Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754/c5ac49fa-4f0d-36fe-9e06-7a6097f8b120.roa
File:                     c5ac49fa-4f0d-36fe-9e06-7a6097f8b120.roa (raw, json)
Hash identifier:          UD3KRV/7Fgw1qvh9XE7WynGeJcv2Bm6J0lqilJ+CYuY=
Subject key identifier:   47:53:EC:38:61:79:5A:23:D9:A3:2D:59:5F:13:E6:AD:AB:5B:86:EF
Certificate issuer:       /CN=c189102b-3762-4542-8815-ce6e93c45754
Certificate serial:       010D0C9F4328584E683F5E412705F19F29904900
Authority key identifier: 1A:3A:3C:26:E9:39:BE:74:C7:DB:5B:05:33:8D:C9:08:FA:65:9E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754/c5ac49fa-4f0d-36fe-9e06-7a6097f8b120.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     8143
IP address blocks:        23.137.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754/c189102b-3762-4542-8815-ce6e93c45754.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754/c189102b-3762-4542-8815-ce6e93c45754.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:5e:41:27:05:f1:9f:29:90:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c189102b-3762-4542-8815-ce6e93c45754
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=972bc757-aa58-4315-a207-82c8a964e8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:db:cc:fc:34:71:13:56:2c:bf:72:d2:7d:
                    75:dd:24:ab:5f:c7:41:56:6b:7b:4d:d3:66:8c:4c:
                    87:6c:b0:91:0b:72:fd:1d:f5:6a:c2:98:af:39:19:
                    d8:21:b4:f3:dc:c1:39:0b:e0:ea:25:22:e0:ba:8b:
                    95:3e:c9:c1:27:3d:d9:a8:5b:4d:c4:bb:77:dd:2c:
                    ce:13:50:61:24:d2:64:12:4e:ef:5f:85:0f:96:d3:
                    2b:b1:57:5d:1c:4f:ea:f1:09:0e:d9:17:77:99:83:
                    bd:a8:15:91:c0:1a:26:87:f1:9f:b5:e2:ff:7e:d5:
                    36:4d:02:dc:08:ea:fd:87:ec:63:a8:33:99:ce:8a:
                    52:3d:09:21:da:b7:6c:a0:e0:ee:ad:d4:3c:e3:4b:
                    ee:46:f0:9c:5d:bd:3b:d1:c4:f7:70:71:e7:fa:32:
                    f0:8d:d6:f4:6f:01:21:8d:6b:b4:65:71:ae:6b:47:
                    8e:fd:e7:a3:c8:e6:13:b4:cc:bd:b8:60:3a:96:f3:
                    01:21:63:3b:7a:93:21:dc:98:79:cc:07:30:8c:ad:
                    d9:88:48:ec:02:73:a2:d6:e0:87:f1:8f:fe:b5:08:
                    bf:40:d0:1f:d3:b6:6d:f0:15:39:cc:f5:85:48:77:
                    9c:1c:b9:0c:23:2e:35:e3:d2:f6:bd:f9:82:b3:2d:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:EC:38:61:79:5A:23:D9:A3:2D:59:5F:13:E6:AD:AB:5B:86:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754/c5ac49fa-4f0d-36fe-9e06-7a6097f8b120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754/c189102b-3762-4542-8815-ce6e93c45754.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3A:3C:26:E9:39:BE:74:C7:DB:5B:05:33:8D:C9:08:FA:65:9E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c189102b-3762-4542-8815-ce6e93c45754.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:25:6c:dd:87:1f:78:c1:bc:45:bc:c9:91:a1:ab:88:f8:1e:
