:e5:9e:83:c7:69:93:f3:
         63:c4:18:6f:5f:9f:77:bc:5d:57:9d:27:d7:f2:66:4a:12:c9:
         5c:77:8e:d5:51:24:45:68:65:6c:60:6f:b8:ef:19:86:93:ce:
         53:68:58:b5:db:b4:9c:82:b6:28:d7:f8:38:32:32:1f:72:d0:
         e8:8d:39:3a:21:7f:56:af:ed:78:95:07:ed:02:b0:67:a6:f5:
         40:81:85:4e:97:de:80:49:70:56:0b:15:ea:25:4c:fb:e1:6e:
         3a:c2:9b:65:09:82:b6:7f:ec:38:e2:f6:04:e9:74:15:60:da:
         cd:8a:f4:3f:e3:7e:3f:df:a8:42:72:05:7c:0a:fb:f0:78:80:
         8b:36:ad:a5:5f:65:9f:9d:0b:5f:8a:12:88:c3:c4:10:49:52:
         5c:5f:e7:d7:3a:d6:33:6a:ec:89:b5:78:31:de:2b:11:f8:a1:
         f4:20:da:59:a6:f9:a8:9a:35:39:92:d7:77:5b:f1:aa:ec:5c:
         40:d8:4c:72:21:d3:80:42:ad:68:8e:60:b9:b0:87:4b:f9:bb:
         8f:c7:14:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLj/XhRREKaM2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIwN2I2YWMtMTA1ZS00ZDFiLTlmY2EtNGE1NjhiNDAw
MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTgzNDA1YWEtZWQ0NS00Y2ViLWE3MjMtOGFmN2UyYzNkODJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ7f6PfQn8OQLIXFcFJMh8nATCqN8iFe+duN
c6iaCl9H7Q4uPDdGJCL4L6N+588uHxyG3Y9g3Jh/Zp4MHPeZU+Qn4t3ZBOuf7j/w
YTdx5wws/+4D1T4sBe+/kIb2/eUq/j9n5wiYVWAA4HriZaqIU9iy4XtI8NrO/PJP
WGeTKEOyavatUHNC9K6wNLLYhvIsrBzUotp2gU0mXKukMKwOWrhyW7dd/oHxq5mL
2NNUPAyxPkxGRPIK0ik0t20kGUf6enp6MvsxkXDv5rj5cRi19loqJwdjYRLy6/wj
828oNCZyxzJCJT1/5wRIWEqGirGeWJwkQCtUmM7mTossOu9agQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVR/jWxIcdSzz3zKmeCWn4kdtuTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84YjA3
YjZhYy0xMDVlLTRkMWItOWZjYS00YTU2OGI0MDAxYjgvYWJmMGFlOTQtZmY3Ny0z
Yzg3LWJkMmEtYThmZDVmZTU1MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGIwN2I2YWMtMTA1ZS00ZDFiLTlm
Y2EtNGE1NjhiNDAwMWI4LzhiMDdiNmFjLTEwNWUtNGQxYi05ZmNhLTRhNTY4YjQw
MDFiOC5jcmwwHwYDVR0jBBgwFoAUzchvN+WQVbEuQdpWrGVtF0ZnaBYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84YjA3YjZhYy0xMDVlLTRkMWItOWZjYS00YTU2
OGI0MDAxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7LoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoWz0dtdAHdGjVF84nH430f/taW+uYRIpclIqy1z8jzwmXtOXnm8oE/
dFlVMtJs5Z6Dx2mT82PEGG9fn3e8XVedJ9fyZkoSyVx3jtVRJEVoZWxgb7jvGYaT
zlNoWLXbtJyCtijX+DgyMh9y0OiNOTohf1av7XiVB+0CsGem9UCBhU6X3oBJcFYL
FeolTPvhbjrCm2UJgrZ/7Dji9gTpdBVg2s2K9D/jfj/fqEJyBXwK+/B4gIs2raVf
ZZ+dC1+KEojDxBBJUlxf59c61jNq7Im1eDHeKxH4ofQg2lmm+aiaNTmS13db8ars
XEDYTHIh04BCrWiOYLmwh0v5u4/HFOI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:37:24 2026 by rpki-client