         3b:d4:05:4f:fa:97:ef:42:76:db:cb:17:50:1d:ea:5b:95:d8:
         d6:1c:5b:70:c5:6a:37:ff:96:ab:db:47:5b:21:4f:b8:51:3b:
         02:52:1a:06:b3:9e:75:fd:2d:5b:8b:67:b0:97:a4:7e:8a:3a:
         ac:47:11:6f:6a:fb:8b:c9:7d:c6:1d:95:63:32:35:89:df:ff:
         8f:ed:d2:ff:35:34:32:46:ce:1d:ec:63:0a:59:92:ca:ea:11:
         92:f6:01:34:e8:26:fe:7d:67:ca:39:2f:5b:d3:31:01:b1:83:
         c0:5f:ab:83:eb:e3:19:f2:74:a2:ad:cc:6a:48:89:03:6e:76:
         9a:ca:02:9d:ec:d3:c0:9d:52:c9:ed:f0:81:cc:cc:4b:23:e2:
         e2:32:6b:e7:89:b5:db:6e:c8:6e:ce:7d:34:97:bd:19:e7:6b:
         d3:7a:ed:1c:4d:e8:48:53:6d:13:86:3f:96:72:69:36:70:ac:
         90:db:a0:5a:80:f7:78:da:eb:77:89:c9:69:1f:93:24:90:c5:
         2f:2f:79:b5:61:da:6c:9c:91:c2:10:81:69:56:28:db:ea:1c:
         0e:07:92:4a:e6:08:ab:00:c9:c8:c4:d1:0d:1e:25:aa:cc:2b:
         35:89:fe:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP15BJwXxnymQSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzE4OTEwMmItMzc2Mi00NTQyLTg4MTUtY2U2ZTkzYzQ1
NzU0MB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk
OTcyYmM3NTctYWE1OC00MzE1LWEyMDctODJjOGE5NjRlOGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKbbzPw0cRNWLL9y0n113SSrX8dBVmt7TdNm
jEyHbLCRC3L9HfVqwpivORnYIbTz3ME5C+DqJSLguouVPsnBJz3ZqFtNxLt33SzO
E1BhJNJkEk7vX4UPltMrsVddHE/q8QkO2Rd3mYO9qBWRwBomh/GfteL/ftU2TQLc
COr9h+xjqDOZzopSPQkh2rdsoODurdQ840vuRvCcXb070cT3cHHn+jLwjdb0bwEh
jWu0ZXGua0eO/eejyOYTtMy9uGA6lvMBIWM7epMh3Jh5zAcwjK3ZiEjsAnOi1uCH
8Y/+tQi/QNAf07Zt8BU5zPWFSHecHLkMIy4149L2vfmCsy14ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEdT7DhheVoj2aMtWV8T5q2rW4bvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jMTg5
MTAyYi0zNzYyLTQ1NDItODgxNS1jZTZlOTNjNDU3NTQvYzVhYzQ5ZmEtNGYwZC0z
NmZlLTllMDYtN2E2MDk3ZjhiMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzE4OTEwMmItMzc2Mi00NTQyLTg4
MTUtY2U2ZTkzYzQ1NzU0L2MxODkxMDJiLTM3NjItNDU0Mi04ODE1LWNlNmU5M2M0
NTc1NC5jcmwwHwYDVR0jBBgwFoAUGjo8Juk5vnTH21sFM43JCPplnlwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jMTg5MTAyYi0zNzYyLTQ1NDItODgxNS1jZTZl
OTNjNDU3NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4mkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADclbN2HH3jBvEW8yZGhq4j4HjvUBU/6l+9CdtvLF1Ad6luV2NYcW3DF
ajf/lqvbR1shT7hROwJSGgaznnX9LVuLZ7CXpH6KOqxHEW9q+4vJfcYdlWMyNYnf
/4/t0v81NDJGzh3sYwpZksrqEZL2ATToJv59Z8o5L1vTMQGxg8Bfq4Pr4xnydKKt
zGpIiQNudprKAp3s08CdUsnt8IHMzEsj4uIya+eJtdtuyG7OfTSXvRnna9N67RxN
6EhTbROGP5ZyaTZwrJDboFqA93ja63eJyWkfkySQxS8vebVh2myckcIQgWlWKNvq
HA4HkkrmCKsAycjE0Q0eJarMKzWJ/kw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:50:24 2026 by rpki-client